Privacy Policy

We collect information you submit when you:

• Register as a Vendor: business name, contact name and role, location, website or social media, email address, phone number, experience description, photos, pricing, and payment details via Stripe Connect.
• Submit an event planning request via /plan: your name, company name, work email, event type, headcount, approximate date, budget estimate, and any preferences you share.
• Communicate with us: any information you include in emails or messages sent to hello@get-innit.com or legal@get-innit.com.

When you use the Platform, we automatically collect:

• Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
• Device information: device type, screen resolution, and unique device identifiers.
• Cookies and similar technologies: session cookies, persistent cookies, and analytics identifiers. See Section 07 for details.

We may receive information about you from:

• Stripe: payment processing status, payout eligibility, and account verification data when you connect a Stripe Express account as a Vendor.
• Analytics providers: aggregated usage data about how visitors interact with the Platform.

We share information with trusted third-party service providers who assist us in operating the Platform, subject to confidentiality obligations:

• Stripe Inc.: payment processing and Vendor payout management.
• Supabase Inc.: database hosting and authentication infrastructure.
• Resend Inc.: transactional email delivery.
• Anthropic PBC: AI-powered features including vendor tagline generation and event-type tagging (processed data only, no personal information is used in AI prompts unless explicitly stated).

When a Vendor is approved and listed on the Platform, their business name, description, photos, neighborhood, pricing tier, and contact information may be visible to Clients browsing the directory. Vendors consent to this visibility by listing on the Platform.

When a Client submits an event planning request, their name, company, email, event details, and preferences may be shared with Innit team members and, if a booking is facilitated, with the relevant Vendor.

We may disclose your information if required to do so by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of Innit, our users, or the public; or (c) detect, prevent, or address fraud or security issues.

If Innit OS, Inc. is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

We may share your information with third parties when you have given us explicit consent to do so.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

You have the right to request access to the personal information we hold about you and to request that we correct any inaccurate or incomplete information. To make a request, contact us at privacy@get-innit.com.

You may request that we delete your personal information. We will honor deletion requests subject to our legal obligations to retain certain records (e.g., financial records required by law). To request deletion, contact privacy@get-innit.com.

You may opt out of marketing emails at any time by clicking "unsubscribe" in any marketing email or by contacting us at hello@get-innit.com. You will continue to receive transactional emails related to your account or active bookings.

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected from you.
• The right to opt out of the sale of your personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise your CCPA rights, contact us at privacy@get-innit.com. We will respond to verified requests within 45 days.

If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) and UK GDPR, including:

• The right to access your personal data.
• The right to rectification of inaccurate data.
• The right to erasure ("right to be forgotten").
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing.
• The right to withdraw consent at any time where processing is based on consent.

Our legal bases for processing your data are: (a) performance of a contract (operating the Platform); (b) legitimate interests (improving our services, preventing fraud); (c) legal obligation; and (d) consent where explicitly obtained.

To exercise your GDPR rights, contact us at privacy@get-innit.com.

We use the following types of cookies and similar technologies:

• Essential cookies: required for the Platform to function, including session authentication and form state.
• Analytics cookies: used to understand how visitors interact with the Platform, including pages visited and time spent. We use privacy-respecting analytics tools.
• Preference cookies: used to remember your settings and preferences.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling essential cookies may affect your ability to use certain features of the Platform.

We do not use cookies for third-party advertising or behavioral tracking.