Privacy policy

Konfeti is a BelgaCai project. This page explains what data we collect when you use Konfeti, why, and what your rights are. For any question, write to konfeti@belgacai.com.

• Identity: first name, last name, gender, avatar (photo or preset image)
• Phone number
• Your replies to an event (I'm coming / maybe / I can't make it), your poll votes
• Your "who's bringing what" commitments
• The messages you send in an event's chat
• If you contribute to a pot: the amount of your contribution. Your bank details are never sent to Konfeti: they're entered directly with our payment provider, Stripe
• Minimal technical information (IP address, error logs) to keep the service running properly

Only to make Konfeti work:

• Let you create and join events
• Let the host approve participants and organize their party
• Send you email reminders, only if you've explicitly opted in
• Keep the service secure and diagnose technical issues

Your phone number, full name and gender are never publicly visible: only the organizers and admins of the event you're taking part in have access to them. Other participants only see your first name, the first letter of your last name, and your avatar.

We never sell or share your data with third parties for commercial or advertising purposes.

An event's data (participants, messages, commitments) is automatically deleted about 3 months after the event's date (or after it's cancelled). Your profile (first name, last name, phone) is kept for as long as you use Konfeti, and deleted if you delete your account.

We use the following providers to make Konfeti work:

• Supabase (database, authentication, photo storage), hosted in the European Union
• Vercel (application hosting)
• Brevo (sending reminder emails, if you've consented to it)
• Open-Meteo and Komoot Photon (weather and address lookup, with no personal data shared beyond the event's address)
• Stripe (processing pot payments and paying out funds to the host), as data controller for the bank details it collects itself

Konfeti never has access to your bank details: only Stripe receives them, directly.

Under the GDPR, you have the right to access, rectify and delete your data:

• You can edit your profile directly from the app
• You can delete your account at any time from your profile
• For any other request (access, rectification, objection), write to konfeti@belgacai.com

Konfeti uses one technical cookie necessary for the service to work. See our Manage cookies page for details.