Privacy Policy

1. Introduction

Welcome to GatherX ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

GatherX is an event platform that connects event planners and business owners, facilitating event creation, management, and networking opportunities across the United Arab Emirates.

2. Information We Collect

Personal Information

We collect personal information that you voluntarily provide when using our Service, including:

• Account Information: Name, email address, phone number, user type (event planner or business owner)
• Profile Information: Professional details, business information, profile photos, and descriptions
• Communication Data: Messages, chat history, and other communications through our platform
• Event Data: Event details, booking information, slot preferences, and related metadata
• Payment Information: Billing details and payment method information (processed securely through third-party providers)

Usage Data

We automatically collect information about how you use our Service:

• App usage patterns and feature interactions
• Search queries and browsing behavior
• Time spent on different sections of the app
• Performance and error logs
• Location data (when permission is granted)

Device Information

We collect technical information about your device:

• Device type, model, and operating system
• Unique device identifiers
• IP address and network information
• App version and configuration settings

3. How We Use Your Information

We use the collected information for various purposes:

• Service Provision: To provide, maintain, and improve our Service functionality
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Communication: To send you notifications, updates, security alerts, and administrative messages
• Personalization: To customize your experience and provide relevant content and recommendations
• Analytics: To understand usage patterns and improve our Service performance
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketing: To send promotional materials and updates about new features (with your consent)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With Other Users: Profile information and event details may be visible to other users as part of the platform's functionality
• Service Providers: With trusted third-party companies that provide services on our behalf (cloud hosting, analytics, payment processing)
• Business Transfers: In connection with mergers, acquisitions, or sale of business assets
• Legal Requirements: When required by law, court order, or government authorities
• Safety and Security: To protect our rights, property, safety, and that of our users
• With Your Consent: When you explicitly agree to share information

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: Data transmission is encrypted using industry-standard protocols (TLS/SSL)
• Access Controls: Strict access controls and authentication mechanisms for our systems
• Regular Audits: Regular security assessments and vulnerability testing
• Secure Storage: Data is stored in secure, access-controlled environments
• Employee Training: Regular security training for our team members
• Incident Response: Established procedures for handling security incidents

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to using reasonable measures to protect your data.

6. Data Retention

We retain your personal information for different periods depending on the type of data and purpose:

• Account Data: Retained while your account is active and for a reasonable period afterward
• Communication Data: Retained for up to 3 years for customer service and legal purposes
• Usage Data: Typically retained for 2 years for analytics and service improvement
• Legal Requirements: Some data may be retained longer to comply with legal obligations

When we no longer need your personal information, we will securely delete or anonymize it.

7. Your Rights and Choices

You have several rights regarding your personal information:

• Access: Request access to your personal information we hold
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic functionality and security
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for targeted advertising (with your consent)

You can control cookie settings through your browser or device settings. However, disabling certain cookies may limit functionality.

9. Third-Party Services

Our Service may integrate with third-party services, including:

• Authentication: Google, Apple, and Facebook login services
• Analytics: Firebase Analytics and similar services
• Payment Processing: Secure payment gateways
• Cloud Services: Data storage and hosting services
• Communication: Email and messaging services

These third-party services have their own privacy policies. We encourage you to review their policies before using their services.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Binding corporate rules
• Other legally recognized transfer mechanisms

We are committed to ensuring your data receives the same level of protection regardless of where it is processed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website and app
• Sending you an email notification
• Providing in-app notifications
• Other communication methods as appropriate

Your continued use of our Service after the effective date of the updated Privacy Policy constitutes acceptance of the changes.

14. Data Deletion Policy

Users can request deletion of their account and associated data by visiting our Data Deletion Page. Upon request, we delete personal data including profile, event history, messages, and media uploads, unless we are required by law to retain certain information.

• Requests are processed within 30 days of receipt.
• Some usage and log data may be retained for audit and legal purposes.
• If users request deletion without account removal, selected data may be deleted while retaining basic account details.

15. Data Accessibility & Portability

You have the right to request access to your stored data in a machine-readable format. Upon identity verification, we will provide the requested information via secure delivery within 30 days.

16. SDK and Third-Party Services Disclosure

We use SDKs and libraries that may collect limited device or user data. This includes:

• Firebase (Google): for analytics, crash reporting, messaging, and performance monitoring
• Google Maps SDK: for map functionality and location features
• Facebook, Apple, and Google SDKs: for OAuth-based authentication
• Stripe SDK: for secure payment processing

All third-party SDKs are vetted for compliance and follow appropriate data handling protocols. Users are encouraged to read their respective privacy policies.

17. App Permissions Policy

GatherX requests certain device permissions to deliver its core functionality. These include:

• Location Access: For maps and event discovery
• Camera & Gallery: For uploading photos, videos, and documents
• Push Notifications: To send real-time updates and alerts

All permissions are requested only when required and are fully controlled by users via system settings.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: