Privacy Policy

Who is responsible for your data

Code Craze - Krystian Dębecki, Farna 11, 05-660 Warka, Poland, NIP 7972077229, REGON 520122634, is the controller of the personal data processed through PartyMind (https://party-mind.com).

Write to contact@party-mind.com or call +48 782 163 642 about anything on this page. We have not appointed a Data Protection Officer; we are not required to.

The short version

We process what you give us to run the service: who you are (from your Google sign-in), the invitations and plans you make, the answers your guests send, and your payments. We do not sell data, we do not advertise to you, and we do not profile you. Optional tracking is off, and there is nothing behind the optional switches in the cookie banner today.

What we process, why, and for how long

Your account. Your user ID, email address, name and profile picture from Google sign-in, plus counters of how many events and plans you made. We need them to give you an account and to keep your work. Basis: performance of a contract (Art. 6(1)(b) GDPR). Kept while the account exists. When you delete it, we remove your data within 30 days.

Using PartyMind without signing in. If you make an invitation or a plan without signing in, we create a guest account for you: a random user ID kept in your browser, with no name, email or picture. What you make is kept under it, on the same terms as above. If you clear your browser's data or switch device, you lose access to it; signing in with Google keeps it. You can download or delete a guest account's data under Account & privacy, like any other.

Invitations and plans. Everything you type into an invitation or a brief: the party name, date, time, place, dress code, theme, agenda, and the plans generated for you. Basis: performance of a contract. Kept while the account exists, then deleted with it.

Your guests' answers. A guest's name, whether they are coming, how many people they bring, the food preferences they pick and any note they write. We process them to show you who is coming. Basis: performance of our contract with you, and our legitimate interest in running an RSVP page for guests (Art. 6(1)(b) and (f)). An answer is kept for as long as the invitation exists — it is the organiser's record of their party. It goes when the organiser deletes the invitation or their account, and is erased for good within 30 days of that. A guest can also ask us to delete their answer sooner.

Generating a plan. To write a plan we send the brief you typed to OpenAI, and a description of the kind of venue you need to the Google Maps Places API. Basis: performance of a contract. A generated plan is cached for 24 hours so the same brief does not cost a second call.

Payments. Stripe processes the payment; we store the session, the amount, the currency, the status and how many Credits were granted. Basis: performance of a contract and our legal duty to keep accounting records (Art. 6(1)(b) and (c)). Payment records are kept for 5 years, in anonymised form after you delete your account, because tax law requires them and the GDPR right to erasure yields to that (Art. 17(3)(b)).

Your cookie choices. The consent identifier from your browser, what you agreed to, the policy version, where you answered from and a shortened browser identifier. Basis: our legal duty to be able to prove consent (Art. 7(1)). We do not store your IP address with a consent record. Kept 5 years.

Ratings and feedback. The rating you give a plan or an invitation, the reason you pick and your comment. Basis: our legitimate interest in improving what the AI produces. Kept while the account exists and deleted with it.

Keeping the service running. Events like "a plan was created" with your user ID and the time, counts of requests per account, and server logs. We use them to see which parts of PartyMind are used, to enforce the limits in the Terms and to keep the service available. Basis: our legitimate interest in running and improving it (Art. 6(1)(f)). Deleted with your account.

Contact. What you write to us and your email address, so we can answer, handle a complaint or a withdrawal. Basis: performance of a contract or our legitimate interest in replying (Art. 6(1)(b) and (f)).

Where the data comes from

Almost all of it comes from you. Your name, email and picture come from Google when you sign in. Answers come from the guests who fill in your invitation: we get them from the guest, not from you.

Who else sees it

We use these companies as processors. Each one only does what we instruct.

• Google Ireland / Google LLC — sign-in (Firebase Authentication), the database (Firestore), hosting of our API (Cloud Run, region Warsaw), logs, venue search (Places API) and the map on an invitation. Ireland and the United States.
• OpenAI, L.L.C. — writes the plans. United States. OpenAI does not use API data to train its models and keeps abuse-monitoring logs for 30 days.
• Stripe, Inc. / Stripe Payments Europe — payments. Ireland and the United States.
• Netlify, Inc. — serves this website. United States.

Transfers to the United States are covered by the European Commission's adequacy decision of 10 July 2023 for the EU–US Data Privacy Framework where the recipient is certified, and by standard contractual clauses otherwise. Ask us at contact@party-mind.com and we will send you a copy of the safeguards. We also share data with public authorities when the law requires it.

Do you have to give us this data?

Nothing here is required by statute, but some of it is needed to use the service. Without a sign-in you cannot have an account, and without the details of your party we cannot build an invitation or write a plan. A guest who does not fill in the RSVP form simply is not counted. Anything optional — a note, food preferences, a rating — can be left out with no consequence.

Your rights

You can ask us for access to your data, for a copy of it, for correction, for erasure, for restriction, for portability, and you can object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time, and that does not affect what happened before.

Two of these work without waiting for us: under Account and privacy you can download everything we hold about you, and you can delete your account. Everything else: contact@party-mind.com.

If you think we handle your data unlawfully, you can complain to the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, or to the supervisory authority in the EU country where you live or work.

If you are a guest

You answered an invitation someone else created. The organiser sees your name, your answer, how many people you bring, your food preferences and your note. We keep that answer for them for as long as the invitation exists, and it is erased when they delete the invitation or their account. We do not use it for anything else, and we never contact you for marketing — we do not even ask for your email.

If you want your answer removed sooner, ask the organiser, or write to contact@party-mind.com and tell us which invitation it was.

Children

PartyMind is for people aged 13 and over, and anyone under 18 needs a parent's or guardian's agreement to use it and to buy Credits. It is not directed to children under 13, and we do not knowingly collect their data. If a child's data reached us, write to contact@party-mind.com and we will delete it.

No automated decision-making

We do not make decisions about you by automated means, and we do not profile you. The AI writes party plans; it does not evaluate you.

Security

Everything travels over an encrypted connection. Access to the database is limited to what the service itself needs. Payment card details never reach us — Stripe handles them.

Notes for people in the United States

We collect the categories described above: identifiers (user ID, email, name), commercial information (purchases and Credits), internet activity (usage statistics) and content you create. We share them with the service providers named above. We do not sell personal information and we do not share it for cross-context behavioural advertising.

To see or change your information, use Account and privacy, or write to contact@party-mind.com. We announce changes to this policy on this page, with the date at the top; if a change is significant, we also tell you in the app or by email.

Do Not Track. We do not track you across other websites, so there is nothing for a Do Not Track signal to switch off, and we do not respond to it separately. No third party collects personal information about you across other websites through PartyMind.

Changes to this policy

This page always carries the date of the version you are reading. Earlier versions are kept and sent on request.