Privacy Policy

We collect information that you provide directly to us, including: • Account information (name, email, organization) • Conference, submission, review, registration, and schedule data you create • Payment information handled by Stripe where payment-enabled registration is configured • Communication preferences and support inquiries • Consent-backed, first-party usage events and security metadata

We use information to: • Create accounts and provide conference workflows • Process registrations, issue tickets, and send transactional messages • Support submissions, reviews, decisions, and event operations • Protect accounts, investigate abuse, and maintain audit records • Measure product reliability and improve the service We do not sell personal information or use third-party advertising trackers.

When an organizer chooses an AI-assisted feature, the platform may send the content needed for that request to the configured AI provider: • Prompts are limited to the task and direct identifiers are minimized where practical • Suggestions remain advisory and require human review • AI output does not automatically accept, reject, rank, or charge a person • Organizers should not place unnecessary sensitive information in prompts See the Subprocessors page for the currently configured provider.

We disclose data only as needed to operate the service: • Conference organizers can access records for conferences they administer • Infrastructure, email, storage, AI, and payment providers process limited data for their stated purpose • We may disclose information when required by law or to protect users and the service The current provider list and the data each provider handles are published in our Trust Center.

We use technical and operational safeguards including: • TLS for data in transit and secure, HTTP-only authentication cookies • Password hashing, optional multi-factor authentication, and role-based access controls • Encryption for selected sensitive fields and server-side secret management • Audit logging, security tests, and responsible vulnerability reporting • Timestamped database, object-storage, monitoring, and restore evidence in the release gate

We use the infrastructure providers listed on our Subprocessors page: • Provider regions follow the deployment configuration; free public beta does not offer a customer-selected residency region • Account deletion revokes authentication and scrubs direct personal identifiers from active systems • Deleted conferences become private immediately and remain recoverable for 30 days • Conference content is permanently purgeable only after that recovery window • Backup copies age out through rolling snapshot retention See the Data Retention page for the current beta handling of each data category.

The platform uses essential cookies for authentication, security, and session continuity. Optional analytics requires the relevant consent choice: • Analytics events are first-party and pseudonymous • We do not use third-party advertising pixels • Referrer information is reduced to the host name • Consent choices can be changed through the cookie controls See our Cookie Policy for current browser-storage details.

Our providers may process data outside your country: • The Subprocessors page identifies the services involved and their purpose • Public beta does not include a contractual data-residency region • We do not represent that every transfer is covered by a particular legal mechanism without a signed agreement • Organizations with transfer, residency, or data-processing requirements should contact us before using the service