1. Scope of this policy
This policy describes how WeJoin BV ("WeJoin", "we", "us") collects, uses, and protects personal data when you use wejoin.app, our event-organizer dashboard, or any embedded ticket-purchase page.
2. Data we collect
Account data (name, email, handle), event data you create, payment metadata via Stripe (we never see card numbers), basic device/usage data for analytics (cookieless on public pages).
3. Lawful basis
We process your data on the basis of contract performance (the WeJoin service you signed up for), our legitimate interest in keeping the platform secure, and where required, your explicit consent.
6. International transfers
Your data is stored in the EU (Frankfurt). Sub-processors with US presence are bound by Standard Contractual Clauses and the EU-US Data Privacy Framework.
7. Retention
Account data is retained while your account is active. Event and order data is retained for 7 years to satisfy accounting obligations. Analytics events expire after 12 months. You can request deletion at any time.
8. Your rights
Under the GDPR you have the right to access, rectify, delete, export, restrict, or object to the processing of your personal data. Lodge a complaint with your local supervisory authority if you feel we've fallen short.
9. How to contact us
Privacy questions and rights requests: privacy@wejoin.app. Postal address: Mechelsesteenweg 12, 2018 Antwerp, BE. Response time: 30 days maximum, usually within 5.