Privacy Policy

Last updated: 10/11/2026

1. Overview

This policy explains how I'm In! ("we", "us") collects and uses personal information across organizer accounts and participant sign‑ups. For practical guidance, see Help → Privacy & Data.

2. Data We Collect

2.1 Organizer Accounts

Name, email, and credentials (stored as hash). Optional profile info.
Event metadata (title, description, dates/times, time zone).

2.2 Participants

Name and email; selected slot; optional custom fields configured by the organizer.
Manage token (random string) to update/cancel a signup via a unique link.

2.3 Comments

Name and comment text posted on public event pages; optional parent/reply.

2.4 Technical & Safety

IP address/device info for security, abuse prevention, and rate limiting.
Verification tokens from security challenges (e.g., Cloudflare Turnstile).

3. How We Use Data

Provide and improve the Service (create/manage events, track capacity, reminders).
Send confirmations and organizer notifications; see Email Notifications.
Generate calendar links (Google/ICS) and display event times; see Timezones & Calendars.
Protect the platform (anti‑abuse, rate‑limits, CAPTCHA/Turnstile).
Analytics with consent to understand usage and improve UX.
Legal compliance and responding to valid requests.

4.1 With Organizers

Participant information for an event is shared with that event’s organizer for event purposes only.

4.2 Service Providers

We use vendors for email delivery, analytics, advertising (Google AdSense, on free sheets only), hosting, and verification. They are obligated to protect data and use it only to provide services to us.

4.3 Legal / Transfers

We may disclose information to comply with law or during business transfers (e.g., merger/acquisition).

5. Security

We implement technical and organizational safeguards appropriate to risk. No method is 100% secure.

6. Retention

We retain data while accounts are active and as needed to provide the Service or meet legal requirements. Organizers can remove events; participants can cancel their signup. For help, see Privacy & Data.

7. Your Rights

Subject to applicable law, you may request access/correction/deletion, object, or restrict processing. We’ll respond within a reasonable timeframe.

8. Cookies, Analytics & Advertising

Essential cookies for core functions and security.
A session-only first-party discovery cookie stores the referring search or AI source and landing path, without a unique identifier. When you publish your first sheet or buy a plan, that source is kept with your account so we know how people find I'm In!.
A first-party share cookie keeps a friend's share code for 30 days after you open their share link, so their reward can be credited if you make your first sheet.
Analytics via PostHog is initialized only after cookie consent. You can withdraw consent at any time.
Advertising: free sheets show one ad from Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. You may opt out of personalized advertising by visiting Ads Settings, or opt out of a third-party vendor's use of cookies for personalized advertising at www.aboutads.info.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal data.

10. International Transfers

Where data is transferred across borders, we rely on appropriate safeguards consistent with applicable law.

11. Changes

If we materially change this policy, we will provide notice in‑product or via email where possible.

12. Contact & Controller

I'm In! is the controller for personal data processed via the Service. Questions or requests? Visit the Help Center or reply to any email from im‑in.events.