How Attergo handles personal information.
Plain language, in the order you are likely to need it.
Who is responsible for what
When a host uses Attergo to run an event, the host decides which guests to invite and what to ask them. For that guest information the host is responsible as the controller, and Attergo processes it on the host’s behalf and on the host’s instructions.
Attergo is responsible as the controller for information about its own account holders, for billing, for keeping the service secure, and for its own marketing to people who have agreed to receive it.
What we collect
We collect only what is needed to run the service and the events on it.
- Account holders: name, email address, sign-in credentials such as passkeys, two-factor settings, workspace membership and roles.
- Guests: the details a host adds or a guest provides, such as name, contact details, household, replies for each function, meal choice, allergies, access needs, travel details and check-in records.
- Collaborators, suppliers, speakers and exhibitors: the details needed for the work they are invited to do.
- Billing: the plan purchased, invoices and payment status. Card numbers are handled by the payment provider and are never stored by Attergo.
- Technical records: security logs and error records, kept without the content of guest answers.
- Product usage records: milestones such as creating or publishing an event, starting a checkout and the first use of a feature, linked to the workspace. Attergo records these itself, without cookies, third-party trackers, IP addresses, names or email addresses.
- How you found Attergo: when you create an account we may record the campaign tags on the link you arrived from, the website that referred you (its name only, not the page), the first page you visited and whether you used a computer, phone or tablet. Your browser keeps these in its own storage until you finish signing up, sends them to us once, and then deletes them. We use them to count which channels bring new hosts. No cookies or third-party trackers are involved.
Sensitive details
Dietary and access information can reveal health or religious details. Hosts are encouraged to ask only what they need. These details are shown only to the people who must act on them, such as the caterer for allergies or door staff for an escort to a step-free seat.
Optional social preferences, such as asking to be seated near people with similar interests, are used only with each adult guest’s consent, can be withdrawn at any time, and are never collected from children. Attergo never infers relationships, religion, health, ethnicity or sexuality from names, photos or locations.
How we use information
We use personal information to:
- Deliver invitations, record replies and run the event the host has set up.
- Send operational messages such as sign-in links, reminders the host schedules and changes to an event.
- Keep the service secure, prevent abuse and fix problems.
- Bill account holders for the plans they buy.
- Understand, in aggregate, how the product is used so we can improve it.
- Send marketing only to people who have agreed to receive it. Operational messages and marketing are kept separate, and opting out of one does not stop the other.
Who we share it with
Guest information is shared with the host and the collaborators the host authorizes, limited to what each needs. Attergo uses service providers for things like email delivery and payments, under agreements that limit their use of the information.
Attergo does not sell guest information, does not rent it, and does not use one host’s guest information for another host or for its own marketing.
AI features
Some Attergo features may use AI drafting provided by Anthropic (the Claude API). These features are off unless a workspace owner turns them on, and a separate setting controls whether any feature may read guest details.
When someone in a workspace with AI turned on uses a feature, Attergo sends Anthropic only what that feature needs: the text they typed and the event details involved (such as the event name, dates and functions). Features that work on guests (for example cleaning up a pasted guest list, turning seating instructions into rules, or suggesting a photo caption) send guest names, the contact details in the pasted list or the chosen photo, and only when the owner has also allowed guest data.
AI results are drafts that a person reviews before anything is saved or sent. Attergo records which feature was used, its cost and whether it succeeded; it does not store the text sent to or returned by Anthropic beyond the draft, which is deleted after 30 days. Anthropic processes this information on Attergo’s behalf under its commercial terms.
For guests
You can reply without creating an account. Your invitation link shows only your own invitation and answers. Other guests cannot see your contact details or answers unless you choose to publish something yourself, for example in a guestbook.
For questions about an event, contact the host first. You can also contact Attergo using the details below.
How long we keep it
Hosts choose when to archive or delete an event. Account information is kept while the account is open and for a limited period afterwards for security and accounting. Backups are encrypted.
Your choices and requests
Hosts can export their event data at any time and delete events they own. Anyone can ask Attergo for a copy of the information we hold about them, to correct it, or to delete it. Where Attergo processes information for a host, we will work with that host to respond.
Security
Each workspace is isolated at the database level, access is scoped by role and event, uploads are scanned for malware, and backups are encrypted. The security page describes these controls in more detail.
A small number of Attergo staff can see account, workspace, plan and usage details to support and bill account holders. They cannot browse guest lists. Staff can open one event’s guest details only for a specific support request, with a written reason, for 30 minutes at a time, and every such view is recorded in a log that cannot be edited.
Changes to this notice
When this notice changes in a way that matters, we will update the effective date and tell account holders before the change takes effect.
Contact
For privacy questions and requests, email [email protected] with the subject “Privacy request”.