Privacy Policy

1. Introduction

Decorah Events ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored securely using industry-standard hashing)
• Display name
• Profile bio (optional)
• Avatar/profile picture URL (optional)
• Newsletter subscription preferences

Google Sign-In Data

If you choose to sign in using Google, we receive the following information from Google:

• Email address
• Name
• Profile picture URL

We do not receive or store your Google password. Google's use of your information is governed by Google's Privacy Policy.

User Activity Data

When you use our Service, we collect information about your activity:

• Events you submit to the platform
• Events you save to collections
• Event engagement (likes, interested, going)
• Profile visibility settings

Automatically Collected Information

When you visit our Service, we may automatically collect:

• IP address and approximate location
• Browser type and version
• Operating system
• Referring URLs and exit pages
• Pages viewed and time spent on pages
• Date and time of visits
• Device identifiers

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and for security purposes. You can control cookie settings through your browser preferences.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Service
• Analyze usage patterns and optimize performance
• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Comply with legal obligations
• Protect our intellectual property rights

4. Security Monitoring

We implement security measures to monitor and protect against unauthorized access, data scraping, and other malicious activities. This includes logging access patterns, detecting automated access attempts, and implementing rate limiting. Suspicious activities may be logged and investigated.

5. Data Sharing

We may share your information with:

• Service providers who assist in operating our website
• Law enforcement when required by law
• Legal authorities to protect our rights and property
• Business partners with your consent

We do not sell your personal information to third parties.

6. Third-Party Service Providers

We use the following third-party services to operate our platform:

• Supabase: Database hosting and user authentication
• Vercel: Website hosting and deployment

These providers may process your data on our behalf in accordance with their own privacy policies and applicable data protection laws.

7. Data Retention

We retain collected data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Security logs may be retained for extended periods to investigate and prevent abuse.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Opt-out of certain data collection

Account Deletion: You may delete your account at any time through your account settings. Upon deletion, we will remove your profile information, though some content you have submitted (such as events) may remain on the Service in an anonymized form.

To exercise your rights or request data export, please contact us through our official channels.

9. Children's Privacy

Our Service is not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information promptly.

10. International Users

If you access our Service from outside the United States, your information may be transferred to and processed in the United States. By using our Service, you consent to such transfer and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through our official channels.