Privacy Policy

We collect only what is needed to run an event. It comes from you, from the event organizer, and from your device.

• Contact and profile: your name, email address, and, if you give them, phone number, organization and job title.
• Registration details: your answers to the event’s registration form, which may include dietary needs, accessibility needs, session preferences, and notes. Some of these can be sensitive (for example, a dietary or accessibility need can reveal health information). You choose what to share, and we ask only for what the event needs.
• Consents: which policies and marketing options you agreed to, and when.
• Attendee photo (if the event asks for one): a photo you upload so staff can recognize you at check-in.
• Check-in records: when and where you were checked in, and by which staff member.
• Sessions you mark as “interested”: so your personal agenda works and organizers can plan room sizes.
• Orders and payments: what you bought, the amount, promo codes, and the status of the payment. Card details are handled by Stripe. We never see or store your full card number.
• Sign-in and device data: sign-in codes (stored hashed), session records, and for the mobile app your device type (iOS or Android), app version, push notification token and the last time the app was used.
• Messages and support: emails and texts we send you and their delivery status, and anything you send to support.

The app does not use advertising identifiers, third-party analytics or tracking SDKs, and this website sets no tracking cookies. Event websites use a cookie to keep you signed in, and load analytics only if you allow it in their cookie notice.

• To register you, issue tickets and process payments and refunds.
• To sign you in with an emailed code and keep you signed in on your device.
• To show your ticket, agenda and event updates in the app, and to check you in at the door.
• To send messages about your registration: confirmations, reminders, schedule changes, waitlist offers and receipts. We send them by email, push notification and, if you provided a phone number and the event uses it, text message.
• To send marketing only if you opted in. You can opt out at any time.
• To run the events (badges, seating, headcounts, accessibility and dietary planning), prevent fraud and abuse, keep the service secure, and meet legal obligations.

Event organizers and staff. Your registration belongs to a specific event. The organizer and authorized staff of that event can see your registration details, answers, notes, photo and check-in status. Event staff can see your photo so they can match it to you at check-in. Event sites may also show an attendee list or directory only if you opted in to it.

Service providers (processors) that help us run the platform, under contracts that limit their use of your data:

• Vercel: website and app hosting.
• PlanetScale: managed Postgres database.
• Resend: sending email.
• Stripe: card payments, refunds and receipts.
• Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM): delivering push notifications to your device.
• Twilio: text messages, only for events that use SMS.
• Apple Wallet and Google Wallet: only if you add your ticket to your wallet. The pass contains your name, the event, your ticket and table (if any), your registration status, your order number and your ticket code.
• OpenAI: powers the assistant that event staff can use in our admin tools. When staff ask it about an event or ask it to make a change, the registration details it reads to do that are sent to OpenAI to process the request. Under OpenAI’s terms for its API, this data is not used to train its models. We tell it not to store the requests, though OpenAI may keep them for a limited time to monitor for abuse.
• Onsite check-in and badge printing services: only for events that use one, the attendee list they need to print badges and check people in: name, organization, job title, ticket, attendee type (for example speaker or VIP), sponsor and table where relevant, the parts of the event you can enter, ticket code and check-in status.
• Plausible or Google Analytics: only on event websites that use them, and only if you allow analytics cookies there.
• Sentry: error reports from event websites that use it, so we can fix problems. A report describes the error, the page and your browser and device type. It does not include your name, email, IP address or what you typed into forms, and it sets no cookies.

Organizers may connect their own tools (for example a CRM or email list). We only send contact data to those tools when the organizer has configured it for your event.

We do not sell your personal information or share it for cross-context behavioral advertising. We may disclose information if required by law, to protect safety or rights, or in a merger or sale of the organization (with notice to you).

Photos are optional unless an event requires one for check-in. We store them privately. They are not publicly accessible: the app and admin tools load them through signed links that expire, usually within an hour and at most within three days (for the check-in list staff devices download so check-in works offline). Only you and authorized event staff can see your photo. We do not use photos for facial recognition and we do not publish them.

A photo can carry over to other Abundance events you register for, so you do not have to upload it again. You can replace it, or ask us to delete it, at any time.

We keep registration, order and check-in records for as long as needed to run the event, handle refunds and disputes, meet tax and accounting rules, and keep a history of events you attended. Sign-in codes expire within minutes. Attendee sessions in the app expire about 90 days after you sign in. A device’s push token is removed when Apple or Google report that it no longer works (for example, after you uninstall the app); you can turn notifications off at any time in your phone’s settings.

When you ask us to delete your data we delete or anonymize it, except what we must keep by law (for example, payment records) or for fraud prevention and dispute handling. Deleted data can remain in backups for a limited time until those backups expire or are deleted.

You can ask us to:

• give you a copy of the personal information we hold about you (access and portability);
• correct information that is wrong;
• delete your information, including your photo and your account;
• stop using your information for marketing, or limit other uses.

Many details can be changed yourself through the manage link in your confirmation email or in the app. For anything else, write to [email protected] from the email address on your account. We may need to confirm it is you. We respond within the time the law where you live requires (generally 30 to 45 days) and tell you if we need longer, and we will not treat you worse for using these rights.

California and other US states. You have the right to know, access, correct and delete personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those laws define it. We use sensitive information (such as health-related dietary or accessibility details you give us) only to provide the event services you asked for. You may use an authorized agent to make a request.

European Economic Area, United Kingdom and similar. Our legal bases are: performing our contract with you (registration and tickets), our legitimate interests (running and securing events), your consent (marketing, optional photo and sensitive answers) and legal obligations. You may withdraw consent at any time, object to processing, and complain to your data protection authority. Data is processed in the United States; where required we rely on appropriate safeguards such as standard contractual clauses.

The organizer of an event decides what to ask you for that event and is separately responsible for how it uses what you tell it. Contact them for questions about their own use.

We use encryption in transit (HTTPS), hashed sign-in codes and session tokens, role-based access so staff see only the events they work on, private storage with expiring links for photos, and limits on repeated sign-in attempts. No system is perfectly secure. If a breach affects your information we will notify you and regulators as the law requires.

Abundance Events is not intended for children under 13 (or under 16 in the European Economic Area and the UK). We do not knowingly collect their information. If you believe a child has given us information, write to [email protected] and we will delete it. Events that allow younger attendees must have a parent or guardian register them.

We may update this policy. We will post the new version here with a new effective date, and if the changes are significant we will tell you in the app or by email before they apply.

Abundance Institute operates Abundance Events. Questions or requests: [email protected], or by mail to Abundance Institute, 303 Chipeta Way, Salt Lake City, UT 84108.