Privacy Policy

1. Information we collect

Account information

When you create an account we collect your first and last name, email address, and a password (which we store only as a salted hash, never in plain text). If you sign in with Google or Apple, we receive your basic profile and email from that provider instead of a password. We also keep a record of whether you opted in to marketing communications.

Profile information

You may optionally add a username, profile photo, bio, headline, phone number, city, country, date of birth, gender, profession, interests, and links to your social accounts. This information is used to populate your public profile and personalize event recommendations. You control what you add and can edit or remove it at any time in Settings.

Event activity

We collect information about how you use the service: events you create or host, registrations and RSVPs, tickets you hold, check-in status, attendance, and any feedback or answers you submit through an event's registration form. If you host events, we store the event details you publish and aggregate statistics about your attendees.

Payment information

Payments are processed by our payment partners, Stripe and Paystack. We do not collect or store full card numbers — that information goes directly to the processor. We receive and retain transaction metadata such as amount, currency, status, and a reference so we can show your order history and reconcile payouts. Hosts who sell paid tickets connect a Stripe account to receive payouts; we store the connection and payout-related identifiers, not their banking credentials.

Communications

We send transactional emails (verification codes, receipts, event reminders, and account notices) through our email provider, Resend, and in-app notifications. With your consent we may also send product or marketing messages, which you can opt out of at any time.

Technical and usage data

Like most web services, we automatically receive your IP address, browser and device type, and basic request logs, which we use for security, debugging, and abuse prevention. On public event pages we also record first-party attribution analytics — a per-tab session identifier, any campaign parameters in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the referring page, and an approximate location (your country, and where available your city) derived from your IP address at our content-delivery edge — so hosts can understand how their event was discovered and where their audience is. We store that coarse location with the page view, not your IP address. We also use PostHog (hosted in the EU) for product analytics — which features are used and where people encounter friction — recorded against a random identifier with form inputs masked, never your name or email. Both the attribution and product analytics run only if you accept non-essential cookies.

2. How we use your information

• Provide, operate, and maintain the service and your account.
• Authenticate you and keep your session secure.
• Process ticket purchases, registrations, and host payouts.
• Send transactional messages you need to use the service.
• Show hosts aggregate insights, including how events were discovered.
• Personalize event discovery and recommendations.
• Detect, prevent, and investigate fraud, abuse, and security issues.
• Send marketing communications where you have consented.
• Comply with legal obligations and enforce our terms.

3. Legal bases

Where data-protection law (such as the GDPR or your local equivalent) applies, we rely on the following bases: performance of our contract with you (to provide the service), your consent (for marketing and non-essential analytics), our legitimate interests (to secure and improve the service), and compliance with legal obligations. You can withdraw consent at any time without affecting prior processing.

4. How we share your information

We do not sell your personal information. We share it only in these circumstances:

With event hosts

When you register for or attend an event, the host (organizer) of that event receives the information needed to manage it — typically your name, email address, ticket and registration details, check-in status, and any answers you provided in their registration form. Hosts are independent parties responsible for their own use of that information; we ask them to handle it lawfully, but their handling is governed by their own policies.

With service providers

We use trusted providers to run the service, including Stripe and Paystack (payments), Google (sign-in and maps), Cloudinary and Supabase (image hosting), Resend (email), PostHog (product analytics, EU-hosted), and our cloud hosts Vercel (web) and Render (API). They process data only on our instructions and for the purposes above.

For legal and safety reasons

We may disclose information to comply with the law, enforce our terms, or protect the rights, property, or safety of Letsdap, our users, or the public. We may also transfer information as part of a merger, acquisition, or sale of assets, with notice where required.

5. Cookies and similar technologies

We use cookies and browser storage in three categories:

• Strictly necessary — a secure, HttpOnly session cookie keeps you signed in, and request-origin checks protect against cross-site request forgery. These are required for the service to work and cannot be turned off.
• Analytics / attribution — a per-tab session identifier (stored in your browser's session storage) and event page-view tracking let hosts see how their events were discovered, plus PostHog product-analytics storage that helps us improve the app. These run only if you choose "Accept all". Individual event page-view records are kept for up to 90 days (see “Data retention” below); after that only aggregate daily counts with no per-visitor identifiers remain.
• Preferences — local storage remembers choices such as your appearance setting and whether you've installed the app, so the experience stays consistent.

You can set your choice using the cookie banner, and you can clear or block cookies and storage through your browser settings. Blocking strictly-necessary cookies may stop you from signing in.

6. Data retention

We keep your account information for as long as your account is active. Event, ticket, and transaction records are retained for as long as needed to provide the service and to meet legal, accounting, tax, and host record-keeping requirements. Individual page-view and attribution records for an event (including a session identifier, approximate location, and referrer) are retained for up to 90 days; after that only aggregate daily traffic counts, which carry no per-visitor identifiers, are kept for the life of the event so hosts can review their traffic over time. All of it is deleted when the event is deleted. When information is no longer needed we delete or anonymize it.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can manage much of your information directly in Settings. To make a request or ask a question, contact us at support@letsdap.com. If you are in a region with a data-protection authority, you also have the right to lodge a complaint with it.

8. Security

We protect your information with encryption in transit (HTTPS), hashed passwords, HttpOnly session cookies, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continually to protect your data.

9. International transfers

We and our providers may process your information in countries other than your own, including the United States and the European Union. Where required, we put appropriate safeguards in place for these transfers.

10. Children

Letsdap is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

12. Contact us

Letsdap, Inc. — questions about this policy or your information can be sent to support@letsdap.com. See also our Terms of Service.