Privacy Policy

3rdPlace is an approval-gated event operating system for recurring hosts. This draft policy explains how we handle information used to plan events, recommend venues and vendors, prepare outreach, track ticketing, process payments, and operate the planner workspace.

This page is scaffolding pending legal review. It is written to reflect current product behavior and will be replaced or revised before legal copy is finalized.

We collect account information such as name, email, role, organization, venue, vendor, social handle, website, and profile details supplied during signup or account setup.

We collect event planning information such as event type, dates, guest targets, budget, area preferences, ticketing platform choices, venue and vendor needs, messages, approvals, and operational notes.

When you connect integrations, we collect the data needed to operate them: ticketing connection metadata, Gmail OAuth identifiers and encrypted tokens, Stripe customer or connected account identifiers, payment status, and settlement records. Full payment credentials are handled by Stripe.

We use information to create event plans, rank venue and vendor options, draft outreach, prepare approval cards, model event economics, update event briefs, and show ticketing or payment status.

We use operational and support information to keep the product reliable, debug errors, respond to support requests, prevent abuse, and improve the planner experience.

We share information with service providers that help operate 3rdPlace, including Supabase, Stripe, Google Gmail APIs, Resend, Sentry, Vercel, OpenAI, and ticketing platforms such as Eventbrite, Posh, Luma, or Partiful when you connect or import them.

When you approve outreach, booking, payment, or settlement workflows, we share the relevant event and transaction details with the venue, vendor, payment processor, or connected service needed to complete that approved action.

We do not sell personal information or Google user data.

Google sign-in is used for account authentication when you choose it. Gmail access is separate and optional; it is used only for outreach features that you approve or explicitly configure.

3rdPlace may use Gmail send, read, and modify permissions to send approved venue or vendor outreach, read replies to threads started by 3rdPlace, classify follow-up needs, maintain outreach history, and mark processed outreach threads as read or organized.

3rdPlace use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sale, or creditworthiness decisions.

We use cookies, local storage, and similar technologies to keep users signed in, remember preferences, measure product behavior, and protect the service from abuse.

The current MVP cookie banner records a simple accept or dismiss choice in local storage. Granular cookie preference controls are deferred until legal review defines the final consent model.

Retention periods are pending legal review. As a working rule, we retain account, event, support, and transaction records while your account is active and then retain only records needed for legal, security, payment, tax, abuse-prevention, or operational obligations.

You may request deletion of stored Gmail outreach records or account data by contacting privacy@3rdplace.io. Some records may be retained where deletion is not legally or technically available.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict use of personal information. California and EU residents may have additional rights under CCPA/CPRA or GDPR.

To make a privacy request, email privacy@3rdplace.io. We may need to verify your identity before processing the request.

3rdPlace is operated from the United States and uses service providers that may process data in the United States and other countries.

International transfer language and safeguards are pending legal review.

3rdPlace is intended for adults running events and is not directed to children under 13. We do not knowingly collect information from children under 13.

We may update this policy as the product, legal review, or service providers change. Material changes will be reflected by updating the date at the top of this page.

Questions or privacy requests can be sent to privacy@3rdplace.io. Legal notices can be sent to legal@3rdplace.io.