We use three service providers to understand how the Service is used and to fix problems:

• PostHog (product analytics): records what you do in the app and on the site, tied to your account. This includes the screens and pages you view, the buttons and interface elements you click or tap (including their labels), the features you use (such as creating an event, RSVPing, adding guests, or uploading photos), whether you allow notifications and which ones you open, and page performance metrics, along with device, app, and browser information such as the version of the app you run. Your analytics profile includes your name and phone number so we can tell who an activity belongs to, and whether you host events. We do not record passwords, one-time passcodes, the body of your chat messages, or what a notification says.
• PostHog (session recordings): on our website, PostHog also records how you move through the Service, such as the pages you visit, where you click or tap, and how you scroll, so we can see where things are confusing or broken. Before a recording leaves your device, all text, everything you type, and all images are hidden, so a recording does not show your messages, event names, guest names, phone numbers, or photos. Recordings are linked to your analytics profile and deleted after 30 days.
• Vercel Analytics: aggregate page-view and performance statistics for our website.
• Sentry: error and crash reports, so we can find and fix bugs.

We do not sell this data and we do not use it for advertising. These providers process it on our behalf.

To opt out of product analytics, or to ask us to delete your analytics profile and the data tied to it, contact us through our Contact page. We will act on your request within the timeframes required by law.

When you connect an AI assistant through our MCP server, Festi receives the tool arguments the assistant sends and returns the requested account or event data. This can include event plans, guest names and contact details, RSVPs, travel, room assignments, and the text or files supplied for an operation. Your Festi permissions continue to apply. OAuth connections grant the available tool permissions; Personal Access Tokens can be limited to selected permissions.

The connected assistant receives tool results and processes them under its own terms and privacy policy. Optional AI tools send task-specific text or event context to model providers through our AI service provider. Place, flight, weather, image, and document tools may contact the service providers needed for that operation. AI diagnostics may include request and response content when content recording is enabled. The connector does not request your assistant's full conversation history.

Changes made by tools are stored as ordinary Festi event or profile data and remain until those records are deleted, subject to the retention provisions below. We store Personal Access Token hashes and metadata, rather than the full token. Expiring or revoking a token prevents its use; it does not delete its metadata or event data. Removing a connection does not erase results already received by the assistant.

You can remove a connection in your assistant and revoke Personal Access Tokens in Access tokens. For connection setup and access details, see AI connections. Contact us through our Contact page to request deletion or help with access.

• EEA/UK: access, rectification, erasure, restriction, portability, and objection. You may also withdraw consent at any time.
• California (CCPA/CPRA): right to know, delete, correct, and opt out of certain sharing. We do not sell personal information.

To exercise rights, including opting out of product analytics or requesting deletion of your analytics data, please visit our Contact page. We may verify your request and respond within the timeframes required by law.