Privacy

The information we use

Friend of a Friend uses your account name, email address, and sign-in identifier to connect you to your invitations, RSVPs, and events. Google sign-in shares your basic profile, including your name, email address, and profile picture, with our authentication provider, Clerk. We do not receive your Google password or request access to your Gmail or Google Drive through sign-in.

We store the event information hosts provide, invitation and referral relationships, RSVP and check-in status, companion names, notes you submit, contribution amounts, and payment proof files you upload. Payment proofs may contain financial information; include only what the host needs to confirm your transfer.

How we use it

When an event asks about your study or career interests, we store the choices and optional discussion note you submit to help its team plan seating. Your answers are available to you and the event owner and their authorized managers.

When an event asks for your WhatsApp or phone number, we store it with your RSVP so its team can contact you about that event. Your number is available to you and the event owner and their authorized managers, including in their private guest export. You can update it on your own digital pass.

We use this information to authenticate your account, show invitations and tickets, manage event capacity and contributions, send event confirmations and reminders, support check-in, resolve problems, and protect the service from unauthorized access.

Who can see it

An event owner and the managers they authorize can access that event's guest information and payment proofs, manage attendance, and export guest records. People who hold an invitation link can see the invitation details available on that page. Keep your invitation and ticket links private.

Event covers, guides, and other media intended for guests may be publicly accessible by their links. Payment proofs are served through authenticated access for the uploader and the relevant event team.

We use Clerk for authentication, Vercel for hosting, Cloudflare for application data and file storage, and Resend for event emails. These providers process information needed to operate their services, including connection and security logs.

Cookies and account security

Authentication cookies keep you signed in and help protect your account. Our hosting and authentication providers may also process technical information such as IP addresses and browser details for service operation and security.

Your information and requests

We retain account and event records while needed to operate the service, handle event or payment issues, maintain security, and meet applicable obligations. Protected recovery backups may remain after records are removed from the active service.

You can update your profile through your account settings. To request access, a correction, or deletion of your information, contact mahmudasrul11@gmail.com. We verify account ownership before handling requests. Contact the event team for event-specific arrangements and contribution questions.