Loading...
Loading...
The data controller for the Planbuster service is:
No separate data protection officer has been appointed yet. Privacy questions can be sent to the privacy contact above.
If an EU representative is appointed later, this section will be updated.
This policy explains how Planbuster processes personal data when you use the website and service at https://www.planbuster.com, create an account, host or co-host events, RSVP as a guest, or otherwise interact with us.
Related documents: Terms of Service, Cookie Policy, and Acceptable Use Policy.
Depending on how you use Planbuster, we may process the following categories of data:
Event hosts can allow guests to RSVP without creating a Planbuster account (depending on the event’s settings). Guests may provide name, email, optional phone number, RSVP status, plus-ones, allergies, and a note.
The event organiser (host and any co-hosts with access) can see guest details and RSVP responses in order to run the event. Guest email and similar details are not exposed on the public event page in the same way they appear to organisers.
Planbuster processes guest data to provide the RSVP and event-administration features. The organiser also decides what information to ask for and how they use guest lists outside the service (for example after export or copy). Organisers should only collect what they need and must handle guest data lawfully.
Role split in short: Planbuster provides the platform and is a controller for processing needed to operate the service; organisers decide the purpose of their guest list and are responsible for how they use personal data they collect or export. Exact controller/processor roles can depend on the situation; contact us if you need clarification for a specific case.
Guests who want access, correction, or deletion of their RSVP data can contact the organiser and/or hello@planbuster.com. We may need to verify identity and involve the organiser when the request relates to an event guest list.
We do not rely on consent for every processing activity. The table below summarises the main purposes:
| Processing | Purpose | Legal basis | Retention criteria |
|---|---|---|---|
| Account creation and sign-in | Provide and secure your account | Contract (Art. 6(1)(b)) | While the account exists, then deletion/anonymisation after closure (subject to legal holds) |
| Hosting events, RSVPs, chat, images | Deliver the core service | Contract / legitimate interests for guest RSVPs facilitating the host’s event | Until the event or account is deleted, or earlier if you remove the data; backups may linger for a limited operational period |
| Transactional email (verify, reset, RSVP, invites) | Operate the service and authenticate users | Contract / legitimate interests | Outbox records for sent mail are cleaned after about 30 days; tokens expire in about 1 hour |
| Product outreach email (occasional thank-you and feedback requests to account holders) | Improve the service by hearing from the people using it | Legitimate interests (Art. 6(1)(f)) — every such email contains an unsubscribe link and the opt-out is checked before every send | Send log kept with the account; your opt-out is stored until the account is deleted |
| Bot protection (Turnstile, BotID) | Prevent abuse and protect accounts | Legitimate interests | As required by the security providers and our short-lived challenge flows |
| AI generation (when enabled) | Help create event/template drafts you request | Contract / legitimate interests | Credit ledger retained with the account; prompts sent to providers per their processing terms |
| Analytics (Vercel Analytics) | Understand site usage and improve the service | Legitimate interests (and consent where required by ePrivacy — see Cookie Policy) | Per analytics provider retention |
| Advertising measurement (Google Ads) | Measure visits and conversions from our ad campaigns | Consent (Art. 6(1)(a)) via the cookie banner — denied by default, see Cookie Policy | Google Ads cookies up to 90 days; withdraw any time via “Cookie settings” in the footer |
| Support and abuse handling | Respond to requests and protect the service | Legitimate interests / legal obligation where applicable | As long as needed to resolve the matter and meet legal duties |
| Legal compliance (e.g. bookkeeping if payments go live) | Meet statutory duties | Legal obligation (Art. 6(1)(c)) | As required by applicable law |
Where we rely on legitimate interests, you may object as described under “Your rights”. Where consent is required (for example certain non-essential cookies), you can withdraw it.
We keep personal data only as long as needed for the purposes above. Verified product retention includes:
There is no separate self-service “download all my data” or “delete my account” button yet. Account and event data generally remain while the account and events exist. For deletion or export requests, contact hello@planbuster.com.
We do not invent fixed periods such as “90 days” for all data. Where a specific period is not implemented, we use criteria: active account/event, need to deliver the service, security/debugging for a limited time, or legal retention (for example accounting) when applicable.
We use service providers that process data on our behalf or as independent controllers (for example identity providers). Categories currently used by Planbuster:
We share data with these parties only as needed to run the requested feature. We do not sell personal data.
A fuller public subprocessor list may be published later. Ask hello@planbuster.com for current details.
Our primary database is hosted in the EU (eu-west-2). Other providers (for example Vercel, Resend, Google, Apple, Cloudflare, AI model providers, Pexels) may process data in the United States or other countries outside the EU/EES.
Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards available from the provider, such as the European Commission’s adequacy decisions and/or Standard Contractual Clauses (SCCs), depending on the provider. We do not claim that all processing stays inside the EU.
You can request more information about transfer safeguards by emailing hello@planbuster.com.
Under the GDPR (and applicable Swedish data protection law), you may have the right to:
To exercise rights, email hello@planbuster.com. We may ask you to verify your identity. Some rights are limited by law or by the rights of others (for example other guests on an event).
In the product today you can update many profile fields yourself. Full self-service export and account deletion are not yet available; we handle those requests manually.
Planbuster uses technical and organisational measures appropriate to the risk, such as encrypted transport (HTTPS), hashed passwords, access controls, and bot protection on sensitive flows.
No online service can guarantee complete security. If we become aware of a personal data breach that requires notification, we will notify the supervisory authority and affected individuals as required by law.
You must be at least 16 years old to create an account or to create and administer events yourself in Planbuster.
If you are under 18, you may purchase a subscription, credits, or other paid services only if a parent or guardian has approved the purchase, or if applicable law allows you to enter into the contract and use the funds yourself. Online paid billing may not be available yet; this rule applies whenever such purchases are offered.
Planbuster is not intended for children under 16. We do not knowingly direct the service or our marketing at children under 16.
The product does not currently include an automated age gate at registration. By creating an account, you confirm that you meet the age requirement. If we have reasonable grounds to believe an account is used by someone under 16, we may restrict the account, request additional information, or delete the account and related personal data, to the extent permitted by law.
An organiser who invites minors is responsible for running the event in a lawful and appropriate way and for obtaining any necessary guardian approvals.
People under 16 may in some cases reply to an invitation as guests without creating their own account. They should not provide more personal data than needed to administer participation. Where required by law, the data must be provided or approved by a parent or guardian.
We may update this policy when the product, providers, or law change. The “Last updated” date at the top of the page will change when we do. Material changes may also be announced in the product or by email when appropriate.
Privacy questions: hello@planbuster.com. General questions: hello@planbuster.com.