Privacy Policy & GDPR

At Groupdoo, we are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

GDPR Rights

Under GDPR, you have the following rights:

• Right to Access (Article 15): Request a copy of your personal data that we hold
• Right to Rectification (Article 16): Request correction of inaccurate personal data
• Right to Erasure (Article 17): Request deletion of your personal data ("Right to be forgotten")
• Right to Restrict Processing (Article 18): Request limitation of how we use your data
• Right to Data Portability (Article 20): Request your data in a portable format
• Right to Object (Article 21): Object to specific processing activities
• Right to Withdraw Consent: Withdraw consent for processing at any time

Account Information

• Username and email address
• Password (securely hashed)
• Account creation date

Activity Data

• Groups you create and participate in
• Events you create and respond to
• Invitations sent and received
• Notifications and messages

Technical Data

• IP addresses
• User agent/browser information
• Login attempts and security events

• To provide and maintain our service
• To authenticate users and prevent fraud
• To communicate with you about your account
• To comply with legal obligations
• To improve our service

We retain your personal data only as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active; can be deleted on request
• Audit Logs: Retained for 90 days for security purposes
• Data Exports: Available for download for 30 days, then automatically deleted

You can exercise your GDPR rights through your account settings:

• Request Data Export (Article 20) - Download a copy of your personal data
• Request Account Deletion (Article 17) - Request permanent deletion of your account
• Manage Consent Preferences - Control how your data is used