Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, RSVP to events, participate in chats, or contact us for support. This includes:

• Account information: Name, email address, phone number, and postal code
• Profile information: Bio, profile photo, and communication preferences
• Activity data: Event RSVPs, comments, group memberships, and chat messages
• Usage data: Information about how you interact with our platform, collected through analytics tools (with your consent)

2. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide our services (account management, event RSVPs, messaging)
• Consent: Marketing emails, analytics tracking, AI chat features, and third-party data sharing (you can withdraw consent at any time)
• Legitimate interests: Improving our services, preventing fraud, and ensuring platform security

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our platform
• Process event RSVPs and manage group memberships
• Facilitate real-time messaging and chat features
• Send transactional notifications (event updates, RSVP confirmations)
• Send marketing communications (with your consent)
• Power AI-assisted event discovery (with your consent)
• Analyze usage patterns to improve user experience (with your consent)

4. Data Storage & Security

We take the security of your personal data seriously:

• Sensitive personal information (email, phone, postal code) is stored in an encrypted vault using industry-standard encryption at rest
• All data is stored in AWS infrastructure in the US East (Virginia) region
• Access to personal data is restricted to authorized services on a need-to-know basis
• All API communications are encrypted in transit using TLS
• We maintain audit logs of access to personal data where applicable

5. Third-Party Services

We use the following third-party services:

• Customer.io: Email communications and transactional notifications
• PostHog: Product analytics (with your consent)
• Authress: Authentication and identity management
• OpenAI: AI chat assistant for event discovery (with your consent). Chat messages are sent to OpenAI's API for processing under our data processing agreement.
• AWS: Cloud infrastructure, data storage, and encryption services

6. AI Disclosure

Brya offers an optional AI chat assistant powered by OpenAI. When you use this feature:

• Your chat messages are sent to OpenAI for processing
• The AI can access your name and event preferences to personalize recommendations
• We limit the personal data shared with the AI to what is necessary for the feature to function
• You can opt out of this feature at any time in your Privacy Settings

7. Your Rights

Under GDPR and applicable privacy laws, you have the following rights:

• Right of access (Article 15): Request a copy of your personal data
• Right to rectification (Article 16): Update or correct your personal information
• Right to erasure (Article 17): Request deletion of your account and all associated data
• Right to data portability (Article 20): Download a ZIP archive containing your data (data.json) and any images you have uploaded
• Right to withdraw consent: Opt out of marketing, analytics, AI chat, or third-party data sharing at any time

You can exercise these rights through your Privacy & Data settings or by contacting us at privacy@brya.com.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. When you delete your account, we permanently remove your personal data, including from our encrypted vault and third-party services. Some anonymized data (such as soft-deleted comments marked as "[deleted]") may be retained to preserve conversation integrity. We respond to deletion requests within 30 days.

9. Cookies

We use the following categories of cookies:

• Essential: Required for authentication and core platform functionality
• Analytics: Help us understand usage patterns (requires consent)
• Marketing: Enable personalized communications (requires consent)

You can manage your cookie preferences through the consent banner shown on your first visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at privacy@brya.com.