Privacy policy

1. Who we are

Attndr ("Attndr", "we", "us", "our") is a conference companion platform that helps event organisers capture, summarise, and share conference content with attendees, and provide engagement reporting to sponsors. Attndr is based in New Zealand and provides services to customers internationally.

Contact: hello@attndr.co | +64 21 132 1475

2. Scope of this policy

This policy covers personal information collected through attndr.co and the Attndr platform. It applies to three groups of people:

• Organisers — the businesses/individuals who purchase and administer Attndr for their conference (our direct customers)
• Attendees — people who attend a conference run on Attndr, whose data is uploaded or captured by an organiser
• Sponsors — recipients of engagement reporting, where relevant

Where an organiser uploads attendee or sponsor data to Attndr, the organiser is the data controller for that data, and Attndr acts as a data processor/service provider acting on the organiser's instructions. This policy explains our own practices and complies with our obligations as a processor; organisers are responsible for having their own lawful basis and their own privacy notice to their attendees where required.

3. What information we collect

From organisers (our customers):

• Account details: name, email, organisation, billing details
• Payment information (processed by Stripe — we do not store full card details ourselves)
• Conference configuration data: event details, session schedules, speaker information

From or about attendees (uploaded/captured by organisers):

• Attendee list data (email address, and any other fields the organiser exports/uploads — for example, job title, company, seniority, or industry)
• Session audio recordings and AI-generated transcripts, where an organiser enables audio capture
• AI-generated personalised summaries derived from session content and attendee session attendance
• Live Q&A submissions, where the Q&A/facilitator feature is enabled
• Usage data (e.g. which summaries were opened, engagement metrics feeding sponsor reporting)

From speakers:

• Name, title, company, bio, photo, and LinkedIn URL, entered by the organiser and shown to attendees of that conference

Automatically collected:

• Standard web usage data (page visited, referring page, device/browser type, approximate location) via our hosting provider's built-in analytics — see Section 8
• Cookies — see Section 8

4. How we use information

We use personal information to:

• Provide the core service: transcribing sessions, generating personalised attendee summaries, running Live Q&A, and producing sponsor engagement reporting
• Process payments and manage subscriptions
• Communicate with organisers about their account and service updates
• Improve and maintain the platform, including debugging and security monitoring
• Comply with legal obligations

We do not sell personal information. We do not use attendee data to train AI models: our AI sub-processors (Section 5) process content solely to perform the immediate task — transcribing a recording, generating that attendee's own summary — and both currently state, as a matter of their own standard commercial/API policy, that data submitted this way is not used to train their models.

5. AI processing and sub-processors

Generating summaries and processing Live Q&A requires sending relevant content (e.g. session audio/transcripts, attendee questions) to third-party providers. Current sub-processors:

• Anthropic— generates session summaries, session recaps, follow-up/re-engagement content (including podcast-style scripts), and Live Q&A consolidation and prioritisation; extracts text from uploaded slides; and, at an organiser's request, drafts invite-email copy, improves session descriptions, and generates speaker bio/title/company fields from a speaker's name, email, and LinkedIn URL
• OpenAI — transcribes and diarises session audio recordings, and generates spoken audio for the optional podcast-style recap upgrade
• Stripe — payment processing
• Supabase — database, authentication, and file storage
• Vercel — hosting, and cookieless site analytics
• Inngest — background job processing for the asynchronous steps above (transcription, summarisation, email delivery)
• Resend — transactional email delivery (invitations, notifications, and personalised recap emails)
• Google Maps — venue/location search, for both the conference itself and individual sessions, used by organisers only

We'll keep this list current as the stack changes, rather than letting it go stale. Each provider processes data under its own data-processing terms, which we've reviewed as part of selecting them as vendors. We don't use sub-processors beyond what's needed to deliver the service.

6. International data transfers

Because Attndr operates internationally and relies on providers with infrastructure in multiple countries (including the United States), personal information may be transferred to and processed in countries other than where an organiser or attendee is located. Each of our sub-processors publishes its own data-transfer terms (commonly including standard contractual clauses for transfers out of the EU/UK); we haven't independently audited every vendor agreement referenced here beyond the terms each publishes, and we'll update this section if that changes.

7. Data retention

We retain personal information for as long as an organiser's account is active, and for up to 12 months afterward to cover legal, accounting, or dispute-resolution needs, unless deletion is requested sooner.

Attndr doesn't yet have automated data-expiry tooling — there's no self-serve "delete my data" button in the product today. Deletion requests are handled manually by our team instead: organisers can request deletion of their conference's data by contacting us, and attendees should direct deletion requests to the organiser of the event they attended in the first instance (who can in turn request deletion from us), or contact us directly if that isn't possible. We aim to complete a verified deletion request within 30 days.

8. Cookies

The site uses essential cookies necessary for authentication (keeping you signed in). Our site analytics (Vercel Web Analytics and Vercel Speed Insights) don't use cookies at all — per Vercel's own documentation, visitors are identified by a hash of the request, discarded after 24 hours, with no cross-site tracking. If you're an organiser using the session location search, Google may set its own cookies as part of loading that feature, under Google's terms. None of this is used for cross-site advertising tracking.

9. Data security

We take reasonable technical and organisational measures to protect personal information, including access controls (row-level security on stored data) and encryption in transit. No system is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you're located, you may have rights to access, correct, or delete your personal information, or to object to or restrict certain processing (for example, under the New Zealand Privacy Act 2020, the EU/UK GDPR, or other applicable law).

• Organisers: contact hello@attndr.co to exercise these rights over your account data.
• Attendees:your event's organiser controls your data as uploaded to Attndr; please contact them directly in the first instance. If you're unable to reach them, contact us and we'll assist where we can.

New Zealand-based individuals may also complain to the Office of the Privacy Commissioner (privacy.org.nz) if you believe your rights under the Privacy Act 2020 have been breached.

11. Children's privacy

Attndr is intended for business/professional conference use and isn't directed at children. We don't knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above whenever we do. For material changes, we'll also email organisers at their account's registered address.

13. Contact us

Attndr, New Zealand
Email: hello@attndr.co
Phone: +64 21 132 1475