Privacy Policy for Pavoot Event Sync

• The Extension is a convenience tool. It automates a task you can already do by hand: opening the guest list of your own event in Luma's or Partiful's host dashboard, copying the attendee details, and entering them into your own Pavoot account. The Extension simply does that copying for you with one click instead of manually.
• It only ever reads your own events — events where you are the host or co-host. It cannot access events you do not manage, and it does not browse, search, or collect anyone else's events or data.
• It reads only guest information that you, the signed-in host, already see on screen in Luma's and Partiful's own host dashboards. The Extension does not unlock, decrypt, or reveal anything you could not already view yourself as the host of that event.
• It runs only on Luma, Partiful, and Pavoot pages, and only acts when you click a control or when you have explicitly enabled background syncing for an event you chose.
• That information is sent only to your own Pavoot workspace. We do not sell your data, we do not use it for advertising, and we do not share it with third parties except the service providers needed to operate Pavoot.

This Policy covers the Extension itself. Information that, once synced, lives inside the Pavoot web application is additionally governed by the privacy terms that apply to your Pavoot account. The Luma and Partiful platforms are operated by third parties and are governed by their own privacy policies and terms; this Policy does not cover their practices, and your use of those platforms remains subject to their agreements.

The Extension accesses data only for events you host or co-host, and only the data that is already displayed to you as that event's host in the Luma or Partiful dashboard. It does not access events you do not manage, and it gathers nothing you could not already read and copy yourself by hand. It accesses only the data needed to perform a sync that you initiate or authorize. Depending on the platform, this may include:

Event information for events you host or co-host:

• Event name, date, time, location, cover image, and description.
• Host and co-host details and your management role on the event.

Guest / attendee information that is visible to you in the host dashboard:

• Name (first, last, display name).
• Email address(es), which may include a personal email and a separate work email.
• Company and job title.
• RSVP / registration status and check-in status.
• Phone number, where the guest provided one.
• Profile or avatar image.
• Public social-media handles or links the guest associated with their profile (for example X/Twitter, Instagram, LinkedIn, and others), a personal or company website, and a short bio.
• Answers the guest submitted to the event's registration questions.

Authentication and configuration data:

• The session your browser already holds with Luma and Partiful, which the Extension relies on to read the guest lists you are authorized to see. The Extension does not ask for, collect, or store your Luma or Partiful password.
• A pairing token that you generate inside Pavoot and paste into the Extension. This token authorizes the Extension to send data to your Pavoot workspace and nothing else.
• Your settings, such as the list of events you have chosen to sync and your chosen sync interval.

The Extension does not collect your browsing history, your activity on unrelated websites, keystrokes, financial or payment information, health information, or your precise geolocation.

We use the information described above solely to:

1. Detect whether you are a host or co-host of the event you are viewing, so the "Send to Pavoot" control can be offered.
2. Read the event and guest list for events you choose to sync.
3. Transmit that event and guest information to your Pavoot workspace, where it is added to or merged with your event and contact records.
4. Keep your chosen events up to date, if and only if you have enabled background syncing for them.
5. Remember your settings (pairing token, selected events, sync interval) between sessions.

We do not use the information for advertising, for building advertising profiles, for credit or lending decisions, or for any purpose unrelated to syncing your events into your Pavoot account. We do not sell or rent the information, and we do not transfer it to third parties for their own independent use.

• On your device: your pairing token, your selected events, and your settings are stored locally in the browser using the extension storage API. This data stays on your device and is not transmitted to us except as part of authorized requests to your Pavoot workspace.
• On Pavoot's servers: event and guest data that you sync is sent over an encrypted connection (HTTPS) to Pavoot's backend and stored in your Pavoot workspace, under your organization's account. The Extension transmits guest data only to Pavoot at https://events-api.pavoot.com. It does not send guest data to any other destination.

The Extension does not transmit your data to any third-party analytics, advertising, or tracking service.

We share synced data only with the infrastructure and service providers that Pavoot relies on to operate (for example, cloud hosting and database providers), and only to the extent necessary to provide the service to you. These providers are bound by contractual obligations to protect the data and use it only to provide services to Pavoot.

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or abuse.

If Pavoot is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will continue to protect it consistent with this Policy and will notify you of any material change in how your information is handled.

• Settings and tokens stored locally by the Extension remain until you remove them, clear the Extension's storage, or uninstall the Extension.
• You can revoke the pairing token at any time from Pavoot's settings, which immediately prevents the Extension from sending further data to your workspace.
• Event and guest data that has already been synced lives in your Pavoot workspace and is retained and deleted according to your Pavoot account settings and the Pavoot Privacy Policy. You control that data through your Pavoot account.

• Installation is optional. The Extension is opt-in.
• Per-event control. You choose which events, if any, to sync; the Extension does not sync events you have not selected.
• Manual vs. background sync. You can sync only on demand, or enable background syncing and set how often it runs.
• Disconnect at any time. Revoke the pairing token in Pavoot and/or remove the Extension from your browser to stop all data collection and transmission.

We use industry-standard measures to protect information in transit and at rest, including encrypted (HTTPS) connections for all data sent to Pavoot and hashed (not plaintext) storage of pairing-token credentials on our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information and to limit access to it.

The Extension is intended for use by event organizers and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided information through the Extension, please contact us so we can remove it.

Pavoot operates and stores data on servers that may be located in countries other than the one in which you reside. By using the Extension, you understand that your information may be transferred to and processed in those countries, which may have different data-protection laws than your own. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to object to certain processing. Because synced data resides in your Pavoot workspace, you can exercise most of these rights directly through your Pavoot account, or by contacting us at the address below. We will respond to verifiable requests as required by applicable law.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last change" date above and, where appropriate, provide additional notice. Your continued use of the Extension after an update takes effect constitutes acceptance of the revised Policy.

If you have questions or requests regarding this Privacy Policy or your data, contact us at:

Pavoot
Email: founders@pavoot.com

This Extension is an independent tool published by Pavoot. It is not affiliated with, endorsed by, or sponsored by Luma or Partiful. All product names, trademarks, and registered trademarks are the property of their respective owners.