Privacy Policy

Programmatic Works, Inc. · Last updated: May 2026

1. Introduction

Programmatic Works, Inc. ("Company", "we", "us", or "our") operates FestWorks ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide directly

• Account information: Name, email address, display name, and timezone when you create an account
• Profile information: Optional professional information such as company name, biography, and website if you register as a professional planner
• Event information: Event details, itineraries, schedules, locations, and other planning content you create or contribute
• Expense information: Expense amounts, descriptions, categories, and settlement records you enter
• Vendor information: Vendor names, addresses, reviews, and ratings you submit
• Travel information: Flight numbers, arrival and departure details you enter for yourself
• Communications: Announcements and messages you create within the Service

2.2 Information collected automatically

• Log data: IP address, browser type and version, pages visited, time and date of visits, time spent on pages, and other diagnostic data
• Device information: Device type, operating system, and unique device identifiers
• Usage data: Features you use, actions you take, and how you interact with the Service
• Location data: General location inferred from IP address. We do not collect precise GPS location without your explicit permission.
• Cookies and similar technologies: See Section 6 below

2.3 Information from third parties

• Authentication providers: When you sign in with Google, Apple, Facebook, or another supported provider, we receive your name, email address, and a unique identifier from that provider. We do not receive your password.
• Weather data: We use public weather APIs to provide forecast information for your event locations. This does not involve sharing your personal information with weather providers.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, enable event planning features, and facilitate coordination among event participants
• Personalize your experience: Remember your preferences, display relevant content, and tailor the Service to your use
• Suggest vendors: Use your event type, location, and context to surface relevant vendor suggestions, including affiliated vendors from which we may earn referral fees
• Send notifications: Deliver task reminders, event announcements, expense updates, and other communications you have configured
• Improve the Service: Analyze usage patterns, diagnose technical issues, and develop new features
• Ensure security: Detect and prevent fraud, abuse, and other harmful activity
• Comply with law: Meet legal obligations and respond to lawful requests from authorities
• Communicate with you: Send service-related announcements, updates to these policies, and responses to your inquiries

We do not sell your personal information to third parties. We do not use your personal information to serve third-party advertising.

4. How We Share Your Information

4.1 With other users

Certain information is visible to other users of the Service by design:

• Event participants can see your display name, RSVP status, task assignments, expense contributions, and travel information for events you share
• Event organizers can see all participant information for events they manage
• Vendor reviews you submit are visible to other users and associated with your display name

You control what information you add to any event. Do not add information to an event that you do not wish to share with other event participants.

4.2 With service providers

We share information with third-party service providers who help us operate the Service, including:

• Cloud hosting and infrastructure providers (including Amazon Web Services)
• Email delivery services
• Authentication providers (Google, Apple, Facebook)
• Analytics providers

These providers are contractually obligated to protect your information and may only use it to provide services to us.

4.3 With vendors (affiliate relationships)

When you interact with an affiliated vendor link in the Service, we may share limited event context (such as event type and general location) with that vendor or affiliate network to facilitate the referral. We do not share your name, email address, or account information with vendors without your explicit action (such as completing a booking form).

4.4 For legal reasons

We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We may also disclose information to protect the rights, property, or safety of Programmatic Works, Inc., our users, or the public.

4.5 Business transfers

If Programmatic Works, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory reasons, to resolve disputes, or to enforce our agreements.

Event data associated with events you created may be retained for a reasonable period after account deletion to allow other participants to access their own records.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how the Service is used.

Types of cookies we use:

• Essential cookies: Required for the Service to function. These cannot be disabled.
• Preference cookies: Remember your settings and preferences across sessions.
• Analytics cookies: Help us understand how users interact with the Service.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We do not use third-party advertising cookies or allow third-party ad networks to place cookies on our Service.

7. Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure credential storage using industry-standard hashing, and access controls limiting who can access user data.

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. AI Interfaces and MCP

If you connect an AI assistant or agent to the Service via the Model Context Protocol (MCP) or similar interface, that AI system will have access to your event data, including event details, participant lists, schedules, and other information you have stored in the Service.

• You are responsible for reviewing the privacy practices of any AI service you connect to FestWorks
• API tokens you generate for AI access can be revoked at any time from your account settings
• Actions taken by connected AI systems on your behalf are logged and visible in your account activity

9. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at privacy@festworks.app.

10. Your Rights and Choices

10.1 Access and correction

You may access and update your account information at any time through your account settings page.

10.2 Data export

You may request a copy of your personal data by contacting us at privacy@festworks.app. We will respond within 30 days.

10.3 Deletion

You may request deletion of your account and associated personal data by contacting us at privacy@festworks.app or through your account settings. See Section 5 for retention details.

10.4 Notification preferences

You may control which notifications you receive through your account settings or through per-event notification preferences.

10.5 API token revocation

If you have generated API tokens for AI or third-party access, you may revoke those tokens at any time through your account settings.

10.6 California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, disclose, and sell; the right to request deletion of your personal information; and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at privacy@festworks.app.

10.7 European residents (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation including the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Our legal basis for processing your personal data is your consent (for optional features) and the performance of our contract with you (for core Service functionality). To exercise your rights, contact us at privacy@festworks.app.

11. Third-Party Links and Services

The Service may contain links to third-party websites and services, including vendor websites. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

We will respond to privacy-related inquiries within 30 days.