Privacy Policy
Effective: August 28, 2026Last updated: September 7, 2026
1. Who we are and what this policy covers
TheGather, Inc., a Delaware corporation with its registered address at 2810 North Church Street, Wilmington, DE 19802, United States (“we”, “us”), operates orriven. This policy applies to:
- the website at orriven.com, including the “Contact the team” form;
- the organizer console at app.orriven.com, together with the
orrivencommand-line tool, the console shell and the MCP service; - the hosted attendee pages at pages.orriven.com (checkout, order result, entry pass, certificate, surveys and the exhibitor lead desk);
- the developer API and the Storefront API.
It applies to website visitors, organizer console users (employees of our customers), attendees and ticket buyers, exhibitor staff, and developers integrating with the APIs.
Two roles. For website visitors, console users and API developers, we decide why and how personal information is processed and are the controller of that information. For attendees, ticket buyers and exhibitor contacts (“Event Data”), the organizer of the event decides what is collected and what it is used for; we process Event Data on the organizer’s instructions under our contract with them and act as their processor. If you want to exercise rights over Event Data, contact the organizer first — we help organizers respond, and we forward any request we receive directly.
2. Summary
- Website: edge access logs, a one-year language-preference cookie, and — only after you accept the cookie banner — product analytics through PostHog. The contact form collects your work email, name, company, country, event plans and notes, and stores them in our CRM (Attio).
- Console: account email, password (stored only as a hash), name, sign-in sessions (IP address, browser), organization membership and roles, and an audit log of every change.
- Event Data (controlled by the organizer): registration details and form answers, order and payment status (card numbers go to Stripe directly and never reach us), check-in records, and technical observations captured when a registration is submitted (IP address, browser, time zone, device fingerprint and, where the organizer enables it, risk signals from Fingerprint).
- Not involved: we do not ask for sensitive personal information (an organizer’s own form may), we do not direct the service at minors, we do not use personal information to train AI models, and we make no automated decisions with legal or similarly significant effects.
- Third parties: cloud infrastructure (Cloudflare, Fly.io, PlanetScale, MongoDB Atlas), Stripe for payments, PostHog for website analytics, Attio and Kickbox for the contact form, Fingerprint for optional registration risk signals, Apple Wallet and Google Wallet when you save a pass; plus the Salesforce connection and webhook endpoints an organizer configures.
- Where: our servers are in the United States. If you are outside the United States, your information is transferred there.
- Your rights: change account details in the console; for everything else, email privacy@orriven.com and we answer within 30 days.
3. What we collect and why
| Channel | Function | Personal information | Required? | Purpose | When | Retention | If you decline |
|---|---|---|---|---|---|---|---|
| Website | Page visits | IP address, browser and device information, pages viewed, referrer, JavaScript errors (PostHog); Cloudflare edge access logs | No (analytics) | Understand how the site is used and fix errors | PostHog loads only after you choose “Accept” in the cookie banner; your choice is kept for one year in the cookie_consent cookie. Cloudflare’s edge logs are written on every request |
PostHog’s default project retention; Cloudflare’s log retention | Choose “Decline” in the banner, or change your choice later under “Cookie settings” in the footer; the site works without analytics |
| Website | Language preference | Language code in the lang cookie and local storage |
Yes | Remember the language you chose | When you pick a language | Cookie: 1 year | You choose the language again on each visit |
| Website | Contact the team | Work email, family and given name, company, country, event plans and scale, notes, page language | Yes, to submit | Reply to your sales enquiry | On submit; the email domain (never the address) is checked against Cloudflare DNS and Kickbox to reject disposable domains | Until you ask us to delete it or the enquiry is no longer active | The form cannot be submitted |
| Website | Country prefill | Country code inferred from Cloudflare’s request headers | No | Prefill the country field of the form | When the form opens | Not stored | Pick the country yourself |
| Console | Account | Email, password (hash only), name, optional avatar; session records (IP address, user agent, timestamps) | Yes | Create the account, verify identity, protect the account | At sign-up and every sign-in | While the account exists; a session expires after 7 days without activity | You cannot use the console |
| Console | Enterprise SSO | Email and name returned by your organization’s identity provider | Yes when your organization enables SSO | Sign in with your corporate identity | At sign-in | As the account | Decided by your organization |
| Console | Organizations and business units | Organization name, member roles, invitations, the organization licence’s customer contact | Yes | Tenant management and permissions | On creation and invitation | While the organization exists | You cannot join the organization |
| Console | Audit log | Acting account, time, endpoint, request contents of every change | Yes | Security and compliance audit | On every write | While the organization exists; erasure requests do not remove audit entries | — |
| Console and APIs | API keys and request logs | Key identifier, request path, IP address, user agent, truncated request and response bodies | Yes when you use the APIs | Troubleshooting, rate limiting, security | On every API call | While the organization exists | You cannot use the APIs |
| Console | Shell, CLI, MCP | Session token, client identifier, activity timestamps | Yes when you use them | Provide command-line and agent access | While in use | Until the session ends; shell sessions last at most 12 hours, CLI sessions 7 days | Other features are unaffected |
| Hosted pages (Event Data) | Registration and checkout | Name, email, answers to the organizer’s registration form, ticket type, redemption code, promotion source | Set by the organizer | Complete the registration | On submit | Set by the organizer, who can export or anonymise it | You cannot register |
| Hosted pages (Event Data) | Payment | Order amount, currency, payment status, Stripe transaction identifiers; card details are collected by Stripe directly | Yes for paid tickets | Collect payment and issue refunds | On payment | Financial records are kept for the statutory period; anonymisation removes the person, not the amounts | You cannot buy a paid ticket |
| Hosted pages (Event Data) | Submission observations | IP address, user agent, time zone, language, screen, platform, device fingerprint; when the organizer enables Fingerprint, also bot, VPN, proxy, Tor and incognito signals and the IP’s country and city | Set by the organizer (advisory for approval) | Help the organizer spot abnormal registrations | On submit | As the registration; deleted first on erasure | — |
| Hosted pages (Event Data) | Entry pass, check-in, certificate, wallet pass | Check-in code, check-in time and door, session credits; when you save a pass, the pass data goes through Apple or Google | Yes for onsite events | Admission and proof of attendance | On scan or when you tap “save” | As the registration | You cannot enter with a code |
| Hosted pages (Event Data) | Surveys and lead capture | Survey answers; when an exhibitor scans your pass, your registration and the exhibitor’s note | Set by the organizer or exhibitor | Post-event feedback, exhibitor follow-up | On submit or scan | As the registration | Skipping a survey does not affect attendance |
| Hosted pages (Event Data) | Housing | Guest and roommate names, stay dates | Set by the organizer | Room allocation | Entered by the organizer | As the registration | — |
| Sent on the organizer’s behalf | Recipient email, name, send and delivery records | Yes | Deliver tickets and event notices | On confirmation or when the organizer sends | As the registration | You do not receive ticket emails |
4. Third-party services
| Channel | Service | Provider | Purpose | Personal information involved | When | Privacy policy |
|---|---|---|---|---|---|---|
| All | Cloudflare | Cloudflare, Inc. | Hosting for the website and hosted pages, CDN, object storage for uploads, outgoing email, DNS | Access logs, uploaded files, email recipients | Every visit | cloudflare.com/privacypolicy |
| All | Fly.io | Fly.io, Inc. | API server hosting (United States) | All platform data passes through it | Every API request | fly.io/legal/privacy-policy |
| All | PlanetScale | PlanetScale, Inc. | Primary database (PostgreSQL, US East) | Accounts, organizations, registrations, orders and other structured records | Continuous | planetscale.com/legal/privacy |
| All | MongoDB Atlas | MongoDB, Inc. | Document database | Form answers, submission observations, templates, survey answers | Continuous | mongodb.com/legal/privacy-policy |
| Hosted pages | Stripe | Stripe, Inc. | Payments, refunds, organizer payout accounts (Stripe Connect) | Buyer email and name, amounts, payment method (card details are collected only by Stripe) | Paid orders | stripe.com/privacy |
| Website | PostHog | PostHog, Inc. | Website analytics and error capture | Device and browser information, page events, IP address | Website visits | posthog.com/privacy |
| Website | Attio | Attio Ltd. | Sales lead management | Every field of the contact form | Contact form submission | attio.com |
| Website | Kickbox | Kickbox, Inc. | Detect disposable email domains | The email domain only | Contact form submission | kickbox.com |
| Hosted pages | Fingerprint | FingerprintJS, Inc. | Device identification and risk signals for registrations, when the organizer enables it | Device fingerprint, IP address, browser signals | Registration submission | fingerprint.com |
| Hosted pages | Apple Wallet, Google Wallet | Apple Inc., Google LLC | Save an entry pass to a phone wallet | Name, event and check-in code on the pass | When you tap “save” | apple.com/legal/privacy, policies.google.com/privacy |
Organizers may additionally connect their own systems — a Salesforce CRM, outbound webhook endpoints, an enterprise identity provider. Those are chosen and controlled by the organizer, and what happens to the data there is governed by the organizer’s own policies.
5. Processors, disclosure, publication and international transfers
- Processors. The infrastructure and service providers in section 4 process personal information only on our instructions, under contracts that bind them to confidentiality and security.
- Disclosure. We do not sell personal information and do not give it to third parties for their own purposes. Personal information leaves us only when: the organizer accesses its own Event Data (it is the controller); the organizer has configured a webhook or CRM connection; you save a pass to Apple or Google Wallet; or the law requires it.
- Publication. We do not publish personal information. An organizer may choose to publish speaker, exhibitor or sponsor details through its own event site; that is the organizer’s decision.
- International transfers. Our servers are in the United States. If you are in the European Economic Area, the United Kingdom, mainland China or another jurisdiction, your personal information is transferred to and stored in the United States. Transfers of Event Data rest on our contract with the organizer, including its data-processing terms. Where your jurisdiction requires a specific transfer mechanism (for example EU standard contractual clauses, or a security assessment or standard contract under Chinese law), the organizer must complete it before using orriven for that event; we provide the assistance needed.
6. How we protect personal information
- All traffic is encrypted in transit (TLS). Passwords and API secrets are stored only as hashes.
- Hosted-page links work only with the matching email address, and every link can be revoked by the organizer.
- Sessions expire; access inside the console is controlled by organization and business-unit roles; every change is written to an audit log.
- Access to production infrastructure is limited to the people who need it.
- If a personal-information security incident occurs, we assess it promptly, notify the affected organizers, and notify regulators and individuals where the law requires.
7. Your rights
| Right | How | Response time | Verification | Notes |
|---|---|---|---|---|
| Access and copy | Console account: account settings. Event Data: ask the organizer, who can export a complete JSON record from the console. Or email privacy@orriven.com | 30 days | A signed-in session, or confirmation from the email address on record | — |
| Correction | Console account: account settings. Event Data: ask the organizer | 30 days | As above | — |
| Deletion | Console account: email privacy@orriven.com (there is no self-service deletion yet). Event Data: ask the organizer, who can erase you from the console | 30 days | As above | Erasure anonymises the person and keeps headcounts, financial records and the audit log, which are retained under legal obligations |
| Withdraw consent | Analytics: “Cookie settings” in the footer of orriven.com. Marketing email from us: email privacy@orriven.com. Event emails: ask the organizer | Immediately, or 30 days | — | Withdrawal does not affect processing that already happened |
| Close an account | Email privacy@orriven.com | 30 days | As above | — |
| Complain | Email privacy@orriven.com; you may also complain to the supervisory authority in your jurisdiction | 30 days | — | — |
We may refuse a request that is manifestly unfounded, repetitive, or that would require disclosing someone else’s information; we tell you why.
8. Where and how long
- Location. Application servers and databases are in the United States (Fly.io, PlanetScale US East, MongoDB Atlas). Cloudflare serves the website, hosted pages, uploads and email from its global network.
- Retention. Account information is kept while the account exists. Organization data is kept for the term of the customer’s contract and deleted afterwards on the schedule in that contract. Event Data is kept for as long as the organizer keeps it. Financial records and audit logs are kept for the statutory period. There is no automatic purge today; deletion happens on request or at contract end.
9. Minors
orriven is a business service. Console accounts are not open to anyone under 18. Organizers who run events for minors are responsible for obtaining guardian consent and for handling minors’ information lawfully. If we learn that we hold a minor’s information without the required consent, we delete it.
10. Changes to this policy
We post changes on this page and update the “last updated” date. For material changes we notify organizer accounts by email or a notice in the console before the change takes effect. Earlier versions are available on request.
11. Contact and disputes
- Email: privacy@orriven.com
- Mail: TheGather, Inc., 2810 North Church Street, Wilmington, DE 19802, United States
- Web: the “Contact the team” form on orriven.com
We reply within 30 days. If you are not satisfied, you may complain to the data-protection authority in your jurisdiction, or resolve the dispute as set out in your contract with us.