Privacy

Innie stores organizer accounts, invitation hashes, participant-owned Spots, consent records, and private photos. We do not sell this data.

The participant owns the Spot. Original photos and normalized crops live in private storage. Withdrawn participants are removed from preview and export immediately. Photo files are scheduled for deletion 30 days after withdrawal, unless a consent-history hold is required.

Consent text is versioned. A cryptographic hash of the exact rendered text is stored. Withdrawal is idempotent and does not destroy the consent record needed to prove history.

We use service providers for hosting, authentication, email delivery, image processing, and error monitoring. Error monitoring is configured to avoid request bodies, cookies, authorization headers, names, email addresses, photos, and invitation tokens. We retain account and consent records only as long as needed to provide the service, meet legal obligations, resolve disputes, or protect the integrity of consent history.

You may request access, correction, export, or deletion of personal data by contacting us. Deletion may be limited where a record is needed to document a prior consent or withdrawal. We do not sell personal information or use participant data for advertising.

Participants can withdraw using their private link. Organizers who want an account deleted, or anyone with a privacy question, should write hello@modernancients.com.