Privacy Policy

This Privacy Policy applies to the FollowTo platform and all services operated by Innocode Ventures (“we”, “our”, “us”). FollowTo is a community and event RSVP platform at followto.io. This policy explains how we collect, use, store, and protect personal data for organizers, community members, and event attendees.

Who this policy covers

• Organizers: Users who create communities and events on FollowTo.
• Event attendees: People who RSVP to events, confirm via OTP, and auto-follow communities.
• Community members: Users who follow communities and appear in organizer dashboards.
• Visitors: Anyone who visits a public community page or event RSVP page.

Data we collect

Organizer accounts: Email, name, password hash (if using password auth), OAuth tokens (Google/GitHub/LinkedIn), community and event content, billing data.

Event attendees (RSVP): Name (required), email (organizer-configured), phone (optional), interests, food/drink preferences, custom form responses. Email is used to send an OTP confirmation code. We create or match a user account by email to enable community membership and future notifications.

Usage data: IP addresses, device, browser, pages visited, and analytics events on public community/event pages.

How we use data

• To operate the FollowTo platform (account management, event creation, RSVP collection)
• To send transactional emails (OTP confirmation, event notifications)
• To populate organizer dashboards with attendee lists
• To auto-follow communities when attendees confirm RSVPs
• To process payments via Paddle (Pro and Enterprise plans)
• For security, fraud prevention, and legal compliance

We do not sell personal data. We do not use attendee data for advertising or profiling outside of the FollowTo service.

User rights (GDPR, CCPA, DPDP)

Depending on your jurisdiction, you have the right to:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and all associated data. We process deletion requests within 30 days.
• Portability: Export your RSVP and attendee data in CSV format (Pro/Enterprise organizers).
• Opt-out (CCPA): California residents may opt out of any sale of personal information (we do not sell personal data).
• Grievance (DPDP): Indian residents may contact our Data Protection Officer at privacy@followto.io.

To exercise any right, email privacy@followto.io. We will respond within 30 days.

Data residency and storage

By default, FollowTo stores data on Turso (libSQL) servers. Enterprise communities may choose to pin their data to a specific region: India, EU, USA, or Japan. Once a region is selected at community creation, it is permanently locked. This supports:

• DPDP compliance (India): data stored in India region only.
• GDPR compliance (EU): data stored in EU region, supporting Article 44 transfer restrictions.
• CCPA compliance (USA): data stored in US region for California-based organizations.

Cookies and tracking

We use functional cookies for authentication sessions and referral tracking (ptvia cookie for our referral programme). We do not use third-party advertising cookies. See our Cookie Policy for details.

Third-party processors

We share data with the following processors under data processing agreements:

• Turso - database hosting (multi-region)
• Resend - transactional email delivery
• Paddle - payment processing
• Vercel - application hosting (edge network)

Children's privacy

FollowTo is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data, contact us at privacy@followto.io.

Policy updates

We may update this policy. Significant changes will be notified by email or in-app banner. Continued use after notice constitutes acceptance.

Contact

Innocode Ventures, Ahmedabad, India.
Email: privacy@followto.io