Privacy policy

Information we handle

We store account information you provide, such as your email address, display name, profile details and, when you use password sign-in, a password hash. We also store content you submit, including events, registrations, invitations, uploaded images and conversations with the service’s AI features.

If you choose Facebook sign-in, Facebook supplies an app-specific user identifier, your name and your email address if you permit it and Facebook makes it available. We use that information to create or recognize your Popameeting account. We do not receive your Facebook password. Facebook email addresses are not treated as verified for automatically linking existing accounts.

Other enabled sign-in providers supply the identity information you authorize. Our hosting and service infrastructure may process technical information such as request logs, IP addresses, browser information and error reports.

If you choose Google sign-in, we use your Google identifier, email and name to recognize or create your account. When Google provides a profile photo, we copy it into Popameeting’s image storage to fill a missing profile photo. We also fill a missing display name, while preserving details you have already set. You can edit these details in your profile.

LinkedIn sign-in can also provide a name, email and profile photo, which we use to fill missing profile details. You can connect additional sign-in methods from your profile. If a sign-in belongs to a separate account, we ask you to authenticate it and confirm before combining the accounts, transferring their records and removing the duplicate account.

Apple sign-in supplies an app-specific identifier and the email address you choose to share, which may be a private relay address. Apple may share your name on the first authorization, but does not supply a profile photo. We use this information to recognize your account and fill a missing display name.

Optional contact imports and connection invitations

When contact import is available and you choose it, we request separate read-only permission to retrieve email addresses from your Google or Microsoft contacts. Ordinary social sign-in does not request contact access. We first show a private preview so you can search and choose addresses. Only after you confirm your selection do we send friend requests to matching Popameeting members or save connection invite links for selected addresses without an account. Unselected contacts are not invited. We do not automatically send invitation emails.

Contact email addresses are temporarily held in server memory for a preview bound to your signed-in session. The preview expires after ten minutes and is discarded on confirmation, cancellation, replacement or a server restart; it is not written to a contact database or logs. We retain selected invitation addresses, invitation status and related account connections to provide this feature. We do not retain the provider access token or refresh token from this import flow. Friend requests identify you to their recipients. Saved invite links can be shared by you.

You can revoke contact access in your Google or Microsoft account settings; this stops future authorized access but does not remove invitations or connections already created. To request deletion of imported invitation data, contact info@pomsoft.net. We use Google user data only to provide these user-facing features, not for advertising or AI training. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How information is used and shared

We use information to authenticate users, operate event discovery and registration, show profiles and event content, deliver notifications, provide requested AI features, process event payments where offered, respond to support requests and protect the service from abuse.

Information you publish to public events or profiles can be viewed by other visitors. Registration details and information you submit to an event are available to the organizers and other people allowed by the event’s access settings. Choose carefully what you include in public content or event forms.

Service providers process information needed to operate the service, including hosting, storage, maps, payment processing and AI services. Information you submit to AI features may be sent to the configured AI provider to produce a response. Payment processing uses Stripe where enabled; payment details submitted to Stripe are handled under its privacy policy. Sign-in providers process authentication under their own policies.

We may disclose information when necessary to comply with legal requirements, address abuse or security incidents, or protect the rights of users and the service.

Cookies, retention and security

We use cookies to maintain signed-in sessions and protect sign-in flows. Blocking these cookies may prevent sign-in from working.

Account and service records are retained as needed to operate the service and address support, security, payment and legal obligations. You can request deletion using the instructions below. Some records may need to be retained for those obligations, and copies may remain temporarily in backups. Content already shared with others may also remain in their possession.

We use access controls and other safeguards to protect information. No online service or transmission method can guarantee complete security.

Your choices and contact

You can edit available profile information in your account settings, stop using a sign-in provider, or request access, correction or deletion by emailing info@pomsoft.net. We may ask for information needed to verify that a request concerns your account. Do not send passwords or verification codes.

See data-deletion instructions for Facebook and Popameeting account deletion requests.

We will update this page when our practices change and revise the effective date. For questions about this policy, contact Pomsoft at info@pomsoft.net or visit pomsoft.net.