Privacy Policy
Last updated: 4 September 2026 (review by counsel pending)
1. Who we are
EasyTrafficBot UG (haftungsbeschränkt), trading as Gathmo ("Gathmo", "we", "our") operates the gathmo.com platform and the Gathmo mobile guest-capture experience. Our registered address and data-protection contact are listed at the end of this document.
2. Data we collect
We collect what you give us directly (account registration, event creation, contact forms), what your guests upload (photos, videos, voice messages and their metadata), and technical data from use (IP address, browser type, usage analytics). For the media in your album you are the controller and we act on your instructions as your processor under Art. 28 GDPR. Voice messages are transcribed automatically so they can be read and searched; the transcription runs at Cloudflare and the recordings train nothing.
3. How we use your data
We use collected data to provide and improve the Gathmo service, process payments, send transactional communications, and comply with legal obligations. We do not sell your data and we train nothing on it. For measurement and advertising we use Google Analytics, Google Ads conversion tracking, an OpenAI advertising pixel and PostHog EU — each only after you accept them in the consent banner.
4. Data residency & transfers
Our application servers and the database run on a dedicated host in Phoenix, Arizona (United States); event media is stored on Cloudflare. Personal data of hosts and visitors in the EEA and the UK is therefore transferred to the United States. Those transfers are made under Art. 46 GDPR safeguards: the EU standard contractual clauses agreed with each provider and, where a provider is certified, the EU-US Data Privacy Framework. Auth sessions and error tracking (Sentry, PII-scrubbed) are strictly necessary. Analytics and advertising measurement (Google Analytics, Google Ads, the OpenAI advertising pixel, PostHog EU) are not, and run only after you accept them in the consent banner.
5. Retention
Account data is retained for the duration of your account plus 30 days after deletion. Event media is kept for the period included in the plan: 30 days on Free, 90 days on Essential, 183 days on Celebrate and 365 days on Grand. Regional plans can differ — the period shown at checkout is the one that applies to your album. You may download and delete your data at any time.
6. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, and port your personal data. You may also object to processing and withdraw consent at any time. Requests can be made via the privacy settings in your dashboard or by emailing privacy@gathmo.com.
7. Cookies
We use strictly necessary cookies for authentication and session management. Optional analytics and advertising cookies — Google Analytics, Google Ads conversion tracking, the OpenAI advertising pixel and PostHog EU — are off by default: until you accept, Google Consent Mode holds every storage category denied, so nothing is written to your device and no identifier is set. The tags themselves load in that denied state. You can withdraw or change your preferences at any time using the “Cookie preferences” link in the site footer or in Settings → Privacy & GDPR.
8. Contact
We have not appointed a Data Protection Officer — at our size neither Art. 37 GDPR nor §38 BDSG requires one. Data protection questions go to Martin Freiwald, managing director, at privacy@gathmo.com. You also have the right to lodge a complaint with a supervisory authority: ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, and you may equally complain to the authority where you live.
Questions about this policy? Email privacy@gathmo.com