Privacy Policy for Incidentic

Incidentic is a platform for discovering, planning, managing, and sharing events. The operator of the service and the controller of the personal data described in this policy is Incidentic s.r.o., with registered office at č.p. 115, 512 11 Vysoké nad Jizerou, Czech Republic, Company ID (IČO) 08726949.

You can reach us regarding any privacy matter at hello@incidentic.com.

We collect only the data needed to provide and improve the service.

• Account data — e-mail address, display name, and profile details you choose to add.
• Content you create — events, timelines, groups, places, and related media.
• Technical data — device and browser information, log records, and approximate location where you allow it.
• Communication — messages you send to our support.

We process personal data to operate your account, deliver the features of the service, keep the platform secure, and comply with legal obligations.

The legal bases are the performance of our contract with you, our legitimate interest in the security and improvement of the service, compliance with legal obligations, and — where required — your consent, which you may withdraw at any time.

We do not sell your personal data, and we do not use it for third-party advertising.

From the back end to the front end, we make sure your private plans stay private. Content you mark as private is visible only to you, or to the people and groups you explicitly share it with.

Information about your person and your account is individually encrypted, so such data cannot be accessed even from our side. For the same reason, we are not able to provide an overview of this data to others, nor recover it once your account has been cancelled.

We share personal data only with service providers who help us run the platform — such as cloud hosting, storage, and e-mail delivery — and only to the extent necessary. All providers are bound by data processing agreements.

Where a provider processes data outside the European Economic Area, we rely on recognised safeguards such as adequacy decisions or standard contractual clauses.

We may disclose data where the law requires it, for example to public authorities acting within their legal powers.

We keep personal data only for as long as your account exists, or as long as the law requires us to retain it. Technical logs are kept for a limited period needed for security and troubleshooting.

When you cancel your account, your personal data is deleted. Because account data is individually encrypted, this deletion is final — we cannot restore your information afterwards, even at your request.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected and, where applicable, deleted.
• Restrict or object to processing based on our legitimate interest.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ) or your local supervisory authority.

Please note that data protected by individual encryption can be exercised only within the technical limits described in § 04 — we cannot read or export what we cannot access.

The service uses cookies and similar technologies necessary for signing in and for keeping the service secure, and — with your consent — for analytics that help us improve the platform. Details are described in our separate Cookies policy.

As the service grows and new features are added, we may update this policy. The current version will always be published on this page together with its effective date. Substantial changes will be announced within the service.