Privacy Policy

2Gather (“we,” “our,” or “us”) is a trip-planning platform that helps families and groups coordinate travel. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. By using 2Gather — whether as a trip organizer or as an invited participant — you agree to the practices described here.

• Trip coordination: sending invitations, itinerary updates, RSVP requests, reminders, and day-of updates via SMS or email
• Responding to your messages:parsing your SMS replies (e.g., “YES” to confirm attendance, “STOP” to opt out) and acting on them
• Service improvement: understanding delivery rates and engagement patterns in aggregate, without identifying individuals
• Legal compliance: maintaining records required by applicable law and honoring opt-out requests as required by TCPA and carrier guidelines

We do not sell your personal information. We do not use it for advertising.

2Gather sends SMS messages on behalf of trip organizers to participants who have been added to a trip. Here is how consent works:

• Initial message: the first SMS you receive from 2Gather is a trip invitation. It identifies the organizer, describes the trip, and explains how to opt out.
• Confirming consent: by replying YES to your invitation, you provide express written consent to receive trip-related SMS updates for that specific trip.
• Message frequency: varies by trip activity. Typically 1–2 messages per week during planning; more frequent during the trip itself.
• Message and data rates may apply. Contact your carrier for details.
• Opting out: reply STOP at any time to stop receiving messages. You will receive one final confirmation, then no further messages. Reply START to re-subscribe. Reply HELP for assistance.
• Carrier liability: carriers are not liable for delayed or undelivered messages.

For more detail on the invitation and consent flow, see our How It Works page.

We share personal data only with the service providers necessary to operate 2Gather:

• Twilio — SMS delivery and inbound message processing. Twilio may process your phone number and message content on our behalf.
• Resend — transactional email delivery. Resend may process your email address on our behalf.
• Supabase— cloud database hosting. Your data is stored in Supabase’s managed PostgreSQL infrastructure.
• Vercel — application hosting and edge delivery.
• Google Maps — location data for itinerary items. Only place names and addresses entered by the organizer are shared.
• Anthropic — AI-generated trip summaries. Trip context (dates, destination, itinerary structure) may be processed; personal contact data is never included.
• Sentry — error monitoring. Personal data is scrubbed from error reports before submission.

All providers are contractually bound to process data only as instructed and in compliance with applicable law.

• Participant access via magic link: expires 30 days after the trip end date
• Trip and itinerary data: retained for 2 years after the trip end date, then permanently deleted
• SMS logs and notification records: retained for 90 days, then permanently deleted
• Organizer account data: retained for the duration of the account, then for 2 years following account deletion

2Gather uses only functional cookies necessary to maintain organizer login sessions. We do not use advertising cookies, tracking pixels, or third-party analytics scripts that profile individual users.

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data. For participants, this removes your contact details from the platform and stops all future communications. Existing notification logs are purged on the standard 90-day schedule.
• Opt out of SMS: reply STOP to any 2Gather message at any time — no account required

To exercise any of these rights, email us at privacy@eventhorizon.world. We will respond within 30 days.

We protect personal data using industry-standard measures: TLS encryption in transit, encrypted storage at rest, row-level security policies that prevent one organizer from accessing another’s data, and access tokens stored only in memory (never in browser storage). Magic link tokens are stored as one-way SHA-256 hashes — the plaintext token is never retained after delivery.

2Gather is intended for use by adults (18+) who are organizing or participating in family trips. We do not knowingly collect personal information from children under 13. If you believe a child’s information has been submitted, contact us at privacy@eventhorizon.world and we will delete it promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Continued use of 2Gather after changes are posted constitutes acceptance of the revised policy.

Questions or concerns about this Privacy Policy?
Email: privacy@eventhorizon.world
2Gather is a product of Sour Inspiration LLC, USA.