v1 · 2026-05-17

This Privacy Policy describes what data the Ready?GO! service (the «Service») collects, how it is used, and what rights you have regarding that data.

1. What data we store

• Account data: name, email, and password (stored hashed).
• Profile and published content: information you voluntarily add to your profile and materials you publish on the Service (photo albums, comments, event descriptions, participation history).
• Telegram: when you link your account or community to Telegram, we receive public account/group data (id, name, username).
• Cookies: used for authentication, Service operation, and storing preferences. See the Cookies Policy for details.

The Service does not track your device's location. Event coordinates are entered manually by the organizer.

2. How we use the data and on what legal basis

We process your data on the following legal bases (GDPR Art. 6):

• Performance of a contract with you — operating the Service: login, displaying and searching events, registering participants, sending event and comment notifications, password recovery.
• Legitimate interest — Service security: preventing abuse and spam.
• Your consent — features requiring explicit opt-in: Telegram integration, AI features, anonymized usage analytics (including analytics cookies).

You may withdraw your consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal.

3. Third-party services

We do not sell your data. To operate the Service and certain of its features, we use the following technical services:

• hosting provider;
• email provider;
• web analytics service;
• maps service;
• Telegram integration (when an account or community is linked);
• AI service (when AI features are used).

4. Transfers outside the EEA

Some of the third-party services listed above may be located outside the European Economic Area (EEA), including in the United States. Such transfers rely on the safeguards provided by GDPR Art. 44–49 (primarily Standard Contractual Clauses, SCC), or on your explicit consent for features that require it.

5. Data retention

• Account data and profile content are stored while your account is active.
• Security-related system logs — up to 90 days.
• After account deletion, the personal data associated with it is removed within 14 days.
• Public traces (such as past events that already took place) may be kept in anonymized form.

6. Your rights

Under the GDPR, you have the right to:

• obtain a copy of your data by contacting support (right of access and portability);
• correct inaccurate data via your profile settings (right to rectification);
• delete your account and the personal data associated with it (right to erasure) — see Terms of Service;
• restrict or object to processing (right to restriction and objection);
• withdraw your consent to data processing — in which case some features of the Service will become unavailable;
• lodge a complaint with the national data protection authority in your country of residence.

7. Children

Registration in the Service is available to users aged 16 and older. We do not knowingly collect data about children under 16.

8. Changes to this policy

This Policy may be updated. The current version is always available on this page.

9. Controller and contacts

Data controller: Evgeny Bibko, Bulgaria.
For questions about personal data processing, please contact inbox@ready-go.org.