Legal

Privacy Policy

This document contains the Privacy Policy for ToDance.today ("we", "us", "our"). By accessing or using ToDance.today, you agree to this policy.

Data Controller

The data controller responsible for the processing of your personal data is:

Introduction

ToDance.today is a social dance event discovery platform designed to make local dance events accessible to dancers, travelers, and communities worldwide. We respect your privacy and are committed to protecting personal data while keeping the platform safe, fair, and trustworthy. This Privacy Policy explains what data we collect, how we use it, and your rights.

Information We Collect

We may collect the following categories of information:

Account Information

  • Name or display name
  • Email address
  • Profile image (optional)

Usage and Technical Data

  • IP address
  • Device and browser information
  • Session activity, pages visited, and timestamps
  • Interaction signals used for security and platform integrity

Event-Related Data

  • Events you create, submit, edit, or interact with
  • RSVP or registration activity (where applicable)
  • Leader/follower role selections

Location Data (optional)

  • Your approximate location — only if you actively grant browser permission
  • Cached locally on your device; we do not determine your location from your IP address

We do not intentionally collect sensitive personal data.

How We Use Your Information

We use collected information to:

  • Operate and maintain the platform
  • Verify users and prevent abuse
  • Moderate content and enforce policies
  • Detect fraud, scraping, automation, and misuse
  • Communicate important updates and service notices
  • Improve user experience and platform features

We do not sell personal data.

Legal Basis for Processing

In accordance with the GDPR and applicable French law, we process personal data based on:

  • Your consent
  • Performance of a contract (providing the service)
  • Legitimate interests such as security, abuse prevention, and platform integrity
  • Legal obligations

Data Sharing

We may share limited data with:

  • Supabase Inc. (database, authentication, and file storage)
  • Vercel Inc. (hosting and content delivery)
  • OpenStreetMap Nominatim (geocoding: event addresses you enter, and — only after you grant location access — your coordinates to determine your approximate city)
  • NVIDIA (AI text generation for premium organizers: event details such as name, city, and keywords — never account data)
  • Telegram (internal admin notification when you submit a contact request: username, email address, and an excerpt of your message)
  • Legal authorities if required by law

We never share personal data for advertising or resale purposes.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA):

  • Supabase Inc. (database and authentication) — Singapore / USA
  • Vercel Inc. (hosting and CDN) — USA

These transfers are governed by appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and the providers' compliance with applicable data protection frameworks.

Data Retention

We retain data only as long as necessary. Specifically:

  • Detailed event data and participations: deleted 30 days after the event ends
  • Personal visit history (event name, date, city, dance styles and role of your own participations): retained for your personal statistics until you delete your account
  • Inactive accounts: deleted after 2 years without login
  • Contact and chat messages: stored until your account is deleted
  • Orphaned image files (flyers, avatars): removed automatically by a daily cleanup

Beyond this, we retain anonymized or aggregated data without personal reference (e.g. event statistics such as attendance counts) for analytics and security purposes.

Your Rights

Under the GDPR and French data protection law (Loi n° 78-17 du 6 janvier 1978, "Loi Informatique et Libertés"), you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion of your account and data
  • Object to certain processing activities
  • Request restriction of processing
  • Request data portability
  • Withdraw consent at any time
  • Define post-mortem directives regarding your data (Art. 85 Loi Informatique et Libertés)

Requests can be made via the contact page.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French supervisory authority:

  • CNIL — Commission Nationale de l’Informatique et des Libertés
  • 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
  • www.cnil.fr

Cookies

We use essential cookies required for authentication (Supabase session) and to store your language preference. Your device’s local storage holds interface settings such as the theme and — if you grant location access — a cached location. For statistics we run a self-hosted instance of the open-source tool Umami: cookieless, anonymized audience measurement on our own infrastructure, without cross-site tracking and without sharing data with third parties. You can manage cookies in your browser settings.

Security

We implement technical and organizational measures to protect data, including monitoring, logging, and abuse detection mechanisms. No system is 100% secure, but we continuously improve our safeguards.

Policy Updates

We may update this Privacy Policy from time to time. Continued use of the platform constitutes acceptance of the updated policy.

By using ToDance.today, you acknowledge that you have read, understood, and agreed to both this Privacy Policy and our Terms of Use.

← Back to Home