Security & GDPR
In short. Visitors give a company website and a job title: no name, no e-mail address, no phone number, and no tracking cookies. Data is hosted by AWS in Frankfurt (EU), encrypted in transit and at rest. Every detail is in our privacy policy.
What a visitor gives us
- The website of their company and their job title, to write their report.
- In the show’s WhyAttend bar, the company they type, to suggest companies through Logo.dev.
- No name, no e-mail address, no phone number, and no tracking or advertising cookies.
- Their IP address, only to protect the service: blocking abusive traffic, daily limits per address and a bot check (Cloudflare Turnstile).
- You see only anonymous statistics, never a visitor’s company or job title.
Hosting and protection
- Hosting, database and files on Amazon Web Services, in Frankfurt (Germany).
- Data encrypted in transit and at rest; access limited to the people who need it.
- Web application firewall, bot checks and usage limits.
How long we keep data
- Reports and their statistics: 90 days after the end of the show, then deleted automatically.
- Daily counters per IP address: 2 days.
- Lists of pre-registered visitors (D-7 reminder): we act as your processor, under a data processing agreement. Names and e-mail addresses are never sent to the AI, and the files are deleted 7 days after processing.
Subprocessors
| Provider | Role | Location |
|---|---|---|
| Amazon Web Services | Hosting, database, files, organiser login | EU (Frankfurt) |
| OpenAI | AI models that write the report, from the company and the job title, never a name. API data is not used to train the models. | United States |
| Logo.dev | Company suggestions and logos in the bar | United States |
| Cloudflare | Bot check on the visitor page | United States / EU |
| Stripe | Card payments and invoices | Ireland / United States |
| Brevo | Service e-mails | France |
| Web3Forms | Contact form messages | United States |
| Google Fonts | Fonts | United States |
Transfers to the United States are covered by the EU–US Data Privacy Framework when the provider is certified under it, and otherwise by the European Commission’s standard contractual clauses.
A question from your IT team?
Write to support@whyattend.com. The full list of processing, legal bases and rights is in our privacy policy.