Privacy policy

Who we are

Find a Day is operated by Vestia Technologies Ltd (“we”, “us” or “our”), a company registered in England and Wales under company number 16408575. Our registered office is 167–169 Great Portland Street, London, W1W 5PF. Vestia Technologies Ltd is the controller of the personal information described in this policy.

For privacy questions or requests, email help@vestia.dev.

Information we collect

• Account information. If you sign in with Google, we receive your Google account identifier, name, email address, profile image, and the authentication records needed to keep you signed in. We never receive your Google password.
• Event information. Event names, descriptions, date ranges, time zones, status, and which signed-in account created the event.
• Response information. The name you enter, the dates you mark as available or maybe, and—when you are signed in—a link between that response and your account.
• Technical information. Our hosting, authentication, and database providers may process information such as IP address, browser type, device information, request times, and security logs to deliver and protect the service.
• Information on your device. We use local storage to temporarily preserve an unfinished response while you sign in and to remember that an anonymous response was submitted from that browser.

How and why we use it

We use personal information to:

• create accounts and authenticate signed-in users;
• create, display, manage, and close events;
• save and display availability responses;
• let signed-in respondents edit or delete their responses;
• operate, secure, troubleshoot, and prevent abuse of the service;
• comply with legal obligations and enforce our terms.

Our main lawful basis is contract: this processing is necessary to provide the features you ask us to provide. We also rely on our legitimate interests in operating a reliable and secure planning service, preventing abuse, and making responses available to the people using an event link. Where the law requires us to retain or disclose information, we rely on ourlegal obligations.

Who can see event information

An event is accessible to anyone who has its unique URL. That includes its title, optional description, date range, respondents’ names, and their selected dates. Treat an event URL like an invitation and share it carefully. Do not use Find a Day for confidential or sensitive information.

Anonymous responses are intentionally not connected to an account. This means they cannot be edited or deleted through the app after submission. A signed-in response is linked to that user’s account and can be changed while the event remains open.

Service providers

We use a small number of providers to run Find a Day:

• Google provides sign-in.
• Convex provides authentication, database, and backend infrastructure.
• Vercel hosts and delivers the website.

These providers process information on our behalf and may process it outside the UK. Where information is transferred internationally, we rely on legally recognised safeguards used by those providers, such as adequacy regulations or contractual protections.

We may also disclose information where required by law, to protect people or the service, or as part of a sale or reorganisation of the business. We do not sell personal information.

Cookies and local storage

Find a Day uses only storage needed to provide the service, including authentication/session storage and the response drafts and anonymous-submission flag described above. We do not currently use advertising cookies or third-party analytics. If that changes, we will update this policy and request consent where required.

How long we keep information

Account, event, and response information is kept while it is needed to provide Find a Day. Closed and expired events are not currently deleted automatically. We may retain limited records for longer where needed for security, dispute resolution, or legal compliance.

Signed-in respondents can delete their response while an event is open. For other deletion requests, email us. For an anonymous response, include the event link and the response name; because it is not linked to an account, we may need additional information to identify the correct record safely.

Your rights

Depending on where you live, you may have rights to access, correct, erase, restrict, or receive a copy of your personal information, and to object to processing based on legitimate interests. These rights are not absolute and may depend on the circumstances.

You have the right to object to our processing where we rely on legitimate interests. Email help@vestia.dev to exercise this or another data protection right.

If you are in the UK and remain unhappy after contacting us, you can complain to the Information Commissioner’s Office.

Security and children

We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security. Find a Day is not directed at children under 13. If you believe a child has provided personal information improperly, contact us so we can investigate.

Changes to this policy

We may update this policy as Find a Day develops or the law changes. We will post the current version here and change the date above. If a change materially affects how we use personal information, we will provide a more prominent notice where appropriate.