Your information at PDX.fun

What we collect

We collect information you provide when you create an account or use the site. This can include your name, email address, profile details, emergency contact, dietary restrictions, events, RSVPs, comments, ride offers, messages, and uploaded photos.

We also process sign-in and security information such as password hashes, session records, OAuth identifiers, IP address and anti-abuse signals. Connected calendar credentials are encrypted before storage. PDX.fun does not store payment card numbers, and paid events are currently disabled.

How we use it

We use this information to operate accounts, publish and manage events, coordinate attendance, send requested messages, synchronize connected calendars, prevent abuse, and maintain service reliability. We do not sell personal information or use it for third-party advertising.

Google account and calendar data

If you sign in with Google, PDX.fun receives your Google account identifier, name, email address, and profile image to create or access your PDX.fun account. We use that information only for authentication, account display, security, and support.

Google Calendar access is a separate, optional administrator connection. When an administrator connects it, PDX.fun requests permission to see, create, change, and delete events on Google calendars that administrator owns. We use that access only to create and keep copies of PDX.fun events synchronized. PDX.fun does not request access to Gmail, Google Drive, contacts, or calendars the administrator does not own.

We store Google provider event identifiers and encrypted access credentials needed for that synchronization. We do not sell Google user data, use it for advertising, or share it except with infrastructure providers that process it for PDX.fun. Disconnecting Google Calendar removes the stored connection credentials; event copies already created in Google Calendar may remain until the calendar owner removes them.

PDX.fun's use of information received from Google Workspace APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Who processes it

Cloudflare hosts the application, database, media, and bot protection. AWS may deliver email. Google processes information when you choose Google sign-in or an administrator connects Google Calendar. A configured notification provider may process event-message delivery. These providers receive only the information needed for the requested service.

Retention and security

Account and event information is generally retained while the account or event remains active. Expiring sessions, verification tokens, OAuth state, rate-limit records, and completed delivery records are periodically removed. Provider credentials are removed when an integration is disconnected. We use access controls, encryption for provider credentials, and transport encryption, but no internet service can guarantee absolute security.

Your choices

You may request a copy, correction, or deletion of your personal information by emailing hello@pdx.fun from the address associated with your account. We may verify your identity before acting. Requests are normally completed within 30 days, subject to security, legal, and operational retention requirements.

Changes and contact

We may update this notice as the service changes. The effective date above will change when an update is published. Privacy and security questions can be sent to hello@pdx.fun.