Legal
Privacy Policy
Last updated: 2026-06-12
1. Who we are
Pact ("Pact", "we", "our") is a sponsorship CRM for event organizers: you discover brands, draft outreach, take deals from first email to signed contract, and report on what you delivered. This Policy explains what personal data we collect when you use findpact.app and the Pact app, why, and the choices you have. Questions or requests: hello@findpact.app.
2. The data you give us
Account: your name, email address, and optional profile photo. Your work: the events you create and everything in their pipeline — deals, packages, templates, invoices, notes, and delivery records. Contacts you add: the names, email addresses, roles, and phone numbers of the sponsors and prospects you track. Files you upload: event logos, sponsorship decks, and proof-of-delivery images. Messages: outreach and replies you compose or import.
3. Data we collect automatically
When analytics are enabled (see Cookies, below) we collect usage data through PostHog: pages viewed, features used, approximate location from IP, device and browser type, and — only on your own organizer screens, never on sponsor-facing pages — session activity that helps us see where the product is confusing. We do not run analytics until you accept them.
4. Sponsor and contact data (your responsibility)
Much of what you store in Pact is personal data about other people — your sponsors and prospects. For that data you are the controller and Pact is your processor: we hold and process it to provide the service to you, on your instructions. You are responsible for having a lawful basis to collect and contact those people (for example, complying with GDPR and anti-spam laws like CAN-SPAM when you send outreach). We process it only to run Pact for you and never sell it.
5. How we use your data
To provide and operate Pact (your account, your pipelines, generating proposals, invoices, and reports); to send outreach and reports that you initiate; to maintain security and prevent abuse; to provide support; to improve the product through analytics where you've consented; and to comply with legal obligations.
6. Legal bases (EEA/UK)
We rely on: performance of our contract with you (to provide the service); your consent (analytics cookies, and any marketing emails you opt into — you can withdraw at any time); our legitimate interests (keeping the service secure and improving it, balanced against your rights); and legal obligation where applicable.
7. Integrations you connect
Gmail: if you connect Gmail, we use Google's API to send outreach from your address on your instruction; we request the minimum scopes needed to send and never read your wider inbox. Open Collective: if you connect it, we read contribution data to reconcile sponsor payments. These integrations are optional, you control them in Settings, and your use of them is also subject to those providers' terms and privacy policies.
8. Who we share data with
We share data only with the service providers (processors) that run Pact on our behalf: our hosting and database provider, our product-analytics provider, and the email and integration providers above. They process data under contract and only for us. We also disclose data where required by law or to protect rights and safety. We do not sell personal data.
9. International transfers
Pact and its providers may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
10. Retention
We keep your data for as long as your account is active. When you delete an event, its pipeline is removed. When you delete your account (Settings → Danger zone), your account and all of its data are permanently erased. We may retain limited records where the law requires it.
11. Your rights
Subject to your local law you can access, correct, delete, export, restrict, or object to the processing of your personal data, and withdraw consent at any time. Pact builds two of these in: Settings → Danger zone lets you download all of your data and delete your account yourself. For anything else, email hello@findpact.app. You also have the right to complain to your data-protection authority.
12. Cookies and analytics
We use a small number of essential, first-party cookies and local storage for sign-in and to remember your preferences; these are always on because the app can't work without them. Analytics cookies are off until you accept them in the cookie banner, and you can change your choice any time via "Cookie preferences" in the footer. Declining analytics never limits your access to Pact.
13. Children
Pact is a tool for organizations and is not directed to children. We do not knowingly collect personal data from anyone under 16.
14. Changes
We may update this Policy as the product changes. The "Last updated" date below reflects the most recent revision; significant changes will be highlighted in the app.
15. Contact
Questions, or to exercise your rights: hello@findpact.app.