huddlz Privacy Policy

Effective date: July 25, 2026

This Privacy Policy explains how huddlz collects, uses, shares, and retains personal information when you use huddlz.com and related services (the "Service"). The Service is currently operated under the name huddlz from Florida, United States ("huddlz," "we," "us," or "our").

If you have questions or requests, contact support@huddlz.com.

1. Information we collect

Information you provide

Depending on how you use the Service, you may provide:

• account information, including email address, display name, password, and account-confirmation status;
• profile information, including a profile image, home city or region, and notification preferences;
• group and huddl information, including names, descriptions, images, dates, locations, virtual links, capacity, visibility, and recurrence settings;
• participation information, including group membership, organizer role, RSVPs, waitlist status, and cancellations;
• communications and support information you send to us;
• API credentials you create; and
• other content you choose to submit.

Passwords and API keys are stored in hashed form rather than as readable credentials. Do not send passwords or secret API keys to support.

Information collected automatically

When you use the Service, our systems may automatically process:

• session and authentication cookies;
• IP address and request metadata;
• browser, device, and connection information made available through standard web requests;
• pages, features, dates, times, and actions associated with use of the Service;
• security, error, and diagnostic logs; and
• authentication tokens and related expiration or security information.

huddlz does not currently use third-party advertising pixels or behavioral analytics tools.

Location information

If you enter a home location, group location, huddl location, or location-search query, we may process the text you enter and geographic coordinates returned by our map and location providers. We do not currently request continuous background location from your device.

2. How we use information

We use personal information to:

• create, authenticate, secure, and support accounts;
• display profiles and content according to applicable visibility settings;
• operate groups, huddlz, memberships, RSVPs, waitlists, calendars, and notifications;
• provide location search, geocoding, maps, image storage, email, APIs, and related features;
• communicate about confirmation, password reset, account activity, huddl activity, safety, support, and Service changes;
• prevent fraud, abuse, spam, security incidents, and violations of our Terms or Code of Conduct;
• investigate reports, enforce policies, and protect users, the public, and the Service;
• debug, maintain, and improve the Service;
• comply with law and respond to valid legal requests; and
• establish, exercise, or defend legal claims.

We do not sell personal information. We do not use personal information for third-party targeted advertising.

3. When information is visible to others

Information may be visible to other people based on the feature and the choices made by you or a group organizer:

• display names and profile images may appear with memberships, organizer roles, RSVPs, and other activity;
• public groups and public huddlz may be visible without an account and indexed by search engines;
• private-group and private-huddl information is limited according to the Service's access controls;
• organizers may see information needed to manage their groups and huddlz, including membership and RSVP information; and
• virtual links and precise meeting details may be limited to eligible members or attendees.

Do not submit sensitive personal information to public fields. Other users may copy or share information they can access, and huddlz cannot control what they do outside the Service.

4. How we share information

We may share information in the following circumstances.

Service providers

We use providers that process information on our behalf to operate the Service, including:

• hosting, database, networking, and S3-compatible object-storage providers;
• Mailgun for transactional email;
• Google Maps Platform services for place search and geocoding; and
• professional advisers or technical contractors when reasonably necessary.

These providers receive information needed for their services. Their own terms and privacy policies may also apply when you interact directly with them.

Safety, rights, and legal compliance

We may preserve or disclose information when we reasonably believe it is necessary to comply with law or valid legal process; investigate fraud, abuse, or a security incident; enforce our Terms or Code of Conduct; protect the rights, safety, and property of users, huddlz, or the public; or respond to an emergency.

Business transition

We may disclose or transfer information in connection with formation of the operating legal entity, financing, reorganization, merger, acquisition, asset sale, or similar transaction. Any successor will be subject to this Policy or must provide notice of materially different practices.

At your direction

We may share information when you request or authorize it, such as when you make content public, follow a third-party link, or use an integration.

5. Cookies

huddlz uses cookies needed to provide and secure the Service, including a signed session cookie that keeps you authenticated and preserves session state.

We do not currently use third-party advertising cookies or tracking pixels. If that changes, we will update this Policy and provide any notice or choice required by law.

You can configure your browser to reject cookies, but authentication and other features may stop working.

6. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain legitimate business and security records, resolve disputes, enforce agreements, and comply with law.

Retention varies by information type. For example:

• account, membership, RSVP, group, and huddl information may remain while the account or related community remains active;
• authentication tokens and API credentials are retained until they expire or are revoked, plus limited security records where appropriate;
• deleted images may remain temporarily in cleanup queues, backups, or logs;
• support, moderation, and safety records may be retained to document decisions, prevent abuse, or address legal claims; and
• backups and logs may persist for a limited period after information is removed from active systems.

You may request deletion by contacting support@huddlz.com. We may retain limited information when required or permitted for legal, safety, fraud-prevention, backup, and evidentiary purposes.

7. Security

We use administrative, technical, and organizational safeguards intended to protect personal information, including hashed credentials, access controls, signed session cookies, encrypted transport in production, and restricted access to private data.

No service can guarantee absolute security. You are responsible for protecting your credentials and promptly reporting suspected compromise to support@huddlz.com.

8. Your choices and requests

Depending on the feature, you may:

• update your display name, home location, profile image, password, and notification preferences;
• leave groups or cancel RSVPs;
• change visibility settings for content you are authorized to manage;
• revoke API keys or authentication sessions;
• unsubscribe from eligible email notifications; and
• request access, correction, deletion, or information about your personal information by contacting support@huddlz.com.

We may need to verify your identity before completing a request. Some information cannot be changed or deleted when retention is required or permitted for legal, security, safety, fraud-prevention, or operational reasons.

Privacy rights vary by location. We will respond to verified requests as required by applicable law. You may appeal a denied privacy request by replying to our decision or contacting support@huddlz.com with "Privacy Appeal" in the subject line.

9. Children's privacy

The Service is not directed to children under 13, and children under 13 may not create accounts. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information, contact support@huddlz.com. We will investigate and take appropriate action, which may include deleting the account and associated information.

Users between 13 and the age of majority where they live may use the Service only with permission from a parent or legal guardian.

10. International use

huddlz is operated from the United States. If you access the Service from another country, your information may be transferred to and processed in the United States and other countries where service providers operate. Those countries may have different data-protection laws than your location.

11. Third-party services

Links, virtual meeting rooms, venues, maps, and other third-party services are governed by their own privacy practices. This Policy does not cover information a third party collects directly from you outside huddlz.

12. Changes to this Policy

We may update this Policy as the Service, providers, or law changes. We will post the revised version with a new effective date and provide additional notice when a change is material.

We will seek renewed consent when required by law. We will not apply material changes retroactively in a way that is inconsistent with our prior commitments without appropriate notice and consent.

13. Contact

Privacy questions and requests may be sent to:

huddlz Florida, United States support@huddlz.com