Privacy Policy

Our four promises to you

These promises are the foundation of Thosedays. They are written in plain language because they are the contract, not the marketing. They cannot be softened by carve-outs for affiliates, partners, service providers, successor entities, or analytics platforms.

1. We do not sell member data. Not to anyone, in any form, for any kind of consideration.
2. We do not share member data with advertisers or data brokers. We do not build, sell, or rent audience segments, look-alike audiences, or ad-targeting lists from your alumni network.
3. We do not use member contact details to target ads — on Thosedays or anywhere else. Email addresses, phone numbers, and the topics each member opted in to are used only to deliver the messages that member chose to receive.
4. Your space's member list belongs to your space, not to Thosedays. Space admins can export the full member list at any time from Admin → Members → Export (How to export your member list).

Any change that would soften any of the four promises above is a material change and is governed by the Changes section.

Controller

The data controller responsible for processing personal data under this Privacy Policy is:

Ing. Philipp Zöchner (Einzelunternehmer under Austrian law)
Gewerbestandort: Sackstrasse 26, 8010 Graz, Austria
UID-Nr: ATU72949349
Contact: legal@thosedays.com

This matches the Provider block on /legal/jurisdiction. For data-subject access, rectification, erasure, or other GDPR requests, contact privacy@thosedays.com.

What we collect

• Account info: name, email, password hash.
• Profile info: cohort year, positions, milestones, and any other fields the member chooses to add.
• Contact preferences: the topic categories each member opted in to.
• Operational records: which spaces a member belongs to, event RSVPs, message deliveries, login timestamps.
• Event content: photos uploaded to events the member attended.

We collect only what the feature in front of you needs. We do not buy data from third parties to enrich profiles.

How we use information

• To run the service: sign-in, message delivery to consenting recipients, RSVP tracking, photo-gallery access control.
• To enforce contact-preference opt-ins: a message is sent only if the recipient opted in to its category.
• To bill admins for purchased email credits.

We do not profile members for advertising, recommendation auctions, or third-party targeting.

Who can see what

• Space admins see their space's member directory and the consent record for each member.
• Members see each other in the directory of every space they share, limited to the fields each profile owner has chosen to surface.
• Event photos are visible only to members who RSVP'd yes to that event.
• Thosedays staff access member data only to operate, secure, and support the service. Never to sell, never to build advertising products.

Subprocessors

We rely on a small number of operational subprocessors (email delivery, image storage, error monitoring, hosting). Every subprocessor is contractually bound to use member data solely to provide their service to Thosedays. None are permitted to sell, to share with advertisers, or to otherwise monetize member data. The current list is maintained at /legal/subprocessors.

Your control over your data

• Members can update or remove any profile field, change contact preferences, leave any space, or delete their account from Settings → Privacy.
• Admins can export their space's full member list (Admin → Members → Export) and revoke individual memberships.
• Account deletion removes the member from all spaces and erases personal data, except records we are legally required to retain (e.g., billing receipts).

Retention

• Active accounts: retained while the account exists.
• Deleted accounts: personal data removed within 30 days, except where legally retained.
• Event photos: retained while the event remains in the space; removed when the space deletes the event or the uploader/admin removes the photo.

Children

Thosedays is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

Any change that softens any of the four promises in Our four promises to you is a material change. We will:

1. Update the effective date and add a Changelog entry.
2. Notify space admins at least 30 days before the change takes effect.
3. Never apply a softened promise retroactively to data already collected under the prior version.

Non-material clarifications (typo fixes, examples, contact-channel updates) are recorded in the changelog without a notice period.

Contact

Questions, concerns, or data-subject requests: privacy@thosedays.com.

Changelog

• 2026-05-16 — v1.1. Controller block added (matches /legal/jurisdiction Provider).
• 2026-05-15 — Initial publication. Establishes the four plain-language promises as load-bearing brand commitments.