Privacy Policy

Last updated: 2026-11-01

1. Who is responsible

Poyais Digital, Istanbul, Türkiye, operates Poyento and is the data controller for the data described here. Contact: hello@poyento.com.

2. What we collect

Account data (name, email, hashed password), event and planning content you add, vendor profile information, messages you send us through forms, and basic technical data such as IP address and device type for security and reliability.

3. How we use it

To provide and secure the service, send account emails such as password resets, respond to your messages, improve Poyento and, for vendors, show your profile to planners.

4. Sharing

We do not sell personal data. Vendors see only what you choose to send them. We use service providers for hosting and email delivery under agreements that require them to protect your data, and we disclose data where the law requires.

5. Cookies

We use a strictly necessary session cookie to keep you signed in. We do not use advertising cookies.

6. Retention

We keep data while your account is active and delete or anonymise it after you close your account, except where the law requires us to keep it.

7. Your rights

Under applicable law, including Turkish KVKK and, where relevant, GDPR, you may request access, correction, deletion, restriction or export of your data, and object to certain processing. Email hello@poyento.com and we will respond within the legal time limits.

8. Security

Passwords are hashed with Argon2id, connections use HTTPS and sessions use secure cookies. No system is perfectly secure, but we work to protect your data.

9. International transfers

Some providers may process data outside Türkiye. Where they do, we rely on appropriate safeguards.

10. Changes

We will post updates here with a new date.