Privacy Policy

At Festrum we take your privacy seriously. This policy explains what information we collect, how we use it, who we share it with and what rights you have. It is our personal data processing policy under Colombian Law 1581 of 2012 and Decree 1074 of 2015, and it also applies to users in other countries (including the EU GDPR).

1. Data controller

ORBI TECHNOLOGY S.A.S., tax ID (NIT) 902115398-2, based in Bogotá D.C., Colombia. Email for any personal data matter: soporte@festrum.com.

2. Information we collect

Data you give us:

• Name, username, email and password when you sign up (or the basic data of your Google or Apple account if you sign in with them).
• Profile photo, cover, bio, interests and city.
• Content you post: text, photos, videos, voice notes, comments, stories and events.
• Messages you send in private, event and neighborhood group chats.
• Evidence for events you organize (photos and videos with the location at that moment).
• If you register a business: trade name, tax ID, category, address, phone and photos of the business.
• Messages you send to support.

Data collected automatically:

• Location: with your permission and only while you use the app, to show nearby content, the map and, if you turn it on, your position to your friends.
• Usage data: interactions with posts and events (views, reactions, comments, attendance) to personalize your experience and measure app usage.
• Device information: model, operating system, app identifiers, IP address and crash reports.
• Notifications: your device token to send you notifications.

We never receive or store card details: payments are processed by Apple or Google.

3. How we use your information

• Create and manage your account and provide the Service.
• Show you events, businesses, promotions and people near you, and personalize your feed.
• Send you notifications about relevant activity (messages, reactions, events, sanctions, promotions).
• Activate the purchases you make in the app.
• Detect and prevent fraud, abuse, spam and content that breaks our rules, including automatic review of images and text.
• Answer your support requests and comply with legal obligations.

By accepting this policy when you sign up, you authorize us to process your data for these purposes. You can revoke this authorization at any time by deleting your account or writing to us.

4. Legal basis (EU users)

5. Who we share your information with

• Other users: your name, photo, posts and public content are visible according to your privacy settings. Public events, posts and businesses can also be viewed on festrum.com when someone shares their link.
• Providers that process data on our behalf: Supabase (database and files), Google Firebase (notifications and crash reports), OpenAI (automatic review of images and text), RevenueCat (purchase and subscription records), Vercel (website), and CARTO and OpenStreetMap (maps). Google and Apple also receive data when you sign in with them or buy in their stores.
• Authorities: when required by law or court order, or to protect people's safety.

We do not sell your personal information or use it for third-party advertising.

6. Storage and security

Your data is encrypted in transit (HTTPS/TLS) and at rest. We use access controls so each person can only see the information that belongs to them. No system is 100% secure, but we will tell you if an incident affects your data.

7. Data retention

We keep your information while your account is active. If you delete it, we immediately delete your profile, content and files. We may keep security and moderation records for a limited time when the law requires it or to prevent abuse. How to delete your account: festrum.com/eliminar-cuenta.

8. Your rights

As the owner of your data, you have the right to:

• Know, update and correct your personal data.
• Request proof of the authorization you gave us.
• Know how we have used your data.
• Revoke the authorization and ask us to delete your data.
• Get a copy of your data (portability) and object to certain uses, such as personalization.
• Withdraw location permission at any time from your phone.
• File complaints with Colombia's Superintendence of Industry and Commerce (SIC) if you think we did not handle your request properly.

To exercise them, email soporte@festrum.com from your account's email address. We answer inquiries within 10 business days and claims within 15 business days, as set by Law 1581 of 2012.

9. Minors

Festrum is only for people aged 18 or older. We do not knowingly collect data from minors. If we find that an account belongs to someone under 18, we delete it along with its data. If you know of a case, write to us.

10. International transfers

Our providers may process data on servers outside Colombia, mainly in the United States, with internationally recognized safeguards (such as Standard Contractual Clauses). By accepting this policy you authorize that transfer.

11. Changes to this policy

We may update this policy from time to time. We will tell you about important changes in the app or by email before they take effect.

12. Contact

ORBI TECHNOLOGY S.A.S. · NIT 902115398-2 · Bogotá D.C., Colombia.
Email: soporte@festrum.com