Privacy Policy

Last updated October 13, 2026

This policy explains how Atlantis Technologies LLC handles personal data in Shoal. We keep it short and plain. We do not sell your data.

Who is responsible for your data

It depends on whose data it is.

Organizer accounts. For the data of people who sign in to run events, Atlantis Technologies LLC is the controller. We decide how it is used.
Attendee data. For the data of people who are invited to or register for an event, the organizer is the controller. We are the organizer’s processor and handle it only on their instructions, as these policies and the Terms describe. If you are an attendee and want to use your rights, please contact the organizer first. We will help them respond.

What we collect

From organizers

Your email address, used to sign you in, and your organization’s name and web address.
Branding you set: color, font, corner style and logo.
Team members you add.

About attendees

Organizers upload this, or attendees enter it when they register:

Name and email address.
Registration details and status, and the ticket code.
Session picks and the track an attendee is assigned to.
The time they were checked in.

About events

Event details, agendas and speakers, venue name and address, and the map location.
Images organizers upload, such as logos and floor plans.
Updates organizers post to attendees.

Technical data

Server logs with your IP address, browser type, pages requested and the time. We and our hosting provider use them to run the service and to spot and stop abuse.
Small items in your browser that keep you signed in or remember a choice. See the Cookie Notice.

We do not ask for sensitive data. Please do not put it into event fields.

Why we use it

To provide Shoal: sign you in, run events, send invitations, confirmations and tickets, show agendas and check people in. Legal basis: performing our contract with organizers. For attendee data, the organizer relies on its own basis, such as the attendee’s request to register or its legitimate interest in running the event.
To keep Shoal safe and working: fix bugs, stop spam and abuse, and protect accounts. Legal basis: our legitimate interests.
To contact organizers about their account, changes to our terms or service problems. Legal basis: contract and legitimate interests.
To meet legal duties, such as tax and responding to lawful requests. Legal basis: legal obligation.

We do not use attendee data for our own marketing. We do not sell personal data or share it for advertising. We do not use it to train advertising or profiling systems.

We share data only with the organizer it belongs to, with the service providers that help us run Shoal, and when the law requires. Our providers (“subprocessors”) are listed, with what each one does and where it is located, on the Subprocessors page. They may use the data only to provide their service to us.

Organizers can see the details of their own attendees. Their team members can see them too. Event pages and agendas show what the organizer chooses to publish.

If our business is sold or merged, data may move to the new owner, who must keep to this policy. We may also disclose data when needed to follow the law or protect people’s safety.

International transfers

Shoal is hosted in the United States, so data you give us is stored and processed there. If you are in the European Economic Area, the United Kingdom or Switzerland, this means your data is transferred outside your country. Where required, we rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK addendum, or on a provider’s participation in the EU-US Data Privacy Framework.

How long we keep it

We keep organizer account data while the account exists.
We keep an event’s data while the event exists. Deleting an event deletes its attendees, too.
If you ask us to close your account, we delete your data within a reasonable time, normally within 30 days. Copies may stay in backups for a short while after that.
Server logs are kept for a short time, normally no more than 90 days.
We may keep limited records longer where the law requires, for example for tax or to resolve disputes.

Security

We protect data with encryption in transit, access controls that keep each organizer’s data apart from others, and sign-in by emailed link instead of passwords. No system is perfectly safe. If a breach affects you, we will tell the people we must tell, as the law requires, without undue delay.

Your rights

Depending on where you live (including under the GDPR and UK GDPR), you may have the right to:

Ask for a copy of your personal data (access).
Have wrong data corrected.
Have your data deleted.
Restrict how it is used, or object to some uses, including uses based on legitimate interests.
Receive your data in a portable format.
Withdraw consent, where we rely on it.
Complain to your local data protection authority.

To use a right, email support@shoalevents.com. We may need to check it is you. If your data is held for an event, we may pass your request to the organizer, who decides about it. We aim to reply within 30 days.

California residents

If you live in California, the CCPA gives you the right to know what personal information we collect and use, to access and delete it, to correct it, and not to be treated unfairly for using these rights. We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics about you. To make a request, email support@shoalevents.com. You can also use an authorized agent. For attendee data, we act as a service provider to the organizer.

Children

Shoal is not for children under 16. We do not knowingly collect their data. Organizers must not register children under 16 without the permission the law requires. If you think a child’s data is in Shoal without that permission, contact us and we will help remove it.

Cookies

We use only the cookies needed to keep you signed in, and a few small browser settings. No analytics or advertising trackers. Details are in the Cookie Notice.

Changes to this policy

We may update this policy. We will change the date at the top, and for important changes we will also tell organizers by email or in the dashboard.

Contact

Atlantis Technologies LLC, the company behind Shoal. Email support@shoalevents.com with any privacy question.