GDPR
Privacy policy
Processing of your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. Last updated: October 2026.
This translation is provided for information only. Only the French version of this document is legally binding.
Data controller
SAS ICON, 208 rue du Pont Hogris, 50380 Saint-Pair-sur-Mer, France. Contact: contact@wepickaday.com.
Data collected
Organiser: first name, email address, chosen language, information about the event (title, description, type, period, place, constraints).
Guests: email address entered by the organiser, then, if the guest answers: first name (optional), feelings about each suggested date and comment (optional).
Payment: handled directly by Stripe. We never see or store your card number.
Usage statistics: the main steps of the journey (event created, invitation sent, answer given, date confirmed, payment…), linked to a pseudonymous identifier computed from the email address. The address itself is not sent to our statistics tool.
Minimal technical data: server logs, needed for security.
Are you a guest? Where your address comes from
Your email address was given to us by the event organiser, who is inviting you to share your availability. It is only used to send you emails about this event (suggested dates, a possible reminder, the chosen date). Every email contains a link to stop receiving them; you can also write to contact@wepickaday.com to have your data deleted.
These emails include a “Create mine” box: if you click it, we record the click and your address is added to our email tool (Resend) so that we can help you create your own event (first event free). Each of these emails contains an unsubscribe link.
Purposes and legal bases
- Organising the event: sending invitations, collecting answers, suggesting and setting the date — performance of the contract with the organiser; for guests, the organiser’s legitimate interest in coordinating their event;
- Managing payment and invoicing — legal obligation and contract;
- Sending organisers follow-up emails about the service (unfinished payment, after the event…) — legitimate interest; you can object at any time using the unsubscribe link in each of these emails;
- Measuring use of the service to improve it, using pseudonymised statistics — legitimate interest;
- Ensuring the security and proper functioning of the website — legitimate interest.
Your data is never sold or passed on to advertisers.
Artificial intelligence
To suggest new dates and write the recommendation, the answers are analysed by an AI model (Claude, by Anthropic). Only the following are sent to it: the event information, the first names given by guests (or “Guest 1, 2…” otherwise), their feelings and comments. No email address is ever sent to the AI. Decisions remain subject to fixed rules (an “impossible” from a must-have guest rules out a date) and the final date is always chosen by the organiser.
Recipients and processors
Your data is shared only with the service providers needed to run the service:
- Stripe Payments Europe, Ltd. — Payment processing (EU / United States).
- Anthropic, PBC — Date suggestions and recommendations written by AI (Claude) (United States).
- Resend — Sending emails and automated follow-up emails (EU (Ireland) / United States).
- PostHog — Pseudonymised usage statistics (EU (Germany)).
- Obambu — Hosting of the website and database (France).
Guests never see other guests’ email addresses. Only the organiser sees their guests’ addresses and answers.
Transfers outside the European Union
Some processors (Stripe, Anthropic, Resend) may process data in the United States. These transfers are covered by appropriate safeguards (European Commission standard contractual clauses and/or Data Privacy Framework certification).
Retention period
An event’s data (organiser, guests, answers) is deleted automatically 6 months after the last possible date of the event. An event whose payment did not go through is deleted within 7 days. The organiser can delete their event and all its data at any time from their management page. Contacts in our email tool (Resend) are deleted 3 years after the last interaction, or as soon as you unsubscribe. Pseudonymised statistics are kept for at most 25 months. Billing data held by Stripe is kept in line with accounting obligations (10 years).
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to give instructions about your data after your death. To exercise them, write to contact@wepickaday.com. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.
Cookies and local storage
The website sets no cookies and uses no third-party trackers in your browser: usage statistics are computed on our server. The only things kept in your browser’s local storage are the organiser’s management link, so they don’t have to enter it again, and, for 30 days, the “first event free” offer if you arrived through the “Create mine” link. This storage is necessary for the service requested and does not require consent.