Privacy Policy

Dostination is a curated events platform for intentional, in-person connection experiences. This is not a dating or matchmaking product. References to “Dostination,” “we,” or “us” in this policy refer to Dostination (the operating entity behinddostination.com). If you have any question about this policy, write to privacy@dostination.com.

• Account: first and last name, email address, phone number, password hash (never the plain password).
• Profile: profile pictures, short bio, social handles (for example Instagram), preferences, interests, activities.
• Event data: RSVP details, check-in status, survey responses, testimonial content (only if you grant permission to publish it).
• Connection data: direct-exchange reports you submit, introduction requests you make, and the mutual-consent records that gate every actual introduction.
• Payment metadata via Stripe: order status, receipt IDs, and the last four digits of a card. Dostination does NOT store full card numbers or CVC codes.
• Analytics: page views, referrers, UTM parameters, device and browser metadata (screen size, coarse locale).
• Communications: emails sent to you, plus opened/clicked events emitted by our email provider.

• Operate events (RSVP, check-in, seating, event introductions).
• Send transactional emails you asked for (confirmations, receipts, event reminders).
• Send occasional marketing emails you can opt out of at any time from any email or by writing to privacy@dostination.com.
• Analyze aggregate product usage to make Dostination better.
• Prevent fraud and abuse.
• Comply with law when we are required to.

We work with a small set of specialised vendors. Each one processes only the minimum data needed for its job.

• Stripe: payment processing. Card details go directly from your browser to Stripe.
• Resend: transactional email delivery + open/click webhooks.
• Meta Conversions API: advertising attribution for our own campaigns.
• PostHog: product analytics. PostHog is DISABLED on /survey/* and /connection-followups/* and on the introduction-consent pages so private reflection stays private.
• MaxMind GeoLite2: IP-based city-level geolocation used for fraud and event-region features.
• OpenAI via Emergent LLM: powers AI-assisted features such as seating narratives and gentle nudge generation. We never send your survey freeform text to any LLM.
• Google Identity: if you sign in with Google, Google provides us your name and email.

Dostination never shares anyone's contact details without their explicit consent.

• When you request an introduction, a Dostination admin first identifies and speaks privately with the other person.
• An introduction only happens if BOTH people agree.
• Either party can decline at any time. We do NOT tell the requester the reason.
• You can withdraw a request or an active consent at any time from your profile or by emailing privacy@dostination.com.

Post-event surveys are private by default. The freeform “What would you tell someone considering a future Dostination event?” field is saved as private feedback UNLESS you explicitly check the permission box on the same step.

• QA / test rows (flagged is_test) are excluded from ratings, connection analytics, discovery-source analytics, testimonials, response-rate counters, and success-story follow-ups.
• If you grant testimonial permission, we may share your feedback under Initials or First Name (your choice; default is Initials). No profile picture is ever attached.
• Withdrawing consent takes it down within seven days across the website, event pages, and any social share cards we generated.

We may capture photographs and video at Dostination events to document the event experience and create event recaps, social media content, and promotional materials. Our media team generally focuses on the atmosphere, activities, and group moments rather than private conversations. Please see our Event Terms & Conditions for additional information about photography and video at Dostination events.

• Active account data is retained for as long as your account is open.
• If you request deletion, account and profile data is deleted within 30 days of the request. Some records must be retained for tax, fraud, and legal reasons (Stripe receipts, dispute history) for the periods those laws require.
• Event data (RSVPs, check-ins, survey responses) is retained for up to 3 years for cohort analysis and legal record-keeping.
• Aggregate anonymised analytics may be retained indefinitely because it no longer identifies you.

You can:

• Access the data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your account.
• Port your data to a competing service.
• Opt out of marketing emails.
• Withdraw any consent (introductions, testimonials, marketing) at any time.

Send requests to privacy@dostination.com. We reply within 30 days.

Dostination is for adults 18 and older. We do not knowingly collect data from anyone under 18.

• Everything is encrypted in transit via TLS 1.2 or better.
• Passwords are stored as bcrypt hashes; we never see or store the plaintext.
• Card details never touch our servers. Stripe handles PCI compliance.
• Admin access is restricted by role, audited, and MFA-encouraged.

• We set a first-party session cookie so you stay signed in.
• PostHog sets a first-party analytics cookie on general pages. You can opt out from your profile at any time; opting out does not affect service.
• Meta Pixel loads on general marketing pages for advertising attribution and respects Do-Not-Track settings.
• On /survey/*, /connection-followups/*, and the introduction-consent pages, ALL third-party tracking is disabled. Those routes also carry X-Robots-Tag: noindex, nofollow, Referrer-Policy: no-referrer, and Cache-Control: no-store so no downstream service can capture the URL or contents.

Your data may be processed in the United States by our vendors (Stripe, Resend, PostHog, OpenAI, MaxMind). Where required by law, transfers are covered by Standard Contractual Clauses.

We respond to lawful requests from law enforcement. See our Law Enforcement Guidelines for the process, contact information, and the standards we hold requests to.

If we make a material change, we will email every registered user at least 30 days before the change takes effect. Minor edits (typos, clarifying language) may happen without notice; the effective date at the top of this page always reflects the latest version.

Privacy questions and data-rights requests: privacy@dostination.com.

Mailing address: [MAILING_ADDRESS_TBD]. We will publish a full mailing address once our operating entity is finalised. Until then, email is the fastest way to reach us.

This policy is effective as of 2026-08-25.

See also our Terms and Conditions and our Law Enforcement Guidelines.