Intelligence for the moments that matter.

1. Who we are

This policy applies to Aira Tech Group Corporation, a Delaware corporation ("Aira Tech", "we", "us"), and to the websites, mobile applications, and services we operate, including Fancy (fancy.global) and this website.

For our products, the host or organisation that creates an event is generally the controller of guest information and Aira Tech acts as their processor. Where we determine the purposes of processing ourselves, for example account administration and product improvement, we act as controller.

2. Information we collect

Information you give us

• Account information: name, email address, phone number, password, and profile details.
• Event information: event names, dates, venues, schedules, budgets, vendor details, and documents you upload.
• Guest information provided by a host or submitted by a guest: name, contact details, RSVP responses, dietary requirements and allergies, accessibility needs, travel and accommodation details, and message content.
• Content: messages, notes, photographs, and files uploaded by you or your guests.
• Support correspondence when you contact us.

Information collected automatically

• Device and browser type, operating system, language, and approximate location derived from IP address.
• Usage data: pages and screens viewed, features used, timestamps, and referring pages.
• Cookies and similar technologies used to keep you signed in, remember preferences, and measure aggregate usage.

Information from third parties

• Payment status and limited transaction metadata from our payment processors. We do not store full card numbers.
• Delivery and read status from the messaging providers used to send invitations and reminders.
• Authentication details if you sign in using a third-party identity provider.

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising.

3. How we use information

• To provide, operate, and secure our products.
• To send transactional messages: invitations, RSVPs, schedule updates, reminders, and service notices.
• To provide customer support and respond to enquiries.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To measure and improve product performance and reliability.
• To comply with legal obligations and enforce our terms.
• To send marketing communications where you have opted in. You can withdraw consent at any time.

Where required by law, our legal bases are performance of a contract, our legitimate interests in operating and improving our services, compliance with legal obligations, and consent where consent is requested.

4. Artificial intelligence features

Our products include an assistant that drafts messages, summarises plans, answers guest questions, and surfaces tasks. To do this, relevant event content is sent to large language model providers acting as our subprocessors under contract.

• Event content processed by these features is not used by us or our providers to train publicly available foundation models.
• Assistant output produced on a host's behalf is reviewed before it is sent, unless the host expressly enables automated delivery for a specific feature.
• Hosts and guests can opt out of having their content used to improve our own systems, using the control provided in the product.
• We do not use these features to make decisions that produce legal or similarly significant effects about an individual.

5. When we share information

• With the event host and their planning team, where you are a guest. Hosts decide who on their team can see guest information.
• With vendors engaged for an event, limited to what the host directs us to share, such as headcounts and dietary requirements.
• With service providers processing information on our behalf under contract: cloud hosting, databases, messaging and email delivery, payment processing, analytics, error monitoring, and AI model providers.
• For legal reasons, where we reasonably believe disclosure is required by law or necessary to protect rights, safety, or the integrity of our services.
• In a corporate transaction, such as a merger, acquisition, or asset sale, subject to this policy continuing to apply.

6. How long we keep information

We keep account information while an account is active. Event and guest information is retained for the period the host selects, and by default for twenty-four months after an event concludes, after which it is deleted or de-identified. We keep records longer only where a legal, tax, accounting, or dispute-resolution obligation requires it. Backups are purged on a rolling schedule.

7. Security

We encrypt data in transit and at rest, restrict internal access on a need-to-know basis, require multi-factor authentication for administrative access, log administrative activity, and review our providers' security practices. No system is completely secure and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by law.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California may request disclosure of the categories of personal information collected and may request deletion; we do not sell or share personal information as those terms are defined under the CCPA. Residents of India may exercise the rights available under the Digital Personal Data Protection Act, 2023.

To exercise a right, write to legal@airatech.co. We will verify your identity before acting and will respond within the period required by applicable law. If you are a guest of an event, we may need to refer your request to the host who controls that event's information. You may also complain to your local data protection authority.

You can unsubscribe from marketing email using the link in any such message. Transactional messages about an event you are attending are not marketing and cannot be switched off without leaving the event.

9. International transfers

We operate in the United States and India and use service providers in other countries. Where personal information is transferred out of the region in which it was collected, we rely on appropriate safeguards, including standard contractual clauses where applicable.

10. Children

Our products are not directed to children under 13 and we do not knowingly collect personal information from children under 13. A host may include a minor on a guest list; that information is provided by the adult responsible for them. If you believe a child has provided us with personal information directly, write to legal@airatech.co and we will delete it.

11. Changes to this policy

We will post any changes here and update the date above. If the changes are material, we will give additional notice by email or in the product before they take effect.

12. How to contact us

Aira Tech Group Corporation, 1250 S. Miami Ave, Miami, FL 33130, United States. Telephone +1 786 927 7686. Email legal@airatech.co.