← Back to home

Privacy Notice

Last updated: July 8, 2026

1. Who we are

Who Sits Where is operated by Kefi LLC. Kefi LLC is the data controller for personal data processed through the Service.

2. Data we collect

  • Account data: name, email address, login credentials.
  • Event data you create: event details, guest names, RSVP responses, meal choices, seating assignments, and other information you or your guests submit.
  • Support communications: messages you send to support and their attachments.
  • Usage and telemetry: pages viewed, features used, device and browser identifiers, IP address, approximate location, and log data.
  • Cookies and similar technologies: as described below.

Payment card and billing address details are collected and processed directly by Paddle, not by Kefi LLC.

3. How and why we use data

  • Create and administer your account (contract).
  • Provide, maintain, and improve the Service (contract, legitimate interests).
  • Detect, prevent, and investigate security incidents and fraud (legitimate interests, legal obligation).
  • Respond to your support requests (contract, legitimate interests).
  • Send service, security, and billing notices (contract, legal obligation).
  • Send product updates and marketing where permitted (consent or legitimate interests, with opt-out).

4. Legal bases

Where applicable law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and securing the Service, your consent (which you can withdraw), and compliance with legal obligations.

5. Who we share data with

  • Service providers / subprocessors: hosting, database, email, analytics, and customer support tooling that operate on our behalf under confidentiality obligations.
  • Merchant of Record — Paddle: Paddle.com Market Limited acts as our reseller and Merchant of Record for the sale of subscriptions and handles payments, tax compliance, subscription management, invoicing, and refunds. See Paddle's Privacy Policy.
  • Professional advisers: legal, accounting, and insurance advisers when needed.
  • Authorities: where required by law, regulation, or legal process, or to protect rights, safety, and property.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, under confidentiality obligations.

We do not sell your personal data.

6. International transfers

Data may be processed in countries other than your own. Where we transfer personal data out of the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

7. Retention

We keep personal data only as long as needed for the purposes described above, to comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymised. Deleting an event or your account triggers deletion of the associated content within a reasonable period, subject to backup and legal retention requirements.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, object to processing, and withdraw consent. UK/EEA residents have the right to lodge a complaint with their local supervisory authority. We will respond to verified requests within the timeframes required by law (generally within one month for GDPR requests).

To exercise your rights, contact us through the support channels in the app.

9. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data. No system is perfectly secure; we work continuously to improve.

10. Cookies

We use essential cookies to keep you signed in and to secure the Service, and limited analytics cookies to understand product usage. You can manage cookies through your browser settings; disabling essential cookies may break parts of the Service.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

12. Changes to this notice

We may update this notice. Material changes will be announced by email or in-app notice before they take effect.

13. Contact

Kefi LLC — reach us through the in-app support channel for any privacy questions or requests.