Here's a list of our key sub-processors, their roles, and responsibilities:

1. Lu.ma
   Role: Primary event registration, ticketing platform, and email marketing.
   Responsibilities:
   • Collecting attendee registration details (name, email, etc.).
   • Processing ticket purchases and managing payment transactions.
   • Issuing event tickets and confirmations.
   • Managing attendee lists and event capacities.
   • Providing event communication tools, including sending updates, reminders, and marketing emails to attendees.
   • Ensuring secure data transmission and storage of registration, payment, and communication information.
2. Google Forms
   Role: Flexible data collection tool for supplementary registrations, surveys, and feedback.
   Responsibilities:
   • Collecting attendee registration details, preferences, or survey responses when used as an alternative or supplementary registration method.
   • Gathering feedback from attendees post-event.
   • Storing submitted data securely within Google's infrastructure.
   • Providing tools for organizing and analyzing collected data.
3. Google Workspace (e.g., Gmail, Google Drive, Google Sheets)
   Role: Internal communication, collaboration, and data storage for event management.
   Responsibilities:
   • Gmail: Handling official internal and external event communications, especially for direct replies or specific inquiries.
   • Google Drive: Securely storing event-related documents, planning materials, and sometimes aggregated or anonymized attendee data for internal use (e.g., summary reports).
   • Google Sheets: Managing internal attendee lists, task tracking, and logistical planning.
   • Ensuring data security and access control for internal operational data.
4. Stripe (via Lu.ma)
   Role: Payment processing for ticket sales.
   Responsibilities:
   • Securely processing credit card and other electronic payments for tickets, primarily as the integrated payment gateway within Lu.ma.
   • Handling financial transaction data (e.g., card numbers, expiration dates) in a PCI DSS compliant manner.
   • Facilitating funds transfer for ticket revenue.
   • Fraud detection and prevention services for transactions.

Our Commitment to Data Protection

We ensure that all our sub-processors are contractually bound to comply with data protection laws and adhere to security standards that are consistent with our own Privacy Policy. We conduct due diligence on our sub-processors to verify their security practices and commitment to safeguarding your data.