Privacy policy

• Account means a unique account created for You to access our Service or parts of our Service.
• Company (referred to as either “the Company,” “We,” “Us,” or “Our” in this Privacy Policy) refers to The Two Society, the operator of the Service.
• Cookies are small files placed on Your device by a website, containing details of Your browsing history and preferences.
• Country refers to the United States, where the Company primarily operates the Service.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to The Two Society website, membership application, meetups, trips, messaging, and related product features.
• Service Provider means any natural or legal person who processes data on behalf of the Company (for example cloud infrastructure, payment, or identity-verification providers).
• Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself (for example IP address, browser type, and timestamps).
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

• Email address and authentication credentials
• First name, last name, and optional display name
• Bio, home city, country, travel style preferences, and why You want to join
• Optional default gathering-focus preference
• Profile photo / avatar
• Gender and date of birth (required for eligibility; treated as protected profile fields)
• Guidelines acceptance and related onboarding records
• Meetup and trip content You create; RSVPs, waitlists, check-ins, cancellations
• Messages You send in allowed meetup or trip contexts
• Ratings, private host feedback, host applications, guest invites, city waitlist requests
• Safety reports and blocks You submit
• Payment and membership records needed to administer billing (card details are handled by Stripe)

Gender is not used as a hard eligibility gate for joining gatherings. Gathering focus is a label plus an optional browse filter You control.

The Company may use Personal Data for the following purposes:

• To provide and maintain Our Service, including to monitor use of the Service and enforce verification and membership rules
• To manage Your Account and registration as a user of the Service
• To perform a contract, including membership, meetups, trips, guest invites, and related booking or RSVP flows
• To process payments and founding-seat claims via Stripe
• To contact You by email or in-product notices regarding verification, bookings, account security, or safety follow-up
• To manage Your requests, including support and privacy requests
• For safety and trust, including reviewing reports, blocks, no-show holds, and host-health signals
• For business transfers, such as negotiation or completion of a merger, sale of assets, financing, or acquisition
• For other purposes such as data analysis in aggregated or de-identified form, identifying usage trends, and improving Our Service

We do not use Your private gender field or identity-verification documents for advertising.

If You are located in the European Economic Area (EEA), United Kingdom, or a similar jurisdiction, We process Personal Data under one or more of the following bases:

• Contract — to create Your Account, provide membership features, process RSVPs/bookings, and fulfill related requests
• Legitimate interests — to secure the Service, prevent fraud and abuse, moderate safety reports, and improve reliability, where those interests are not overridden by Your rights
• Consent — where We ask for it (for example certain optional features, or non-essential cookies if We introduce them)
• Legal obligation — where We must retain or disclose information to comply with applicable law

Identity verification through Persona may involve special-category or biometric data processed by Persona under its policies and applicable law. We use verification outcomes to decide whether Your Account is verified for Service access.

We may share Personal Data in the following situations:

• With Service Providers — to operate and support the Service, including:
  • Cloud infrastructure — authentication, database, file storage, and related hosting, with access controls on member data
  • Stripe — membership payments and billing portal
  • Persona — identity verification (KYC)
  • Optional AI providers — only when You use writing helpers
  • Mapping / geocoding providers — when hosts set venue or city locations
• With other members — limited profile and participation information necessary for a meetup or trip You join (see Section 6)
• For business transfers — in connection with any merger, sale of Company assets, financing, or acquisition
• With affiliates or professional advisors — under confidentiality obligations, when needed to operate or advise the Company
• With Your consent — for any other purpose disclosed to You at the time
• For legal and safety reasons — when required by law, or when We believe disclosure is necessary to protect members, investigate abuse, or defend Our rights

Service Providers that process data on Our behalf should not use Your Personal Data for their own marketing. Stripe and Persona also act as independent controllers for aspects of payments and identity verification and have their own privacy policies.

Other members may see information needed to participate in a gathering—for example display name, avatar, bio, city (when shown), verification badge, travel-style signals in roster previews, and content You post in meetup or trip contexts You have joined.

Other members do not see Your email, password, payment details, government ID, Persona document images, private gender field, date of birth, or the contents of safety reports You file. Reporters remain confidential from the reported member under Our access controls.

Blocking limits direct messaging between You and another member. It does not by itself hide You from every group context You both belong to.

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with Our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes, and enforce Our legal agreements and policies.

Account and activity data are generally kept while Your membership is active and for a reasonable period afterward. Safety reports and moderation records may be retained longer when needed to protect the community. Verification outcomes are retained as long as needed to enforce access rules. Usage Data may be retained for shorter internal analytics and security periods, or longer when used to strengthen security or improve Service functionality.

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means information may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where data-protection laws may differ.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy, and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of Your data and other personal information. Where required, We rely on appropriate safeguards offered by Our providers (such as Standard Contractual Clauses or equivalent mechanisms).

You have the right to delete or request that We assist in deleting Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service (for example by updating profile fields). You may also request deletion by contacting Us at privacy@thetwosociety.com. Please note that We may need to retain certain information when We have a legal obligation or lawful basis to do so (for example payment records, security logs, or unresolved safety investigations).

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Measures We use include encrypted transport (HTTPS), authenticated sessions, least-privilege server access, database access controls for member data, and webhook signature verification for Stripe and Persona where configured.

Our Service does not address anyone under the age of 18. We require a date of birth during registration and do not knowingly collect personally identifiable information from anyone under 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under 18 without verification of parental consent, We take steps to remove that information from Our servers and disable the account.

Our Service may contain links to other websites that are not operated by Us (for example Stripe Checkout or Persona verification). If You click a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We use Cookies and similar tracking technologies to maintain Your signed-in session and protect Account security. These are essential Cookies required for the Service to function.

We do not currently run third-party advertising trackers on the product. If We add optional analytics or marketing Cookies later, We will update this Privacy Policy and, where required, provide a choice or consent mechanism.

You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept essential Cookies, You may not be able to use some parts of Our Service (including staying signed in).

Depending on Your location, You may have rights regarding Your Personal Data, which may include:

• The right to access Personal Data We hold about You
• The right to correct inaccurate Personal Data
• The right to request deletion of Personal Data
• The right to restrict or object to certain processing
• The right to data portability, where applicable
• The right to withdraw consent where processing is based on consent
• The right to lodge a complaint with a supervisory authority

You may also update certain profile fields in the product, cancel meetup RSVPs, leave waitlists, manage blocks You have created, and manage billing through the membership billing flow (Stripe).

To exercise a privacy right, email privacy@thetwosociety.com from the address on Your Account. We may need to verify Your identity before fulfilling a request. We will not discriminate against You for exercising privacy rights.

If You are a California resident, the California Consumer Privacy Act (as amended by the CPRA) may provide You with specific rights regarding Your personal information.

We do not sell Your personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are commonly defined under California law. We do not use Your Personal Data for third-party advertising.

If Our practices change, We will update this Privacy Policy and provide any required opt-out mechanisms.

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top of this Privacy Policy.

For material changes, We may provide additional notice through the Service or by email when appropriate. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If You have any questions about this Privacy Policy, You can contact Us:

• By email: privacy@thetwosociety.com

Related pages: Terms · Safety · About