Privacy Policy
1. Who we are
Tavolen ("we", "us", "our") is operated by Andrey Vyshlov, based in London, United Kingdom. You can reach us at privacy@tavolen.com.
2. What this service does
Tavolen is an event networking tool. An organizer creates a temporary table and shares its unique link or QR code. Attendees who choose to participate add a display name and, optionally, a supported public profile. They can import a profile from GitHub or LinkedIn when that provider is available, or enter another supported profile link themselves. The table and its roster are automatically and permanently deleted 24 hours after creation.
3. Data we collect and why
When you join a table, we store only:
- Display name — to identify you on the table roster.
- Public profile URL (optional) — so other attendees can visit the profile you chose to share.
- Join method and time — to operate the temporary roster and understand which profile-sharing options are used.
If you use GitHub import, Tavolen requests no OAuth scope, uses only your public name, username, and profile URL, and immediately revokes its temporary access after the import. If you use LinkedIn import, Tavolen uses only your name and public profile URL. Provider access tokens are never persisted.
We do not read or store:
- Your email address
- Your phone number
- Your connections, private repositories, messages, or activity
- Your profile photo or any private profile data
- Provider access tokens
We never receive or store your GitHub, LinkedIn, or other provider password. Authentication is handled entirely by the provider.
4. How your data is used
Your data is used solely to display your name and chosen public profile on the temporary table roster so that other attendees can identify and connect with you, and to maintain anonymous service-usage counts. We do not use your data for advertising, profiling, or marketing.
5. Who can see your data
Your display name and chosen public profile link are visible to anyone who has the table's unique, hard-to-guess URL. Do not join a table or share a profile you would not want those people to see. Tavolen does not publicly index, sell, or disclose roster data to advertisers or data brokers.
6. Retention
Event roster data is automatically and permanently deleted 24 hours after the event is created. We do not retain backups of event data after deletion.
7. Legal basis (UK GDPR)
We process your data on the basis of your consent. Participation is entirely opt-in: you choose whether to open a table and whether to add a profile. You may withdraw consent by not participating. If a table is still active and you wish to have your entry removed, contact us at privacy@tavolen.com and we will delete it promptly.
8. Your rights
Under UK GDPR you have the right to access, correct, or delete the personal data we hold about you, to object to processing, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk). To exercise any of these rights, email privacy@tavolen.com.
9. Cookies and tracking
Tavolen does not use advertising cookies, analytics cookies, or third-party trackers. It uses essential, signed cookies to protect form submissions, maintain short-lived provider-import state, and remember that your browser has joined a table for the table's lifetime.
10. Data transfers
Our infrastructure is hosted on Oracle Cloud. If data is processed outside the UK or EEA, we rely on standard contractual clauses or equivalent safeguards as required by UK GDPR.
11. Changes
If we make material changes to this policy, we will update the effective date above. Given the ephemeral nature of the service, changes take effect immediately on publication.
Contact
Privacy enquiries: privacy@tavolen.com