1. Who we are

Cruncho is operated by Dream Troopers AB, a company registered in Sweden.

Address: Ekbacksvägen 22, 168 69 Stockholm, Sweden
Email: [email protected]

We are the data controller for data collected through cruncho.com. When you use the Cruncho Events platform as a client, we act as data processor on behalf of your organization (the data controller).

2. What data we collect

Website visitors (cruncho.com):

• Contact form submissions: name, email, organization, message
• Demo booking: name, email, organization, role (via embedded booking widget)
• Analytics: page views, referral source, device type (via Simple Analytics — no personal data, no cookies)
• HubSpot tracking: pages visited, interactions, IP address (cookie-based)

Event Manager users (organizers & admins):

• Account data: name, email, password (hashed), phone (optional), organization
• Event data: event content, images, dates, locations, categories
• Activity logs: event submissions, approvals, edits (History Logbook)

Calendar visitors (end users browsing event calendars):

• No account or personal data required to browse
• RSVP / ticketing: name, email (if the visitor chooses to register or purchase)
• Favorites and category likes: saved during cookie session; persist across sessions only when the user logs in. Cruncho does not share these personal choices with any external actor.
• Analytics: aggregated, anonymized usage data for monthly reports

Ticketing (via Stripe):

• Payment data is processed by Stripe. Cruncho does not store credit card numbers.
• Transaction records: ticket type, amount, buyer email (for confirmation and refunds)

3. How we use your data

We use collected data for:

• Service delivery — operating the Event Manager, publishing events, processing tickets
• Communication — responding to inquiries, sending booking confirmations, account notifications
• Analytics — understanding website usage to improve our content and product
• Sales — following up on demo requests and contact form submissions (HubSpot)
• Legal compliance — fulfilling our contractual and regulatory obligations

Legal bases (GDPR Article 6): contract performance, legitimate interest, consent (for optional cookies and marketing), and legal obligation.

4. Cookies & tracking

Summary of cookies and tracking tools used on cruncho.com and Cruncho Events calendars:

• Essential cookies — required for the website and platform to function (session management, security)
• Analytics — Simple Analytics — cookie-free, privacy-first analytics. No personal data collected. Counts page views, referrals, and device types only. No consent required.
• Analytics — HubSpot — uses cookies to track page visits and interactions for sales follow-up. Can be declined via cookie banner. Requires consent.
• No marketing or advertising cookies — we do not use any third-party advertising trackers.

You can manage your cookie preferences at any time using the cookie settings link in our footer.

Cookies we use

Simple Analytics does not use cookies and is not listed above. It collects only aggregated, anonymized page view data with no personal information.

5. Data processing (Cruncho Events platform)

When your organization uses Cruncho Events, you (the client) are the data controller for the event data and organizer accounts on your platform. Cruncho acts as data processor, processing data only as instructed by you and as necessary to provide the service.

We process data to: operate the Event Manager, publish events to your calendars, send automated notifications, generate analytics reports, and process ticket payments.

We do not sell, share, or use your event data or organizer data for any purpose other than delivering the service.

6. Third-party services

We use the following third-party services that may process personal data:

• Stripe — payment processing for ticketing (PCI DSS compliant)
• HubSpot — CRM and sales analytics for cruncho.com (EU data center)
• Simple Analytics — privacy-first website analytics (no personal data, EU-based)
• Hosting provider — servers in Frankfurt, Germany (EU)
• Email service — for automated notifications (transactional emails)

We do not share data with advertising networks, data brokers, or social media platforms.

7. Data storage & security

Location: All data is stored in the European Union (Frankfurt, Germany). No data is transferred outside the EU/EEA unless explicitly required by a client's configuration and with appropriate safeguards.

Security measures: encryption at rest and in transit (TLS 1.2+), access controls, regular security reviews, automated backups, and incident response procedures.

Access: Only authorized Cruncho team members can access client data, and only as needed to provide support or maintain the service.

8. Data retention

Website data: contact form submissions and demo bookings are retained in HubSpot for up to 24 months or until you request deletion.

Event Manager accounts: retained for the duration of the client contract. Upon contract termination, all data is deleted within 90 days unless retention is required by law.

Ticketing data: transaction records retained for 7 years as required by Swedish accounting law.

Analytics: Simple Analytics data is aggregated and anonymized — no personal data to retain. HubSpot tracking data follows HubSpot's retention policies.

9. Your rights

Under GDPR and CCPA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Restriction — request we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — for any processing based on consent (e.g., optional cookies)

To exercise any of these rights, email [email protected]. We respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY).

10. Children's privacy

Cruncho does not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

11. International transfers

All primary data processing occurs within the EU/EEA. Some third-party services (e.g., Stripe, HubSpot) may process data in the United States under EU-US Data Privacy Framework safeguards or Standard Contractual Clauses.

12. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date. For significant changes, we will notify clients via email.

13. Contact us

For any privacy-related questions or requests:

Dream Troopers AB
Ekbacksvägen 22, 168 69 Stockholm, Sweden
Email: [email protected]