Privacy Policy
Last updated: June 2026
1. Data Controller
WhatsThePlan ("WTP", "we", "us") is the data controller for personal data processed through whatstheplan.club. Contact: privacy@whatstheplan.club
2. Data We Collect
Account data: Name, email, city, age, Instagram handle, WhatsApp number (provided at registration).
Usage data: Pages visited, actions taken, IP address, device type, browser (collected automatically).
Contributor data: Follower counts, promo codes, sales results, payout information, imported contacts (with your consent).
Payment data: Processed by Stripe. We do not store card numbers.
3. Legal Basis (GDPR Art. 6)
Contract: Processing necessary to provide our services (account management, event promotion, payouts).
Consent: Contact import, marketing communications, cookies beyond essential.
Legitimate interest: Analytics, fraud prevention, service improvement.
4. How We Use Data
- Operate and improve the platform
- Match contributors to events
- Process payouts via Stripe Connect
- Send transactional emails (application status, payouts, event updates)
- Generate leaderboards and rankings
- Analytics and monitoring (Sentry for error tracking)
5. Data Sharing
We share data with: Supabase (hosting/database), Stripe (payments), Resend (email), Netlify (hosting), Sentry (error monitoring). All providers are GDPR-compliant. We do not sell your data.
6. Your Rights
Under GDPR, you have the right to: access, rectify, erase, restrict processing, data portability, and object. To exercise any right, email privacy@whatstheplan.club. We respond within 30 days.
7. Data Retention
Account data is retained while your account is active. After deletion, data is purged within 30 days. Financial records are retained for 7 years as required by Portuguese tax law.
8. Cookies
See our Cookie Policy for details on cookies and tracking.
9. Contact
For privacy inquiries: privacy@whatstheplan.club