Privacy Policy

Last updated: October 3, 2026

1. Who We Are

Fairily, LLC ("Fairily," "we," "us," or "our") is a company registered in the State of Oregon, United States. We operate the Fairily platform, which connects event organizers with vendors for markets, fairs, and similar events.

For questions about this policy or your personal data, contact us at admin@fairily.net.

2. What Data We Collect

Account Information (all users)

• Name and email address
• Password, if you use password sign-in (stored as a salted hash, never in plaintext)
• Account type (organizer or vendor)

Sign in with Google

If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account, along with a unique identifier that lets us recognize your account on future sign-ins. We use this information solely to create and authenticate your Fairily account. We never receive your Google password, and we do not access your Gmail, contacts, calendar, or any other Google account data. Your use of Google Sign-In is also subject to the Google Privacy Policy.

Fairily's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Organizer Profiles

• Organization or business name
• Contact information
• Event details: names, dates, locations, descriptions, booth layouts, rosters
• API keys (if using integrations): stored as hashed values with usage metadata

Vendor Profiles

• Business name and description
• Business location (city, state)
• Vendor type and product categories
• Profile images and booth photos
• Values attributes (e.g., Handmade, Women-owned)
• Food vendor details (cuisine type, dietary accommodations), where applicable

Application Data

• Applications submitted by vendors to events
• Application status, notes, and review history
• Booth assignments

Financial Data

• Transaction records: amounts, dates, payment type, status
• Invoice details and line items
• Refund records
• Payment method information is processed by our payment processor and is not stored directly on our servers

Automatically Collected Data

• Browser type and device information
• IP address
• Pages visited and actions taken within the platform
• Cookies (see Section 8)

3. How We Use Your Data

We do not sell your personal data. We never have and never will.

We use your data only for the purposes described below:

4. Who We Share Data With

Between Users

Fairily is a two-sided marketplace. When a vendor applies to an event, the organizer can see the vendor's profile information and application details. When an organizer publishes an event, vendors and the public can see event details. This sharing is core to how the platform works.

Service Providers (Sub-processors)

We use the following third-party services to operate the platform:

All service providers are bound by data processing agreements and are only permitted to process your data for the purposes we specify.

Organizers may also use API keys to access platform data through additional third-party tools of their choosing. When they do, data accessed through the API is processed by the organizer's chosen service providers. Organizers are responsible for how they use data obtained through the API.

Legal Requirements

We may disclose your data if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal proceedings, a court order, or a government request.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you before your information is transferred and becomes subject to different privacy practices.

5. Data Retention

We retain your personal data for as long as your account is active and as needed to provide our services. Specifically:

• Account data: retained while your account is active. Accounts inactive for 2 years or more may be flagged for deletion with advance notice.
• Transaction records: retained for 7 years after the transaction date, as required by financial and tax regulations. Personal identifiers in these records are anonymized after the retention period.
• Application records: retained for the life of the associated event plus 1 year, then anonymized.
• Uploaded media: deleted when you remove them or when your account is deleted.

When data is no longer needed, it is either deleted or anonymized so that it can no longer be linked to you.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data. You can also update most information directly through your account settings.
• Erasure: Request deletion of your account and personal data, subject to our legal retention obligations (see Section 5).
• Data portability: Request a copy of your data in a machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw it at any time.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information.

To exercise any of these rights, contact us at admin@fairily.net. We will respond within 30 days.

7. International Data Transfers

Fairily is based in the United States. If you access our platform from outside the US, your data will be transferred to and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for these transfers. Our service providers who process data outside the EEA are also bound by appropriate transfer mechanisms.

8. Cookies

We use cookies solely for authentication and session management. These cookies are essential for keeping you logged in and ensuring the security of your account. We do not use cookies for advertising, tracking, or analytics purposes.

We do not share, sell, or otherwise distribute any data collected through cookies to third parties. If our use of cookies changes in the future, we will update this policy and provide a mechanism to manage your cookie preferences.

Our Service does not respond to "Do Not Track" browser signals. Because we do not engage in cross-site tracking or use advertising cookies, your browsing experience is the same regardless of this setting.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Hashed storage of passwords and API keys
• Role-based access controls
• Regular security reviews

No method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at admin@fairily.net.

In the event of a data breach that affects your personal data, we will notify affected users and relevant authorities as required by applicable law, including within 72 hours where required by GDPR.

10. Children's Privacy

Fairily is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Third-Party Links

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you by email or through a notice on the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

If you have questions, concerns, or requests related to your privacy or this policy, contact us at:

If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.