We only collect what is needed to schedule a meeting

What we store

• Meeting titles, descriptions, candidate dates, times, time zones, and meeting length.
• Participant display names and the available times they submit.
• Hashed admin passwords, recovery codes, sessions, and private edit credentials. Readable admin passwords are not stored.
• Short-lived request records and network-address-derived values used to prevent abuse, plus Cloudflare Turnstile verification results.

How data is used

Data is used only to create meetings, collect and edit responses, rank candidate times, let organizers manage meetings, and prevent automated abuse. We do not currently sell personal data or use advertising trackers.

Retention and deletion

Meetings expire 90 days after creation by default and are scheduled for permanent deletion 30 days after expiration. Organizers may delete an entire meeting or individual participants at any time. Admin sessions last up to 12 hours, and abuse-prevention records are retained only briefly.

Links, devices, and third-party services

Anyone with a participant link can view and respond to that meeting. Private edit permission is stored in the participant’s browser by default. Cross-device private edit links and required-participant links can modify specific responses and should not be published. The site uses Cloudflare for hosting, the database, and Turnstile verification, so related requests are also subject to Cloudflare’s services and privacy practices.

Questions, deletion requests, or reports

Organizers can delete data directly from the admin page. Participants who no longer have access from their original device or private link can ask the organizer to remove their response. For reports, data requests, or privacy questions, email togethr@proton.me with the relevant meeting link and a description of the issue. Do not send an admin password or recovery code. See Help for operating instructions.