Alby Privacy Policy

Last updated: 30 May 2026

Alby is an event platform for building event microsites, registration and invite-only access flows, audience interaction tools and formal voting experiences. This Privacy Policy explains how Alby collects, uses, stores and shares personal information.

Plain English version: Alby collects the information needed to run accounts and events, protect access, send event emails, process billing, operate interaction/voting tools and keep audit records where the event requires them.

1. Who this policy covers

This policy applies to people who use Alby, including account owners, account administrators, event editors, event viewers, microsite visitors, registrants, invite-only attendees, lead-capture users, voters, observers and people who submit chat, Q&A or poll responses.

Where an organisation uses Alby to run an event, that organisation is usually responsible for deciding what attendee, voter or participant information is collected for that event. Alby provides the platform used to collect and process that information.

2. Information we collect

The information collected depends on how Alby is used. It may include:

Account details such as name, organisation, email address, role, login records and account permissions.
Billing and subscription information such as plan selection, invoice records, payment status and Stripe checkout references.
Event setup information such as event names, dates, pages, branding, embeds, access settings, email templates and event configuration.
Registration, invite-only and lead-capture details such as name, email address, organisation, branch, custom registration fields and unique access links.
Voting information such as voter records, voting eligibility, voting status, submitted votes, observer records, access audit logs, organisation breakdown data and round history.
Interaction information such as chat messages, Q&A submissions, poll responses, moderation actions, display selections and presenter/on-air output settings.
Email records such as send status, timestamps, recipient address, skipped send reasons and delivery-related logs.
Technical information such as IP address, browser user agent, session identifiers, device/browser identifiers, page access logs, timestamps and error/debug information.

3. How we use information

Alby uses personal information to:

Create, manage and secure Alby accounts.
Provide event microsites, registration pages, invite-only access and lead-capture forms.
Send invitation, confirmation, reminder, feedback and platform emails.
Operate Alby Vote, including access control, voting, results, participation tracking and audit records.
Operate Alby Interact, including chat, Q&A, polling, moderation and display outputs.
Process subscription, billing, checkout and usage information.
Protect the service from misuse, unauthorised access, fraud and security incidents.
Support, maintain, test and improve the platform.
Meet legal, tax, accounting, dispute resolution and audit obligations.

4. Event organiser responsibilities

Event organisers control much of the information collected through their own Alby events. They are responsible for ensuring they have permission or another lawful basis to collect attendee, registrant, voter or participant information, and for explaining event-specific use of that information where required.

For example, if an event organiser adds custom registration fields, uploads a voter list, enables organisation-level reporting or exports event records, the organiser is responsible for using that data appropriately.

5. Cookies and similar technologies

Alby uses essential cookies and similar technologies to keep users signed in, maintain event sessions, protect access-controlled pages and support platform security. More detail is available in the Cookie Notice.

6. Sharing information

Alby may share information with:

The account owner, authorised account users and event administrators connected to the relevant account or event.
Service providers that help operate Alby, such as hosting providers, email infrastructure, payment processors, analytics/logging services and security tools.
Third-party services selected or embedded by an event organiser, such as livestream platforms, Zoom, Slido, Vimeo, YouTube or similar tools.
Professional advisers, regulators, law enforcement or other parties where required by law or necessary to protect Alby, users or the public.

Alby does not sell personal information to advertisers.

7. Third-party services and embedded content

Events may include third-party embeds or integrations. Those services may collect information directly from users under their own policies. Event organisers should check the relevant third-party terms and privacy notices before embedding or enabling those tools.

8. Storage, security and retention

Alby uses reasonable technical and organisational safeguards to protect personal information from loss, misuse, unauthorised access, disclosure or alteration. No internet service can be guaranteed completely secure, but security and access control are treated as core platform requirements.

Information is retained for as long as needed to provide Alby, maintain event records, support audit requirements, comply with legal/accounting obligations, resolve disputes and protect the platform. Event lifecycle controls may make public event pages unavailable while administrative records remain accessible to authorised users.

9. Access and correction

People may ask to access or correct personal information held about them. Account users can update some information directly inside Alby. Event attendees, voters and participants should usually contact the event organiser first, because the organiser controls the event and its records.

Privacy requests can also be sent to privacy@alby.live.

10. International processing

Alby and its service providers may process or store information in New Zealand or other countries where hosting, payment, email, communication or support services are located. Where information is sent to service providers, Alby expects those providers to protect the information appropriately.

11. Children and sensitive information

Alby is designed for event and organisation use. It is not intended for children to create accounts. Event organisers should avoid collecting sensitive information unless it is genuinely required for the event and they have handled any required notice, consent or legal basis.

12. Changes to this policy

Alby may update this Privacy Policy as the platform changes. The updated date above shows when this page was last revised.

13. Contact

For privacy questions or requests, contact privacy@alby.live.