Privacy Policy
Last updated July 2026
Gathory is the business platform wellness professionals use to sell retreats, trainings, and courses under their own brand. This policy explains what personal data we handle, why, and the choices you have, whether you're a host running your business on Gathory or a guest booking with one.
What we collect
From hosts: account details (name, email), organization and offering content, and billing information for your subscription. Payment credentials are handled by Stripe; we never see or store card numbers.
From guests booking with a host: the details the host's checkout asks for, such as name, email, and, where the host requires it, dietary needs, arrival details, emergency contacts, and signed waivers. This data belongs to the host you book with; we process it on their behalf.
Automatically: standard technical logs and, where a host has enabled attribution, a first-touch source cookie that expires after 30 days.
What we never do
We never hold your money. Every payment settles directly on the host's own Stripe account; we are never the merchant of record.
We never sell personal data, and we never use guest data to market our own platform to guests.
How data is used
To run the product: bookings, payments, waivers, guest emails (confirmations and reminders sent on the host's brand), and the content hubs guests are enrolled in.
AI features draft content for hosts (copy, itineraries, emails, answers to guest questions). Drafts are generated from the host's own content, are always reviewed by the host before they're sent, and are not used to train AI models.
Who we share it with
Only the service providers the product runs on: Stripe (payments), Neon (database hosting), Vercel (application hosting), Resend (email delivery), and Anthropic (AI drafting). Each processes data solely to provide their service to us.
If a host enables a Meta Pixel on their pages, Meta receives standard pixel events from those pages under the host's own configuration.
Your rights and choices
Hosts own their data: contacts, attendees, and signed waivers export as CSV and ZIP at any time, on every plan.
Guests can request deletion of their personal data at any time using the self-service link included in booking emails, or by contacting the host they booked with. Waiver records required for legal reasons are anonymized rather than deleted.
Every marketing email includes one-click unsubscribe.
Retention and security
We keep data only as long as an account is active or as required for legal and financial records. Data is encrypted in transit and at rest, and every record is isolated per organization.
Changes to this policy
If this policy changes materially, we'll notify hosts by email before the change takes effect.
Questions? Write to us at hello@gathory.com.