Privacy notice

Last updated: 25 October 2026

Who we are

WhoRoom is run by Bradley Fischer, based in Spain, who is responsible for your data. Contact: [email protected].

What we collect and why

  • Early-access list: your email and the date you agreed, so we can send you WhoRoom updates. Legal basis: your consent.
  • When you join an event wall: your name, an optional photo, one line about what you do, and only the links you choose to show (for example LinkedIn, WhatsApp, Instagram, website). We use them to show your card to the other people at that event. Legal basis: your consent, which you can withdraw by hiding or deleting your card.
  • Your email, if you give it or sign in with Apple or Google, so we can send you the next-morning list of people you met. It is never shown to other attendees.
  • Your stars and notes on other people. Only you can see them.

Who can see your card

Only people who joined the same event. Walls are not public and are hidden from search engines. Anyone with the event’s QR link can join that event, so only share what you are happy for the room to see.

How long we keep it

  • Each event wall closes 7 days after the event.
  • 30 days after the event we delete all cards, stars, notes and photos from that event, keeping only anonymous totals (such as how many people joined).
  • If you sign in to keep your profile, we keep it until you delete it.
  • The early-access list is kept until you unsubscribe.

What we never do

We do not sell, rent or charge for access to anyone’s details, and there is no bulk export of other attendees’ contact details.

Service providers

We use a few providers to run WhoRoom, under data processing agreements:

  • Supabase: database, sign-in and photo storage, hosted in Frankfurt (EU).
  • Amazon Web Services (SES): sending emails, from Frankfurt (EU).
  • Cloudflare: website hosting and email forwarding.
  • Apple and Google: only if you choose to sign in with them.

Your rights

You can hide or delete your card at any time from the event page. You can also ask us to access, correct, export or delete your data, or withdraw consent, by emailing [email protected]. If you are unhappy with how we handle your data, you can complain to the Spanish Data Protection Agency (aepd.es).