Legal

Privacy Policy

Last updated 6 October 2026

How Peersto collects, uses and protects personal data, and the choices you have.

1. Who we are

Peersto is operated by Delight Spectrum Ltd, a company registered in England and Wales, with its registered office at 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom. This policy explains how we handle personal data, in line with the UK GDPR and the Data Protection Act 2018.

2. Our two roles

Controller. We decide how to use the personal data of our customers (account holders and their team), visitors to our website, and people who contact us.

Processor. When a host uses Peersto to run a roundtable, the data about their guests and contacts (registrations, attendance, chat, recordings and contact details) is processed on the host’s behalf. The host is the controller of that data. If you registered for or attended a session, please contact the host directly about your data; we will help them respond.

3. Data we collect

  • Account data: your name, email address, password (stored securely by our authentication provider) and company settings such as your logo and company name.
  • Billing data: plan, invoices and payment status. Card details are handled by Stripe and never stored by us.
  • Event data: roundtables, sessions, agendas and event pages you create.
  • Guest and contact data (as a processor): names, email addresses, company, job title, LinkedIn profile URL, registration and attendance status, chat messages, recordings and transcripts.
  • Support messages: the email address and message you send through our support page.
  • Usage data: pages visited, actions in the app, device and browser information, and IP addresses in server logs.

4. How we use it and why

  • To provide the Service and your account, take payments and send service emails, such as registration confirmations and reminders (performance of our contract with you).
  • To keep Peersto secure, prevent misuse, fix problems and improve the product (our legitimate interests).
  • To answer support requests (our legitimate interests).
  • To keep records required for tax and accounting (legal obligation).
  • For optional analytics or marketing tools, where the law requires it (your consent).

5. Who we share it with

We do not sell personal data. We use trusted providers who process data on our behalf, only to run the Service:

  • Supabase: database, authentication and file storage.
  • DigitalOcean: website hosting.
  • Daily: live video, recordings and transcription.
  • Stripe: payments and billing.
  • Mailgun: sending emails such as invitations, confirmations and reminders.
  • OpenAI: generating AI suggestions, such as event copy and invitation drafts.
  • Vayne: enriching contacts with public professional information, when you choose to.
  • DuckDuckGo: looking up company logos from a company’s web domain (no personal data is sent).

We may also share data when required by law, or with a buyer if our business is sold, in which case this policy continues to apply.

6. International transfers

Some of our providers process data outside the UK, including in the United States. Where they do, we rely on safeguards recognised by UK law, such as adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep it

We keep account and event data for as long as your account is active. When you delete content, or close your account, we delete the related data within a reasonable period, except where we need to keep records for legal, tax or security reasons. Hosts can delete recordings, contacts and sessions at any time.

8. Security

Data is encrypted in transit, access is restricted to what each part of the Service needs, and we review our providers’ security practices. No system is perfectly secure, so please use a strong, unique password.

9. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. Contact us through the support page; we reply within one month.

You can also complain to the Information Commissioner’s Office (ico.org.uk), although we would appreciate the chance to help first.

10. Cookies and similar technologies

We use essential browser storage to keep you signed in and to remember settings such as your preferred view. We record usage on our own systems (pages visited and actions taken, linked to a random visitor ID) to understand how the product is used. If we add third-party analytics or advertising tools, we will ask for your consent where the law requires it.

11. Children

Peersto is a business service and is not intended for anyone under 18.

12. Changes to this policy

We may update this policy. If the changes are significant, we will tell you by email or in the app.

13. Contact

Delight Spectrum Ltd, trading as Peersto. Registered office: 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom. You can reach us through our support page.