Last updated: November 19, 2025
Welcome to the PartyHub AI website (including all subdomains, the "Site"), which is operated by Grassroot Lab LLC d/b/a PartyHubAI and its affiliates (collectively, “PartyHub AI,” “we,” “us,” and/or “our”). This Site provides, among other things, information about our people, organization, products and services (collectively, “Services”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and your choices concerning our data practices. This Privacy Policy is incorporated into and forms part of our Terms and Conditions. By using the Site, you agree to the terms of this Privacy Policy.
1.1. Controller/Processor Roles. For consumer accounts and marketplace operations, we act as a Controller. For certain vendor‑provided services where we process Personal Information on behalf of a vendor, we act as a Processor under a Data Processing Addendum (DPA) that includes security, sub‑processor notice, assistance with requests, and cross‑border transfer terms (e.g., SCCs, if applicable).
1.2. Personal Information. We collect information that, alone or in combination with other information in our possession, could be used to identify you (“Personal Information”).
1.2.1. Account Registration Information. We collect Personal Information when you create an account to use the Services, including your name, email address, and other contact and registration information.
1.2.2. Payment Information. We use a third‑party payment processor to collect and process card data. We do not store full payment card numbers; we may store tokenized identifiers, card type, and last four digits.
1.2.3. Payment Authorization and Processing. We use your payment information and payment authorization to process transactions, place holds for bookings, capture final payments, and remit payments to vendors. This may include withholding amounts for fees, chargebacks, or disputes as permitted under our Terms.
1.2.4. Profile Information. We may collect other Personal Information you upload to your account, such as a profile picture or other biographical information.
1.2.5. Customer Support Information. We collect contact information, such as your name and email address, as well as any information you provide in connection with your outreach to our customer support team.
1.2.6. Public Information. We collect any information you provide to publicly-accessible parts of the Services, such as in posts and comments to the Site.
1.2.7. Information from Promotions. We collect basic contact information and any other information you provide in connection with promotions, events, surveys, and sweepstakes.
1.2.8. Information from Integrations. We collect information contained in other apps/functionalities on your mobile device, such as your photos or contacts, in accordance with your app and device settings.
1.2.9. Tax Information (W‑9). If you are a vendor and your earnings exceed US $600 in a calendar year, we may collect your taxpayer identification number, completed IRS Form W‑9, or other tax documentation to comply with US tax reporting obligations.
1.2.10. Phone Number and Communication Preferences. When you provide your phone number, we collect it along with your preferences for receiving SMS messages or phone calls.
2.1. Third-Party Analytics. We may use third-party analytics services, such as Google Analytics and Amplitude Analytics, on our Services to collect and analyze usage information through cookies and similar technologies, to assist with fraud prevention, and to provide certain features to you. We may also work with a number of companies that assist in marketing our services to you on third-party websites, mobile apps, and online services. These third parties may use cookies, web beacons, or other tracking technologies to collect information about your use of the Services and your activities across other websites and online services.
2.2. Third-Party Policies and Opt-Outs. Our use of third-party analytics and advertising services is subject to the policies of these companies. We do not have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies that may be placed on your device by non-affiliated, third-party providers. However, you may opt-out of interest-based advertising from these third parties by visiting the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s (DAA’s) Consumer Opt-Out link, or TrustArc’s Advertising Choices Page. To opt-out of the display of interest-based advertising from Google, please visit the Google Ads Settings page. For more information and to exercise your choices regarding Facebook and/or Instagram ads, please visit the Facebook Ads Settings page and/or the Instagram Ads Settings page.
We may use Personal Information for the following purposes:
3.1.1. Provide the Information and Services You Request. We use Personal Information to provide you with the Services and the information you request, such as account access, transaction history, and customer support.
3.1.2. Customer Service. We use Personal Information to effectively respond to your inquiries and resolve any issues you may have while using the Services.
3.1.3. Personalization. We use Personal Information to personalize your experience with our Services, including customizing content and recommendations based on your usage patterns and preferences.
3.1.4. Transactional Communications. We use Personal Information to conduct transactions with you, such as billing you for the Services and processing payments.
3.1.5. Operational Notifications. We use Personal Information to send you operational information and notices related to your use of the Services, such as changes to our policies and maintenance updates.
3.1.6. Communications via Phone/SMS. We use your phone number to send you transactional SMS messages and phone calls related to bookings, event updates or customer‑support inquiries. If you opt in, we may also send marketing messages. You can opt out at any time by following the instructions in the message.
3.1.7. Marketing SMS/Calls. With your prior express written consent (as a PartyHub policy), we may send marketing texts/calls between 8 a.m. and 9 p.m. local time. Reply STOP to opt out at any time. Where consent is collected via a lead generator, we require brand‑specific (one‑to‑one) consent and messages that are topically related to the consented interaction.
3.1.8. AI‑Powered Features. We use AI tools to analyze your inputs and generate suggestions, itineraries and messaging to enhance your event‑planning experience. AI systems may process your Personal Information to provide these features. The results may be based on automated processing, but you remain responsible for verifying and acting on AI‑generated suggestions.
3.2.1. Promotional Content. We use Personal Information to contact you with special offers and other promotional content related to our Services that we believe will be of interest to you, in accordance with any privacy preferences you have expressed to us.
3.2.2. Surveys and Feedback. We use Personal Information to invite you to participate in promotions, sweepstakes, surveys, and provide feedback to us.
3.3.1. Service Analysis. We use Personal Information to analyze the use of the Services and improve the content, functionality, and usability of the Services.
3.3.2. Security Investigation. We use Personal Information to secure the Services and investigate and prevent fraud, security issues, and abuse.
3.3.3. Error Resolution. We use Personal Information to understand and resolve app crashes and other issues being reported.
3.4.1. Regulatory Compliance. We use Personal Information to comply with any procedures, laws, and regulations where necessary for our legitimate interests or the legitimate interests of others.
3.4.2. Legal Matters. We use Personal Information to establish, exercise, or defend our legal rights where necessary for our legitimate interests or the legitimate interests of others, including the enforcement of our [Terms and Conditions] and other usage policies.
3.4.3. Tax Compliance. We use vendor tax information (e.g., W‑9) to file required tax forms and comply with federal and state tax reporting laws.
3.5.1. Consent-Based Uses. We use Personal Information for any other purpose with your consent.
3.6.1. Combined Information. For the purposes discussed in this Privacy Policy, we may combine the Personal Information that we collect through the Services with information that we receive from other sources, both online and offline, and use such combined information in accordance with this Privacy Policy.
3.6.2. Aggregate/De-Identified Information. We may aggregate and/or de-identify any Personal Information collected through the Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also share such data with any third parties at our discretion.
4.1.1. Web Server Logs. We and our service providers may use web server logs to collect information about your usage of the Services.
4.1.2. SDKs. We embed SDKs in our applications and software to allow third parties to collect information about how users interact with the Services.
4.1.3. Cookies. We use cookies, small text files placed on your computer or mobile device, to recognize your computer, store your preferences and settings, understand the web pages of the Services you have visited, enhance your user experience, and perform searches and analytics.
4.1.4. Tracking Pixels. We use tracking pixels, tiny electronic tags with a unique identifier embedded in websites, online ads, and/or email, to collect usage information, measure the popularity of the Services and associated advertising, and access user cookies.
4.1.5. Additional Technologies. As we adopt additional technologies, we may also gather information through other methods.
We use cookies and similar technologies for different purposes. Essential cookies are necessary for basic site functionality, while analytics and advertising cookies help us understand how you use the site and deliver relevant ads. You can manage your cookie preferences at any time at partyhub.ai/cookies; we honor and persist your choices, and respect valid Global Privacy Control (GPC) signals.
4.2.1. Session Cookies. We may collect, access, or store session cookies to facilitate integrations with Services.
4.3.1. Cookie Settings. You can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information (e.g., Internet Explorer; Google Chrome; Mozilla Firefox; or Apple Safari). You can manage your cookie preferences at any time at partyhub.ai/cookies; we honor and persist your choices, and also respect valid Global Privacy Control (GPC) signals.
4.3.2. Flash Technologies. You can manage the use of Flash technologies, including flash cookies and local storage objects, with the Flash management tools available at Adobe’s website.
4.3.3. Effects of Blocking Cookies. Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Services.
We retain your Personal Information for as long as you have an open account with us or as otherwise necessary to provide our Services. In some cases we retain Personal Information for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. Afterwards, we retain some information in a depersonalized or aggregated form but not in a way that would identify you personally.
| DATA CATEGORY | RETENTION PERIOD | PURPOSE FOR RETENTION |
|---|---|---|
| Account Information (name, email, etc.) | For the lifetime of the account plus 3 years | To provide our services, for security, and to comply with legal obligations. |
| Transaction and Payment Data | 7 years after the transaction | To comply with financial and tax regulations. |
| User-Generated Content | For the lifetime of the account | To display the content on our platform as requested by the user. |
| Customer Support Communications | 3 years after the last communication | To resolve disputes and improve our services. |
| Usage Data and Analytics | 26 months | For statistical analysis and to improve our services. |
5.1. Post‑Closure Handling. Upon account closure, we remove public display of your User‑Generated Content within a reasonable time and retain only records necessary for legal, tax, fraud‑prevention, or security purposes.
6.1. Targeted Advertising, “Sale,” and Profiling Opt‑Out (Colorado). We may process Personal Information for targeted advertising. At this time, we do not “sell” or “share” personal information as those terms are defined by the Colorado Privacy Act and California laws. If this changes, we will update this Policy and honor opt‑out rights, including UOOM/GPC.
Colorado residents may opt out of targeted advertising, the sale of Personal Information, and certain profiling by: (i) using our “Do Not Sell/Share or Targeted Ads” link in the footer; or (ii) sending a request to privacy@grassrootlab.com. We honor Global Privacy Control (GPC) signals recognized by the Colorado Attorney General and will treat a valid GPC signal as a request to opt‑out of targeted advertising and sale for that browser/device until you change your settings.
You have certain rights with respect to your Personal Information, as set forth below. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Information, if necessary to verify your identity and the nature of your request.
6.2. Access: You can request more information about the Personal Information we hold about you and request a copy of such Personal Information.
6.3. Rectification: If you believe that any Personal Information we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
6.4. Erasure: You can request that we erase some or all of your Personal Information from our systems.
6.5. Portability: You can ask for a copy of your Personal Information in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
For all requests, please email privacy@grassrootlab.com.
If we deny your request, you may appeal by emailing privacy@grassrootlab.com with the subject “Privacy Appeal.” We will respond within 45 days (or up to 90 days with notice of the extension and reasons). If you disagree, we will explain how to contact the Colorado Attorney General.
6.6. Sensitive Data. We obtain consent where required by law before processing sensitive personal data (e.g., precise geolocation, biometric identifiers, health, or data revealing race/ethnicity). Where our profiling produces legal or similarly significant effects, you may opt out via the “Do Not Sell/Share or Targeted Ads” link or by emailing privacy@grassrootlab.com
7.1. California Residents: If you are a California resident, you have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes. For more information about your rights under the California Consumer Privacy Act (CCPA), please see the CCPA.
7.2. Nevada Residents: If you are a Nevada resident, you have the right to opt-out of the sale of your personally identifiable information for monetary consideration. We do not engage in such activity. However, if you are a Nevada resident who has purchased or leased goods or services from us and want to opt-out of any potential future sales under Nevada law, please contact us at privacy@grassrootlab.com.
7.3. Colorado Residents: If you are a Colorado resident, you have the right to access, correct, and delete your personal data, obtain a portable copy of your data, and opt out of the sale of personal data, targeted advertising, and profiling. To exercise these rights, please submit a request via our privacy portal or email us at privacy@grassrootlab.com with ‘Colorado Privacy Request’ in the subject line.
7.4. European Economic Area (EEA) Residents: If you are a resident of the European Economic Area (EEA), you have the right to:
7.4.1. Lodge a complaint with a supervisory authority if you believe our processing of your Personal Information infringes the GDPR.
7.4.2. Object to our processing of your Personal Information for direct marketing purposes.
7.4.3. Object to our processing of your Personal Information for our legitimate interests, and we will cease processing unless we have compelling legitimate grounds to continue.
Our Services are intended for adults aged 18 or over. Individuals 13–17 may use the Services only under a parent or legal guardian’s account. We do not knowingly collect personal information from children under 13. Effective Oct 1, 2025 (Colorado): if we know a user is a minor, we will (i) not process Personal Information for targeted advertising, sale, or certain profiling without legally required consent; (ii) use reasonable care to avoid heightened risk of harm; and (iii) conduct and maintain data protection assessments for online features likely to be accessed by minors.
The Services may contain links to other websites we do not operate or control, including social media services (“Third Party Sites”). The information that you disclose to Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy or our [Terms and Conditions]. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.
We may update this Privacy Policy from time to time when changes are made to our business or the Services. When we make changes to this Privacy Policy, we will post the changes to the Site and indicate the date this Privacy Policy was last revised, unless another type of notice is required by applicable law. We encourage you to review this policy periodically for any changes. By continuing to use our Services or providing us with Personal Information after we have updated this Privacy Policy, you consent to the revised Privacy Policy and practices described in it.
11.1. Disclaimer. We take various measures to protect your information, but we cannot guarantee complete security, as no method of electronic transmission or storage is entirely secure. We employ a variety of security measures, including encryption of data in transit and at rest, restricted employee access to personal data, and regular security assessments. In the event of a data breach involving your personal information, we will notify you promptly in accordance with applicable law.
11.2. Account Security. When you create an account with us, we prompt you to create a username and password. It is your responsibility to keep your password confidential and ensure that no unauthorized access occurs under your account. We suggest changing your passwords frequently, using a secure browser, and combining letters and numbers to ensure account security. If you suspect that someone else has access to your account, please notify us immediately at privacy@grassrootlab.com.
11.3. Assumption of Risk. You use the Services at your own risk. We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, emails sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Services or email. Please keep this in mind when disclosing any Personal Information to us via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Services, or Third Party Sites.
By using our Services, you understand and acknowledge that your Personal Information will be transferred from your location to our facilities and servers in the United States. If you are a resident of the European Economic Area (EEA), we will comply with GDPR requirements providing adequate protection for the transfer of personal information to countries outside of the EEA. We will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
For EEA/UK transfers, we rely on the EU Standard Contractual Clauses and, where applicable, the UK IDTA/Addendum, plus transfer impact assessments and supplementary measures as needed.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@grassrootlab.com. If you are not satisfied with our response, you may also contact the Colorado Attorney General’s office.
We may share your information with:
14.1. Vendors, planners, or other users as needed for booking fulfillment.
14.2. Service providers (e.g., payments, analytics, hosting, marketing).
14.3. Advertising and analytics partners (with opt-out choices available).
14.4. Affiliates within PartyHub AI’s corporate family.
14.5. Government authorities where required by law.
14.6. Buyers, successors, or related parties during mergers, acquisitions, or corporate changes.
This section explains how we use your payment and referral information solely to administer transactions and referral rewards. Marketing communications related to these programs are sent only with your prior express written consent and include clear opt‑out instructions.
15.1. Referral Program. If you participate in a referral program, we collect information about your referrals to track eligibility and deliver incentives.