Privacy

The short version

• Conny holds only what you give it, or what an event host's attendee list gave it: never anything scraped.
• You choose who sees each part of your profile. Your email and phone are for your connections only unless you say otherwise.
• Your notes on people are yours alone, at the database level. Nobody else can see them in Conny: not the host, not our team, not any model.
• An event's attendee list stays with whoever runs it. When organisations host an event together, the others get your email address only if the lead host gives it to them.
• Conny never sells your information and never moves money between people.
• You can download everything about you, or delete your account, whenever you like.

What Conny does with what you tell it

Version 1. It is every way Conny uses and shares what you tell it, and the database is built so it is the only thing that can happen.

1. Your suggestions

What you tell Conny about what you're after shapes the people and events we suggest to you, each with its reason. Your private notes about people are never used for anything, not even your own suggestions.

2. Hosts see totals, not your answers

Three days after an event, its host sees the totals from everyone's feedback, once, and only if at least eight people answered. Your note reaches them only if you choose to send it. Hosts do see who is on their list, who came and who picked each other, so they can run the event and seat people.

3. Help shape better events

On unless you turn it off, when you join or any time in Settings. You may get a short Conny survey, one a month at most, and your answers, and what you tell us you want from events, count only in totals. When a survey closes, we delete the link between you and your answers. You see the results of every survey you answer.

4. Who else gets anything

Organisations get totals about their own events, and comparisons with similar events run by others, never another organisation's results. We publish what we learn about good events, free. Councils and industry bodies can pay Conny to ask a survey question, one every three months at most: you see who is asking and choose whether to answer, everyone sees the results, and they never get your name or a way to contact you.

Never

We never sell your information. Sponsors get nothing from an event. We never scrape, and we never identify anyone from photos or voices. Everything we release beyond a host's own totals is listed on our public register. If this promise changes, the change never applies to what we already hold.

Totals never go out from fewer than eight answers, and where one or two people gave an answer it shows as "1 to 2". Comparisons between events are built from at least five events run by at least three organisations. Survey results go out from at least 30 answers. Totals can still show that everyone answered the same way. Only Lian Passmore of dreamstorm can reach the database directly, and only to keep Conny running. Everything released beyond a host's own totals is listed on what Conny has shared.

Who we are

Conny is created, owned and run by dreamstorm. We are the agency responsible for your information under the Privacy Act 2020. Our privacy officer is Lian Passmore of dreamstorm, privacy@conny.co.nz.

What we hold, and why

Before you tap your invitation

Your name and email address, from the attendee list of an event you registered for, held for that event's host so the invitation can reach you. The host uploads that list, or connects the site you booked on so Conny reads it from there; either way only your name and email come in, never your phone, address, answers or payment. Nothing else exists about you until you tap it, or until someone at the event scans your badge, which connects you and nothing more. If you never tap it and nobody scans your badge, your invitation is deleted 90 days after the event.

Your other email addresses

If you add another address you book events with, like a work one, in Settings: the address, and when you confirmed it with the code we emailed it. It's there so invitations and bookings under it reach your one Conny. Nobody else sees it, it's never used to suggest people, and it goes when you remove it or delete your account. You still sign in with your usual address.

Your profile

Your name, photo, business logo, headline, town or city, links, email and phone, and the longer sections about what you do and who you help, each with its own level: your connections, people you've been in a room with, everyone on Conny, or anyone. What you're focused on right now, who you're hoping to meet at each event, and your services (what you offer). Whether you can be found in the people directory, which is off until you say yes. The areas you said you want to know more about, if you pick any: only you see them, and they're used only to point you to events about them, saying that's why.

Events

Which events you're on, whether you checked in, your table, and whether it's your first time. Whether you're happy to be in photos and video on the night, if you answer. If a host asks you to help at the door, that you do. Whether you said yes to being seen as going: the others who said yes see you, and so do people you've met on Conny, who may see the event suggested to them because you're going. Your picks of people you'd like to meet, which the person picked sees only if they pick you too. Who you've been in a room with, which is what the "people at my events" level reads.

Your Conny number

A five-digit number of your own, the same at every event, printed on your badge and shown on your profile. Someone at an event with you can type it to connect with you, and the door team can type it to check you in. It works only inside an event you're both on, and it goes when your account does.

Connections

Who you're connected with, how (your badge, by its number or a scan, a request the other person confirmed, or both of you tapping We met at an online event) and at which event. At an online event, a We met tap that the other person hasn't matched yet is kept for you alone: they are never told you tapped, and it goes once you're connected, you take it back, or either of you blocks the other.

Your notes on people

What you write about someone you met, your tags and your table. Private to you at the database level: no one else can read them in Conny, including the person they're about, the host and our team, and our background jobs and any model have no way in at all. They never feed suggestions, not even your own. Emails and notifications never carry them; they link to your page instead. The only way past this is direct access to the database itself, held by Lian Passmore of dreamstorm alone and used only to keep Conny running.

Suggestions

People you might want to meet, each with its one-line reason and what it drew on. Made by simple rules from what people chose to share, at levels you're allowed to see. Shown only to you, and you can switch them off.

What reaches you

The record of which event emails we've sent you, so nobody gets one twice, your notification switches, and, if you turn push on, your device's push address. The Conny newsletter goes to you only if you say yes, at join or in Settings, and we keep when you said it. Say no in Settings, or from any newsletter, and it stops.

Questions for the host

Questions you ask on an event page, and which questions you've marked as wanting answered. Everyone on the event sees your question, with your name unless you ask without it; asked without it, nobody sees who asked, the host included. Only the host sees how many people marked each one. You can take a question back any time.

Looking after an organisation

If you ask to set up an organisation, or to look after one already on Conny: what you told us (its name, website and NZBN, what you do there, and any note), your sign-in address, and our answer. Our team reads it to check you can act for the organisation, and keeps a line on how we checked. If we invite you to look after one: your address, the organisation, and when you accepted. Which organisations you're the organisation lead for.

Asking about Conny for your events

If you use the form on Is Conny right for your event?: your name, email address, your organisation, group or event, and the town, website and note you add. It's kept in our database and emailed to the Conny team at hello@conny.co.nz, and used only to reply to you and talk about your events. You don't need an account, and nothing is added to Conny until we invite you.

Hosting an event

If you're invited to host an event: your name as the lead host typed it, the email address they invited you at, which parts of the event you have, and when you said yes. The other hosts see your name; only the lead host sees your address. If you lead an event, replies to its invitations and emails come to you, so someone who replies sees your email address. Once an event you hosted has started, your profile says so under "Events hosted", to people who can see that event anyway.

Agendas

If a host names you on an event's agenda: your name as they typed it, your role (speaker, keynote, panellist, MC or facilitator), and the email address they asked you at, until you answer. Everyone who can see the event sees the name and role. It links to your profile only if you approve it, and you can take the link off any time. Slides, links and pre-reading you add to your part, which the people on the event can open. Your own notes and photos on each part of an agenda are private to you at the database level, like your notes on people: nobody else can see them, the host and the speaker included, and they never feed suggestions or any model.

How the event was

If you answer the few questions after an event: your answers, which only you can read. The host sees only counts across everyone who answered, once feedback has closed, three days after the event, and only if at least eight people have answered, so they cannot watch the totals change as each answer comes in. Where one or two people gave an answer, the host sees "1 to 2", never an exact count. A note reaches the host only if you choose to send it, after you have seen what they will read: without your name, and with the names of people you can see on Conny, email addresses, links, phone numbers and table numbers taken out. The Conny team sees no more than the host. Your answers, never your note, also point you to events like the ones you rated well, and show you what has worked for you, on your Events page, for you alone.

Feedback

If you use the feedback tab: your note, the page you were on, and technical details about your browser and screen so we can fix what you saw.

People you block

If you block someone: who, and their name as you saw it, so you can find them again to unblock. Only you can see it. They are not told. If you add a line for the Conny team when you block, it is kept with the feedback notes and only the Conny team reads it.

Notes about you that someone else wrote

When you meet someone at an event, they may write a private note about you, the way anyone might in a notebook. That note is their information, held only for them. It is never shown to you, to anyone else, or to any model. If you delete your account, your name and the link to you are taken off every such note, and the author keeps only their own words.

A note like that is information about you that Conny holds without getting it from you, so we tell you here, before you meet anyone: this page is linked from your invitation and from join. You won't be told each time someone writes one, because nobody but its author can ever read it.

AI, and what it reads

• Drafting your profile, only when you ask: Claude, made by Anthropic, reads the website, text or screenshots you give it and drafts profile sections for you to confirm or throw away. Nothing is saved to your profile until you confirm it. Anthropic does not use what Conny sends to train its models, and deletes it within 30 days, unless its safety systems flag it as misuse, when it can keep it for up to two years.
• Suggestions and who's here: simple rules, no model.
• Your catch-up message the morning after: built from your own note by simple rules, no model.
• Voice notes: not offered. If you speak a note using your phone's own keyboard, that stays between you and your phone's maker; Conny only ever gets the text. No one is ever identified by voice or face.

A model drafts and never sends. Nothing goes out in your name unless you send it yourself.

Who else handles it

• Supabase stores the database and runs sign-in, in Sydney, Australia.
• Vercel runs the app, in Sydney, Australia. Your information passes through it on the way to and from the database.
• Vercel also counts which pages are opened, on the website and in the app, so we can see what people use. It uses no cookies. It is sent the page's address with anything personal taken out (no invitation or door codes, nobody's id), the page you came from, your country, and your kind of browser and device. It can't tell who you are, doesn't follow you from one day to the next, and never records how long you stay.
• Resend sends our emails, from team@conny.co.nz.
• Your browser's own push service (Apple, Google or Mozilla) carries push notifications, if you turn them on.
• Anthropic, only for profile drafting you ask for.
• The ticketing site you booked on (such as Humanitix, TryBooking, Ticket Tailor or Eventbrite), if the host connects it: Conny reads names and email addresses of people who booked, and sends it nothing about you.
• The NZBN register, run by the Ministry of Business, Innovation and Employment in New Zealand, when you search it to set up an organisation or fill in its profile: Conny sends it the name or number you type, and nothing about you. Of what comes back, Conny keeps only what you choose to fill in.

Some of these are outside New Zealand: Supabase and Vercel in Sydney, Resend and Anthropic in the United States. We use them because services like these aren't yet available in New Zealand at a cost a small team can carry. Each one holds or handles your information only for us, under contract, and doesn't use it for its own purposes, so under section 11 of the Privacy Act it is still held by us, and we stay responsible for it. The one exception is Anthropic's safety review: something it flags as misuse, it can keep for up to two years.

Organisations and hosts

You can follow as many organisations on Conny as you like, to see their events. Nobody approves a follow, you can stop at any time, and none of them owns you. An organisation's lead and organisation admins see that you follow it, with your name and headline, and anything else only at the levels you set. They can remove you.

Each event has one lead host, who runs it on Conny. The event belongs to one organisation, and that organisation's lead and organisation admins host it too. Together they see its invitation list (the names and email addresses from the attendee list) and who has joined, who's coming, who checked in, and picks that are mutual (for seating), never your notes. They also see whether you'd rather not be in photos, to brief a photographer, and the email address they named each person on the agenda by, and whether that person has approved.

Other organisations on Conny can host an event with it. Their followers see the event, and the recap thanks them by name, but a co-hosting organisation gets no attendee list. The lead host can also invite people to help host: someone from a co-hosting organisation, or someone from no organisation, like an event planner. Each of them has only the parts the lead host gives them. Only the part for invitations carries guests' email addresses, and the lead host has to say they trust that person with them before Conny will give it. The part for the emails before and after the event shows who's coming and who the emails reached.

Every host, and anyone the hosts name to help at the door, sees the names on the list, who's new, who has checked in, and who would rather not be in photos, so they can check people in. Those who don't have the invitation list see this on the day of the event only, and never see email addresses.

NZ Businesswomen and NZ Business Academy events are the one exception that leaves Conny. The morning after one of their events, and for a fortnight after, Conny tells the NZ Businesswomen member platform who was checked in, so a member sees the events she has been to on her own stats there. Conny sends a scrambled form of each email address, never the address, never anything else about you. The platform keeps only the ones that match its own members, by the same address, and throws the rest away unread. Booking or saying you're coming is never sent, only checking in.

Until 26 October 2026 an organisation could give Conny its own member list, names and email addresses. Conny no longer asks for one and uses any list it holds for nothing. Conny sent nobody on a list anything. You can see any list that has your address in your data download, and deleting your account removes your address from every list.

Each organisation has a profile that everyone on Conny can see: its logo, what it does, its town, its website, its events coming up and past, and its NZBN if it gives one, with a link to the public NZBN register. It names the organisation lead, as each person is allowed to see the lead's name. It never lists followers or says how many there are. The lead and organisation admins write it. For a sole trader, the register's own page shows the owner's legal name; Conny shows only the trading name.

Your rights

• See and download everything about you, any time, from Your data.
• Correct it: your profile is yours to change, and so is who sees each part.
• Delete your account and everything that is yours, from Your data.
• Ask us anything, or complain, at privacy@conny.co.nz. If you're not happy with our answer, you can complain to the Privacy Commissioner at privacy.org.nz.

How long we keep it

Until you delete your account, apart from unused invitations (above). That includes feedback notes, which are kept in our database and deleted with your account. An enquiry from the form for organisers is deleted once we've answered it and it's done with, or sooner if you ask. When a host deletes an event it is kept for 30 days, in case it was a mistake, and then deleted for good with its attendee list; who you connected with there stays with you. A device that stops accepting push notifications is removed the first time one fails to reach it. Resend keeps a record of each email it sends for 30 days.