Privacy Policy

Attend Holdings, LLC (“Attend,” “we,” “us,” or “our”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use weattend.com, the Attend mobile and web application (the “App”), and related services (collectively, the “Services”).

By accessing or using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide, including:

• Name, email address, phone number
• Account credentials
• Billing and payment information
• Property address and home-related details
• Appointment requests and service communications
• Photos, notes, documents, and records related to your home

1.2 Information Collected Automatically

When you use the Services, we may automatically collect:

• Device type, operating system, and app version
• IP address and general location (city/state level)
• App usage data and interaction logs
• Diagnostic and performance data

1.3 Information from Service Providers

We may receive information from third-party service providers, such as:

• Service completion notes
• Observations related to home systems or equipment
• Scheduling and availability updates

1.4 Third-Party Processors and Recipients

We use the following third-party service providers to operate weattend.com. Each is bound by data-processing terms and uses your data only to perform services on our behalf, except where noted as a third-party recipient for advertising purposes.

Infrastructure

• Vercel — hosting, edge runtime, server logs
• Sentry — error monitoring (client, server, edge)
• Upstash Redis — rate limiting on form endpoints
• Cloudflare Turnstile — anti-bot challenge on booking and call-scheduling forms

Content and forms

• Sanity — content management system delivering page content
• Resend — newsletter audience storage and transactional email delivery for lead notifications and visitor confirmations (sender domain: mail.weattend.com)

Analytics

• Google Analytics 4 (property 535917003) — site analytics, conversion measurement, and audience definition. When Google Signals data collection is enabled on the property, Google Analytics also uses signed-in Google users’ data to provide cross-device measurement, Demographics and Interests reports, and remarketing audience seeding for Google Ads. This makes Google a third-party recipient for advertising purposes under VCDPA, MDPDPA, and CCPA. You may opt out of Google Signals personalization at myaccount.google.com/data-and-privacy (Personalized ads) or at weattend.com/privacy-choices.
• Google Tag Manager (container GTM-WM7LCJ44) — tag orchestration

Embedded services

• Google Maps Embed API and Places JS — address pin and autocomplete on the booking form

Advertising partners (not currently active)

• Meta, LinkedIn, and TikTok pixels are integrated but paused. When activated, they will receive cookie identifiers and (where you have not opted out) hashed identifiers for audience matching. These are third-party recipients for advertising purposes under VCDPA, MDPDPA, and CCPA, and are subject to your opt-out at weattend.com/privacy-choices.

1.5 Cookies and similar technologies

We use the following cookies and similar technologies on weattend.com. Categories with toggles can be managed at weattend.com/privacy-choices.

Strictly necessary (always on)

• attend_consent_v1 — first-party, 180 days — stores your privacy preferences
• Cloudflare Turnstile session token — short-lived (per Cloudflare’s retention) — bot-challenge state
• Upstash rate-limit keys — ephemeral, TTL-based — abuse prevention

Analytics (granted by default for US visitors; opt-out available)

• Google Analytics 4 cookies (_ga, _ga_<container>) — up to 2 years per Google. When Google Signals is active on the property, these cookies are also used to associate sessions with signed-in Google accounts for cross-device measurement and remarketing.

Advertising (denied by default; activated only when you grant consent)

• Meta, LinkedIn, TikTok pixel cookies — set only when their respective categories are toggled on and the pixels are active (currently paused)
• Google Tag Manager container — does not set cookies itself; loads other tags based on consent state

2. How We Use Information

We use personal information to:

• Provide and operate the Services
• Manage accounts and memberships
• Schedule and coordinate services
• Store and display home-related records
• Communicate with you regarding services, updates, and support
• Process payments and subscriptions
• Improve app functionality and user experience
• Comply with legal and regulatory obligations

2.1 Sale and Sharing of Personal Information

Under the broad definitions of “sale” and “sharing” in state privacy laws (Virginia VCDPA, Maryland MDPDPA, and California CCPA), our use of advertising cookies, advertising pixels, and cross-device analytics signals — including, when active, Google Analytics with Google Signals enabled (cross-device measurement and remarketing audience seeding) and Meta, LinkedIn, and TikTok pixels for audience matching and cross-context behavioral advertising — may constitute “sale” or “sharing” of personal information. We do not sell personal information for monetary consideration. You may opt out at weattend.com/privacy-choices, by sending a Global Privacy Control (GPC) signal from your browser, or by emailing privacy@weattend.com.

3. App Data and Home Records

The App functions as a record-keeping and communication tool. Information stored in the App may include home system details, maintenance history, and service documentation.

You acknowledge that:

• Stored records may be incomplete or based on available information
• Records are provided for convenience and organizational purposes only
• You remain responsible for verifying critical safety or system information

4. Data Sharing and Disclosure

We may share information:

• With employees and contractors as needed to provide Services
• With third-party service providers performing work on your behalf
• With payment processors and technology vendors
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of Attend or others

5. Apple App Privacy Disclosure (Required)

5.1 Data Collected and Linked to You

The App may collect and link the following data to your identity:

• Contact information (name, email, phone number)
• Account information
• Home and property-related information
• User-generated content (photos, notes, documents)
• App interactions and usage data

5.2 Data Used for App Functionality

Data is used to:

• Provide core app functionality
• Enable communication and scheduling
• Maintain service records
• Support account management

5.3 Data Used for Analytics

We may collect limited analytics data to:

• Understand app usage
• Improve performance and reliability

Analytics data is not used for advertising tracking.

5.4 Data Not Used for Tracking

Attend does not:

• Track users across apps or websites owned by other companies
• Use data for targeted advertising
• Share data with data brokers

The App does not use Apple’s App Tracking Transparency (ATT) framework because tracking is not performed.

5.5 Apple’s Role

You acknowledge that Apple Inc. is not responsible for the collection, use, or handling of data by Attend. Attend is solely responsible for its data practices.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this policy. Specific retention periods:

• Account and customer data: For the life of your account. After you request deletion, we remove account data within 30 days, subject to legal-hold exceptions (active disputes, tax records, regulatory requirements).
• Newsletter subscribers: Until you unsubscribe, plus 3 years of inactivity (no opens or clicks) before automated purge.
• Lead-gen form submissions from non-customers: 24 months from submission, then automated deletion.
• Privacy preferences (attend_consent_v1): 180 days per browser; reset on clearing site data.
• Google Analytics 4 event data: 14 months per Google’s default retention setting on our property.
• Sentry error logs: 90 days.
• Vercel hosting logs: approximately 30 days per Vercel’s default.
• Cloudflare Turnstile and Upstash Redis rate-limit data: ephemeral, automatically expired by TTL.
• Sanity CMS records: indefinite while content is published.
• Backup retention: standard processor backups roll over within 90 days.

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access personal information
• Correct inaccurate information
• Request deletion
• Restrict or object to certain processing

To exercise these rights, email privacy@weattend.com or use the opt-out controls at weattend.com/privacy-choices.

8.1 Virginia residents (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act gives you the right to:

• Confirm whether we process your personal data and access that data
• Correct inaccurate personal data
• Delete personal data we hold about you
• Obtain a portable copy of your personal data
• Opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) certain profiling decisions

We respond to verifiable requests within 45 days. You may appeal a denial by replying to our decision; we respond to appeals within 60 days. If you are not satisfied with our appeal response, you may submit a complaint to the Virginia Attorney General at oag.state.va.us.

To exercise these rights, email privacy@weattend.com or use the opt-out controls at weattend.com/privacy-choices.

8.2 Maryland residents (MDPDPA)

If you are a Maryland resident, the Maryland Online Data Privacy Act gives you rights substantially similar to those listed above for Virginia residents, including access, correction, deletion, portability, and opt-out of targeted advertising, sale, and profiling. We respond to verifiable requests within 60 days.

To exercise these rights, email privacy@weattend.com or use the opt-out controls at weattend.com/privacy-choices.

8.3 California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the right to:

• Know the categories of personal information we collect, the sources, the purposes for collection, and the categories of third parties with whom we share it
• Access your personal information
• Correct inaccurate personal information
• Delete personal information
• Opt out of the sale and sharing of personal information
• Limit the use and disclosure of sensitive personal information
• Non-discrimination for exercising these rights

We respond to verifiable requests within 45 days. You may designate an authorized agent to make a request on your behalf.

To exercise these rights, email privacy@weattend.com or use the opt-out controls at weattend.com/privacy-choices. If your browser sends a Global Privacy Control signal, we automatically apply your opt-out from sale and sharing.

Categories of personal information collected in the preceding 12 months: identifiers (email, name, phone, IP, device ID), internet activity (browsing, interactions), approximate geolocation (IP-derived), and inferences drawn from the above.

Categories of personal information disclosed for a business purpose:identifiers and internet activity to our service providers (listed in §1.4).

Categories of personal information sold or shared for cross-context behavioral advertising: when Google Signals is enabled on our Google Analytics property, identifiers and internet activity may be shared with Google for cross-device measurement and remarketing audience seeding. When advertising partners are active, identifiers and internet activity may also be shared with Meta, LinkedIn, and TikTok. You may opt out as described above.

9. Children’s Privacy

The Services are not intended for children under 13. We do not knowingly collect personal information from children.

10. Third-Party Links and Services

The Services may reference third-party platforms or services. Attend is not responsible for their privacy practices. Your interactions with third parties are governed by their policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised “Last Updated” date. Continued use of the Services constitutes acceptance of the updated policy.

12. Contact Information

Attend Holdings, LLC
Website: weattend.com
Email: hello@weattend.com
Address: 7524 Standish Place, Rockville, MD 20855