Privacy Policy

1. Who we are and what this covers

boston.xyz (the "Site") is operated by SplitNPay, Inc. (d/b/a Ryla) ("boston.xyz", "we", "us", "our"), a Delaware corporation with its principal place of business at 185 Alewife Brook Pkwy., Suite 212, Cambridge, MA 02138. We are the controller of the personal information described here.

By accessing or using the Site, subscribing to our newsletter, submitting an event, purchasing advertising, buying a ticket, or contacting us, you agree to this Privacy Policy and to our Terms of Use. If you do not agree, do not use the Site.

This policy covers boston.xyz only. SplitNPay, Inc. also operates the Ryla payments products at payryla.com and in the Ryla mobile application. Those are governed by the separate Ryla Privacy Policy and Ryla Platform Agreement, which do not apply here — and the Ryla Privacy Policy likewise does not cover this Site. Using boston.xyz does not create a Ryla Account.

This policy applies to the Site, our newsletter, and other communications between you and us about the Site.

2. Personal information we collect

The information we collect depends on how you use the Site and on which features are available at the time. Not every category below is collected today; this section describes the categories we collect or may collect as the Site develops. We will update this policy if our practices change materially.

2.1 Information you provide

• Contact and identity information — email address; first name, last name, or the name you go by; postal address; telephone number.
• Profile and professional information — employer or company, job title or role, industry, professional interests, sector preferences, links to professional profiles, and similar details you choose to give us.
• Date of birth or age, where we ask for it — used to confirm you meet our minimum age requirement and, where relevant, eligibility for an event with an age restriction.
• Event submission information — event title, link, date, time, venue, neighborhood, format, sector, price, any note you add, and your email address.
• Event attendance and ticketing information — events you register for, attend, or express interest in; dietary or accessibility requirements you choose to tell us; and, for events we host, order and ticket details. Card and bank details are handled by our payment processor, not by us.
• Advertiser and sponsor information — business contact name, email, telephone, billing details, and the materials you supply for a placement.
• Preferences and communications — which newsletters or messages you have chosen to receive, and anything you put in an email or form to us.
• Survey, feedback, and research responses you choose to give.

2.2 Information collected automatically

Our hosting provider records standard technical information in server logs: IP address, browser and device type, operating system, the page requested, referring page, and the date and time. This is used to operate the Site, diagnose faults, measure aggregate usage, and protect against abuse and attack. We also record which page you were on when you subscribed, so we can tell which pages bring subscribers.

We do not currently use third-party analytics services, advertising cookies, tracking pixels, web beacons, session recording, or device fingerprinting on the public Site. If we introduce any of these, we will update this policy and say so on the Site.

2.3 Cookies and similar technologies

The public Site does not currently set tracking cookies. Our internal, password-protected areas use a strictly necessary authentication cookie. If we later introduce analytics or preference cookies, we will update this policy and provide any notice or choice the law requires.

2.4 Information about events and organizers

The Site is an index of events. We collect event and organizer information from calendars organizers publish and from other public sources. That is business information about organizations and events. Where a public listing includes an individual's name — as an organizer, host, or speaker — Section 8 explains how to ask us to remove it.

2.5 Information from other sources

We may receive information about you from our corporate affiliates (including Ryla), from event organizers and venues where you have registered through them, from our service providers, and from publicly available sources, and may combine it with the information we hold.

3. How we use personal information

We use personal information to:

• send the newsletter and other communications you have asked for;
• review, publish, correct, and remove event listings;
• operate our own events, including registration, tickets, seating, and attendee communications;
• sell, deliver, invoice, and report on advertising and sponsorship;
• respond to you and keep records of our correspondence;
• operate, secure, maintain, and improve the Site and understand how it is used;
• personalise what we show you and tailor our communications;
• market our own products and services, and those of our corporate affiliates, including Ryla (see Section 5);
• detect, investigate, and prevent spam, fraud, abuse, and security incidents;
• establish, exercise, or defend legal claims; and
• comply with law and enforce our Terms of Use.

Where the UK or EU GDPR applies, our legal bases are consent (marketing email, withdrawable at any time), contract (providing a ticket or placement you bought), legitimate interests (operating and securing the Site, responding to you, publishing a listing you submitted, and marketing to existing contacts), and legal obligation.

We do not use your information for automated decision-making that produces legal or similarly significant effects.

3A. Large language model training

We do not collect, use, or sell personal data for the purpose of training large language models.

Separately, our Terms of Use prohibit other people from using Site content or data to train or evaluate machine learning models without our written permission. That restriction protects our content; this paragraph is about your personal information, and the two are independent.

4. Who we share it with

We share personal information with:

Who	Why
Our corporate affiliates and other business lines of SplitNPay, Inc., including Ryla	To operate our businesses together, understand our combined audience, and market their products and services to you — see Section 5
Cloudflare, Inc.	Hosting, content delivery, security, and access control
Supabase, Inc.	The database holding subscribers, submissions, and event data
Our email delivery provider	To send the newsletter and transactional messages
Payment processors, for tickets and advertising	To take payment; card details go to them, not to us
Professional advisers — lawyers, accountants, auditors, insurers	To advise us and protect our interests

Service providers act on our instructions and are not permitted to use your information for their own purposes. Our affiliates may use it for their own purposes as described in Section 5.

We may also disclose information: to comply with a law, subpoena, or lawful request; to enforce our Terms of Use; to protect the rights, property, or safety of any person; and in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, in which case the recipient may continue to use it as described here.

5. Sharing with Ryla and our affiliates, and your choice about it

boston.xyz and Ryla are operated by the same company, SplitNPay, Inc. We may share the personal information described in this policy with our affiliates and other business lines of SplitNPay, Inc., including Ryla, and they may use it for their own purposes, including to market their products and services to you.

Information shared with Ryla in this way is then handled under the Ryla Privacy Policy, not this one.

We tell you this plainly because it is a real part of how this business works, and because you should be able to choose.

Your choice. You may ask us to stop sharing your personal information with our affiliates for their own marketing at any time, by emailing hello@boston.xyz. We will honor that request. Asking will not affect your newsletter subscription or your ability to use the Site.

We do not sell your personal information for money. Because "sale" and "sharing" are defined broadly under California law, and because affiliate sharing for marketing may fall within those definitions, we treat the request above as a request to opt out of any "sale" or "sharing" of your personal information, and we honor it on that basis. See Section 9.1.

6. Where your information is held

Your information is stored and processed in the United States. If you are outside the United States, you are sending your information to a country whose data protection laws may differ from your own. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Newsletter subscribers: until you unsubscribe, plus a minimal suppression record so we do not email you again by mistake.
• Event submissions: while the listing is published, and afterwards as part of our record of what we have published.
• Advertising and ticket records: as long as needed for the engagement and then as required for tax, accounting, and legal purposes.
• Correspondence: as long as needed to handle the matter and keep a reasonable record.
• Server logs: a short retention period set by our hosting provider.

We may retain information for longer where needed to establish, exercise, or defend legal claims, or where the law requires.

8. Your choices and rights

Unsubscribe. Every newsletter has a one-click unsubscribe link. You may also email hello@boston.xyz. We honor unsubscribes promptly and within the time the law requires.

Affiliate marketing. See Section 5.

Your information. Email hello@boston.xyz to access, correct, delete, or obtain a copy of the personal information we hold about you, or to object to or restrict our use of it. We will respond within the time the applicable law allows, and we will not treat you differently for asking.

Removing a listing. If you are an organizer and want a listing taken down, email hello@boston.xyz with a link to it. You do not need to give a reason.

8.1 Do Not Sell or Share My Personal Information

To exercise this right, email hello@boston.xyz with the subject line "Do Not Sell or Share". You may also use an authorized agent, and you may submit a Global Privacy Control signal, which we honor.

9. Region-specific rights

9.1 California

Under the CCPA/CPRA you may request the categories and specific pieces of personal information we have collected, the sources, the purposes, the categories of third parties we disclose to, deletion, and correction; and you may opt out of "sale" or "sharing" and limit the use of sensitive personal information. We do not offer financial incentives for personal information, and we will not discriminate against you for exercising these rights.

Categories we collect, or may collect as described in Section 2: identifiers (name, email, postal address, telephone, IP address); customer records (billing and contact details); protected classification characteristics (age or date of birth, where we ask for it); commercial information (tickets, placements, and transactions); internet activity (server-log information); professional or employment information (employer, job title); and inferences drawn from the above about your preferences. We do not collect sensitive personal information for the purpose of inferring characteristics.

9.2 UK and EU

You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting processing already carried out. You may complain to your supervisory authority — in the UK, the Information Commissioner's Office.

9.3 Other U.S. states

Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Texas, Oregon, and others — have comparable rights of access, correction, deletion, portability, and opt-out of targeted advertising and profiling, and a right to appeal a refused request. Use the contact details in Section 13 to exercise them; if we refuse a request you may appeal by replying to our response.

10. Security

We maintain administrative, technical, and physical safeguards appropriate to the information we hold, including encryption in transit, access control on our internal tools, and limiting access to people who need it. We maintain a written information security program as required by Massachusetts 201 CMR 17.00.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the authorities as the law requires.

11. Children

The Site is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email hello@boston.xyz and we will delete it.

12. Third-party sites, and changes to the Site

The Site links to organizers' registration pages and other third-party sites. We do not control them and this policy does not apply to them. Read their privacy policies before giving them information.

The Site and the newsletter may be changed, suspended, or discontinued at any time, as described in our Terms of Use. This policy continues to govern information we hold for as long as we hold it.

13. Changes to this policy, and how to contact us

We may update this policy. The "Last updated" date will change, and material changes will be noted on the Site. Your continued use of the Site after a change means you accept the updated policy.

Questions, requests, or complaints:

SplitNPay, Inc. (d/b/a Ryla) 185 Alewife Brook Pkwy., Suite 212 Cambridge, MA 02138 hello@boston.xyz

For the Ryla payments products, see the Ryla Privacy Policy at payryla.com and contact support@payryla.com. Please use hello@boston.xyz for anything about this Site, so your request reaches the right team.