Terms of service

Who these terms are between

heer(ish), the trade name Heerish, is run by thatUkrainianGuy, a sole proprietorship registered in the Netherlands with the Chamber of Commerce (KvK) under number 98959964, VAT number NL005363781B34, at Berlaarstraat 53, 1066 PJ Amsterdam, the Netherlands, reachable at privacy@heerish.app about personal data and at security@heerish.app about a vulnerability or a breach.

These terms apply to organizers: anyone who opens an account and creates an event page. They are accepted on behalf of an organization when that organization is created on heer(ish), by the person who creates it ticking the box that confirms it. The tick is recorded with that person, the date and the version of these terms, which is 2026-10-18.1. heer(ish) is a service for organizations, not for consumers.

A written agreement signed by heer(ish) and an organization takes precedence over these terms and the data processing agreement where they differ.

Attendees do not need an account with heer(ish). They use an event page under the organizer's rules and the privacy notice linked from its sign-in page.

The service

heer(ish) gives each event a private page where the people attending can add a card, see who else is in town and propose meetups. You create the page, choose how attendees sign in, and decide who gets the link.

Every event runs on a privacy setting that fixes what is collected, who sees it and when it is deleted. You can make a setting stricter. You cannot make it looser.

Your account

Give accurate details for yourself and your organization, and keep them current. Attendees are shown the organization name and address as the party responsible for their data.

You sign in through a link sent to your email address, then confirm with a passkey, an authenticator app or one of your recovery codes. Keep the mailbox, those devices and the codes secure, and tell us at once if you think someone else has used your account. If you lose every way to confirm, we reset it only after checking another way that you are the account holder.

You must be 18 or over and entitled to act for the organization you name.

Admins

Every admin of an organization has full control of it: its details, all of its events, its plans and invoices, and who its admins are, including inviting and removing them. There are no lesser roles.

An admin who joins at a colleague's invitation acts under the acceptance given when the organization was created, and does not accept these terms again. The organization answers for the people it invites, and for what they do on its behalf.

Your account and an organization are separate. Leaving an organization, or being removed from one, does not delete your account. Deleting your account removes you from every organization, and does not delete an organization that has other admins. An organization you are the only admin of is deleted with its events, unless you invite another admin and they accept first.

What you are responsible for

You are the controller of the attendee data on your event pages. That means you decide to run the page, you have a lawful reason to invite the people you invite, and you answer attendees who ask about their data.

Upload names and email addresses only for people registered for or invited to your event.

Give attendees a privacy notice. You can link your own or adopt the one heer(ish) hosts for your event. If you adopt it, it is your notice and you confirm it is accurate for your event.

Name a safety contact who reads reports filed by attendees and acts on them, and a contact who answers security incident notices from heer(ish) within 24 hours.

Acceptable use

Do not use heer(ish) to break the law, to harass anyone, to send unsolicited bulk email, to collect data about people who are not attending your event, or to collect the kinds of data the page does not ask for, such as health details or identity documents.

Do not probe, overload or try to get around the security of the service, and do not resell it without written agreement.

heer(ish) can suspend an event or an account that breaks these rules or puts attendees at risk. Where the situation allows, you are told first and given the chance to fix it.

Data processing

For attendee data heer(ish) is your processor under GDPR Article 28. The full processing agreement is at heerish.app/dpa, you accept it with these terms when the organization is created, and it wins over this section where the two differ. What follows is the same substance in short.

The subject matter is running your event pages. The duration is until the deletion date of each event. The data is what attendees put on their cards, the meetups they propose and join, any list of invitees you upload, sign-in identifiers, consent records and change logs. The people concerned are your attendees and invitees.

heer(ish) processes that data only on your documented instructions, which are these terms and the settings you confirm for each event. It never uses attendee data for purposes of its own and never emails attendees about heer(ish).

Everyone with access to the data is bound to confidentiality. heer(ish) applies appropriate security measures, including encryption in transit and at rest, two-factor sign-in for every organizer account, separation of each event from every other, and storage in the region your event setting names, except email, which the sub-processor page describes.

You give general authorisation for the sub-processors listed at heerish.app/subprocessors, currently Cloudflare, Google, Mollie and Resend. heer(ish) tells you by email at least 30 days before adding or replacing one, and you can object by closing your events before the change. heer(ish) binds each sub-processor to the same obligations and stays liable for them.

heer(ish) helps you answer requests from attendees exercising their rights, and gives you the information you need for impact assessments and to show compliance, including reasonable audits at your cost and with 30 days notice. A pre-filled impact assessment template is at heerish.app/legal/dpia and the security measures are described at heerish.app/security.

heer(ish) tells your security contact about a personal data breach affecting your events without undue delay and within 24 hours of becoming aware of it.

On the deletion date all data of the event is permanently deleted. Live systems are clear within 24 hours and backups within 30 days. An email delivered through Resend is the exception: Resend keeps it for 30 days after it was sent, and in its backups for 7 more. Nothing is returned, because everything on the page is visible to you in the console until then.

Transfers outside the European Economic Area happen only as described in the privacy policy, under the European Commission's standard contractual clauses.

Price and payment

An event can be opened free of charge at the smallest size. Larger sizes and the annual plan are paid. Neither can be bought in the console yet: the annual plan is priced per organization on request, and once a plan is on sale the console shows the price before you buy. Nothing is charged without your order.

Prices are in euros and exclusive of VAT. A plan for an event is a one-off charge, not a subscription: you buy it once for that event, and there is nothing to cancel. The annual plan is a one-off charge covering twelve months from the day it is paid.

Payment is taken at checkout through Mollie, which handles the card or bank details; they never reach heer(ish). The plan applies once Mollie reports the payment as completed, which is usually immediate. An order that is not paid leaves the event on the plan it was already on.

Upgrading an event charges the difference between what you already paid for it and the new plan. There is no downgrade and no refund of the difference.

VAT

heer(ish) is registered for VAT in the Netherlands under NL005363781B34. Which VAT applies depends on the country and the VAT number you give at checkout, and that country must be the one your organization is established in.

Dutch organizations are charged 21% Dutch VAT.

An organization in another EU country that gives a VAT number heer(ish) can verify with the European Commission's VIES service is charged 0%, and the invoice states that VAT is reverse charged under Article 196 of Council Directive 2006/112/EC. Accounting for it is then yours. The number is checked at the moment of purchase; if VIES cannot confirm it, the sale is charged with VAT and heer(ish) cannot correct it afterwards.

An organization in another EU country without a verifiable VAT number is charged 21% Dutch VAT.

An organization outside the European Union is charged no VAT, and the invoice states that the sale is outside the scope of EU VAT. Any tax due where you are established is yours to account for.

An invoice is issued for every completed payment and is available in the console, where it can be printed or saved as a PDF. Invoices are numbered in one series per calendar year.

Refunds

A payment is refunded in full if you ask within 14 days of paying and what it bought has not been used. The request must come from an admin of the organization that paid, by email to privacy@heerish.app from the address that admin signs in with.

A plan for an event counts as used once the event holds more cards than the plan it was on before allowed, or once an invite or an announcement has been emailed from the console after the payment. The annual plan counts as used once either has happened on any of the organization's events. After that the plan has been delivered and is not refundable, whether or not the event goes ahead or fills up.

A refunded event goes back to the plan it was on before; cards already on the page stay. You receive a credit invoice, and the money is paid back to the account it came from, through Mollie, within ten working days.

If heer(ish) adds or replaces a sub-processor and you object within the 30 days notice, a plan that has not been used is refunded in full, also after the 14 days.

Your content and ours

You and your attendees keep all rights in what you put on a page. You give heer(ish) permission to store and display it as far as running the page requires, and nothing more.

The software, the design and the name heer(ish) stay with heer(ish). Maps and place details come from Google and are subject to the Google Maps Platform terms. Event cities, their regions and time zones come from GeoNames (geonames.org), licensed under Creative Commons Attribution 4.0 (creativecommons.org/licenses/by/4.0); heer(ish) filters them (towns of 1,000 people or more, and the names in the six languages heer(ish) speaks) and changes nothing else.

Availability

heer(ish) is provided as it is and as available. It works to keep the service running and secure but does not promise that it is uninterrupted, free of errors or fit for a particular purpose, and gives no warranty beyond what these terms state. There is no service level agreement. Deletion on the deletion date is final, and deleted events cannot be restored.

Liability

heer(ish)'s total liability to the organization, on any ground and for all events together, is limited to direct damage up to the amount the organization paid heer(ish) in the twelve months before the event that caused the damage. For an organization that paid nothing, heer(ish) is not liable. Where the service falls short, a refund within that amount is the only remedy.

heer(ish) is never liable for indirect damage, including lost profit or revenue, damage to reputation, lost or corrupted data, the cost of a replacement service, and fines or claims imposed on the organization as controller.

A claim lapses unless the organization reports it to heer(ish) in writing within twelve months of the event that caused the damage.

These limits do not apply to damage caused by intent or deliberate recklessness on the part of heer(ish) itself, or where mandatory law does not allow liability to be limited. Everyone heer(ish) works with to provide the service may rely on these limits as well.

The organization indemnifies heer(ish) against claims from attendees, invitees and other third parties, and from authorities, that arise from its events on heer(ish), its use of the service or its duties as controller, including reasonable legal costs, except where the claim results from intent or deliberate recklessness on the part of heer(ish) itself.

Ending

You can stop using heer(ish) at any time. Write to privacy@heerish.app to have your account deleted, or, as an admin, to have the organization and its events deleted. The two are separate requests, unless you are the only admin of the organization. heer(ish) can end the agreement with 30 days notice by email, or at once after a serious breach of these terms. Events already running are deleted on their deletion date at the latest.

Changes to these terms

heer(ish) tells you by email at least 30 days before a change that matters takes effect. If the organization does not agree, an admin can have it closed before that date. Continuing to use the service after it means you accept the new terms.

Law and disputes

Dutch law applies. Disputes go to the competent court in the Netherlands, after both sides have first tried to settle the matter between them.

Questions about these terms go to privacy@heerish.app.