Privacy Policy

What we collect

Account information. Email, password (hashed), business name, primary city, and phone (if provided) when you sign up as a Vendor.

Event content. Anything you publish: titles, descriptions, photos, video URLs, addresses, prices.

Payment information. Card data is collected and stored by Stripe; we never see or store full card numbers. We receive a Stripe customer ID and subscription status.

Usage data. Pages visited, events viewed and saved, click-through to tickets. Stored in Supabase Postgres and (for anonymous saves) your browser's localStorage.

Cookies and similar. Authentication cookies (Supabase), service-worker cache for the PWA, and minimal first-party tracking. We do not run third-party advertising cookies.

Submitted videos. If you submit an attendee video, we record the link, your optional name and email, and your IP address (rate-limit + abuse prevention).

Outreach prospects (B2B only). Public business contact info (name, address, phone, website, scraped public email) for outreach to potential Vendors. This data is limited to legitimate-interest B2B outreach, and we honor unsubscribe requests immediately.

Why we collect it

• To provide, secure, and improve the Service.
• To process Vendor subscriptions and apply trial / billing terms.
• To recommend events to Attendees and analyze platform performance.
• To send transactional emails (account, billing, trial reminders).
• To send marketing emails to opted-in subscribers (with one-click unsubscribe).
• To comply with legal obligations and resolve disputes.

Who we share it with

We share the minimum required with the following processors:

• Supabase — database and authentication (US infrastructure).
• Stripe — subscription billing and payment processing.
• Netlify — website hosting and edge functions.
• Google — Maps embeds, Places API for venue lookup, Workspace email delivery, YouTube Data API for video uploads.
• OpenAI — AI-generated event descriptions and outreach drafts (your inputs may be processed but are not used to train OpenAI's public models per their API data-usage policy).
• Resend (when used) — transactional and outreach email delivery.

We do not sell personal information. We do not share it with advertisers or data brokers. We may disclose information when legally required (court order, subpoena) or to protect against fraud or harm.

How long we keep it

Account data is retained while your account is active and for up to 24 months afterwards for billing and legal records. Outreach prospects are removed within 30 days of an unsubscribe request. Submitted videos that are rejected are removed from public view immediately and purged from our database within 90 days.

Your rights

You can access, correct, export, or delete your data at any time by emailing george@flawdascene.com. California (CCPA) and EU/UK (GDPR) residents have additional rights including the right to opt out of "sale" or "sharing" — neither of which we do — and to lodge a complaint with their local data-protection authority.

Children

FlawdaScene is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided information to us, contact us and we'll delete it.

Changes to this policy

We'll update this page when our practices change and notify Vendors by email of material changes. Continued use after changes constitutes acceptance.

Contact

Questions, requests, or concerns? Email george@flawdascene.com — we respond within 7 business days.