Privacy policy

Last updated: [date]

[Company name, address, contact email] ("we") operates Hallpencil. This policy explains what personal data we process and why.

Venue owners

We store your name, email, password hash, language, venue details and billing status to provide the service. Subscription payments are processed by Stripe; we never see your full card number.

Guests who book

When you book a venue we store your name, email, phone (optional), number of guests, notes, language and booking time. The venue is the controller of this data and we process it on its behalf. Deposits are paid through Stripe directly to the venue.

Why we process data

To perform the booking contract, to send confirmations, to prevent fraud, and to meet legal obligations (for example, tax records).

Processors

Hosting: [Vercel / your host, region]. Database: [Supabase / Neon, region]. Email: Resend. Payments: Stripe.

Retention

Booking data is kept for [24 months] after the booking date, then deleted or anonymised, unless the law requires longer storage.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing by writing to [privacy email]. You may complain to your local data protection authority.

Cookies

We use two strictly necessary cookies: one keeps venue owners signed in, one remembers the language you chose. We do not use advertising cookies.