Privacy Policy
Effective Date: [Date]
This Privacy Policy describes how [Company Name] ("Kapiway," "we," "us," or "our") collects, uses, and shares information when you use our platform at [Domain]. By using Kapiway, you agree to the practices described in this policy.
If you have questions, contact us at [Contact Email].
1. Information We Collect
Account Information
When you create a partner account, we collect your name, email address, phone number, business name, and business address.
Booking Information
When guests book through the platform, we collect their name, phone number, email address, event date, selected packages, and add-on choices.
Payment Information
Credit card and payment details are collected and processed directly by our payment processor, Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. For more information, see Stripe's Privacy Policy.
Communications Data
If you use our SMS features, we process phone numbers and message content to deliver booking confirmations, reminders, and follow-up messages on your behalf.
Usage Data
We automatically collect information about how you interact with the platform, including pages visited, features used, device and browser type, IP address, and session duration.
Cookies
We use essential cookies for authentication and session management. Partners may add third-party tracking pixels (such as Facebook, Google, or TikTok) to their booking pages. These pixels are governed by the respective third party's privacy policy.
2. How We Use Your Information
- Provide, operate, and improve the booking platform
- Process payments through Stripe
- Send transactional messages such as booking confirmations and reminders
- Send SMS engagement messages on behalf of partners, including abandoned booking follow-ups and promotional offers
- Analyze usage patterns to improve our services
- Prevent fraud and abuse
- Comply with legal obligations
3. How We Share Your Information
With Stripe
We share necessary information with Stripe to process payments and manage subscriptions.
With Partners
Booking details (guest name, contact info, event details, package selections) are shared with the venue that the guest booked with.
With SMS Providers
Phone numbers and message content are shared with our SMS delivery provider to send booking-related text messages.
Legal Requirements
We may disclose information when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect our rights or the safety of others.
We do not sell your personal information to third parties.
4. Data Storage and Security
Your data is stored in encrypted databases. All data is encrypted in transit using TLS and at rest using industry-standard encryption. Authentication is managed through secure, token-based sessions. While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure.
5. Data Retention
- Account data is retained while your account is active and for [X] days after account deletion.
- Booking records are retained for [X] years for business and tax compliance purposes.
- SMS logs are retained for [X] days.
- Usage data is retained in anonymized form for analytics purposes.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Opt out of marketing communications
- Request a copy of your data in a portable format
California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information.
European Residents (GDPR)
If you are in the European Economic Area, you have additional rights including the right to data portability, the right to restrict processing, and the right to object to processing. Our legal basis for processing is contract performance and legitimate interests.
To exercise any of these rights, contact us at [Contact Email].
7. SMS and Communications
Partners use the platform to send automated SMS messages to their guests, including booking confirmations, reminders, and follow-up messages. Guests can opt out of SMS at any time by replying STOP to any message. Standard message and data rates may apply. SMS frequency depends on the partner's configured settings.
8. Third-Party Links
The platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
9. Children's Privacy
Kapiway is a business tool directed at venue operators, not at children. We do not knowingly collect personal information from children under 13. Booking information for children's events is provided by parents or guardians.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email or a notice on the platform.
11. Contact Us
If you have questions about this Privacy Policy, contact us at:
- [Company Name]
- [Company Address]
- [Contact Email]