Privacy Policy

Effective Date: [Date]

This Privacy Policy describes how [Company Name] ("Kapiway," "we," "us," or "our") collects, uses, and shares information when you use our platform at [Domain]. By using Kapiway, you agree to the practices described in this policy.

If you have questions, contact us at [Contact Email].

1. Information We Collect

Account Information

When you create a partner account, we collect your name, email address, phone number, business name, and business address.

Booking Information

When guests book through the platform, we collect their name, phone number, email address, event date, selected packages, and add-on choices.

Payment Information

Credit card and payment details are collected and processed directly by our payment processor, Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. For more information, see Stripe's Privacy Policy.

Communications Data

If you use our SMS features, we process phone numbers and message content to deliver booking confirmations, reminders, and follow-up messages on your behalf.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, device and browser type, IP address, and session duration.

Cookies

We use essential cookies for authentication and session management. Partners may add third-party tracking pixels (such as Facebook, Google, or TikTok) to their booking pages. These pixels are governed by the respective third party's privacy policy.

2. How We Use Your Information

  • Provide, operate, and improve the booking platform
  • Process payments through Stripe
  • Send transactional messages such as booking confirmations and reminders
  • Send SMS engagement messages on behalf of partners, including abandoned booking follow-ups and promotional offers
  • Analyze usage patterns to improve our services
  • Prevent fraud and abuse
  • Comply with legal obligations

3. How We Share Your Information

With Stripe

We share necessary information with Stripe to process payments and manage subscriptions.

With Partners

Booking details (guest name, contact info, event details, package selections) are shared with the venue that the guest booked with.

With SMS Providers

Phone numbers and message content are shared with our SMS delivery provider to send booking-related text messages.

Legal Requirements

We may disclose information when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect our rights or the safety of others.

We do not sell your personal information to third parties.

4. Data Storage and Security

Your data is stored in encrypted databases. All data is encrypted in transit using TLS and at rest using industry-standard encryption. Authentication is managed through secure, token-based sessions. While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure.

5. Data Retention

  • Account data is retained while your account is active and for [X] days after account deletion.
  • Booking records are retained for [X] years for business and tax compliance purposes.
  • SMS logs are retained for [X] days.
  • Usage data is retained in anonymized form for analytics purposes.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Opt out of marketing communications
  • Request a copy of your data in a portable format

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are in the European Economic Area, you have additional rights including the right to data portability, the right to restrict processing, and the right to object to processing. Our legal basis for processing is contract performance and legitimate interests.

To exercise any of these rights, contact us at [Contact Email].

7. SMS and Communications

Partners use the platform to send automated SMS messages to their guests, including booking confirmations, reminders, and follow-up messages. Guests can opt out of SMS at any time by replying STOP to any message. Standard message and data rates may apply. SMS frequency depends on the partner's configured settings.

8. Third-Party Links

The platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

9. Children's Privacy

Kapiway is a business tool directed at venue operators, not at children. We do not knowingly collect personal information from children under 13. Booking information for children's events is provided by parents or guardians.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email or a notice on the platform.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

  • [Company Name]
  • [Company Address]
  • [Contact Email]