privacy policy

who we are

Brindie is an independent platform accessible at brindie.co, helps hosts publish event pages, sell tickets, and message their community. This policy explains what we collect, why, and your choices.

what we collect

• Organiser accounts: Name, email, and profile information to create and manage your account via Clerk.
• Event & registration data: Details you add about events, plus attendee names and emails collected through RSVPs and checkout. If the organiser added custom questions, those answers are also stored.
• Payments: Paid tickets are processed by Stripe. We don't store card numbers on Brindie servers — Stripe handles card data under their own privacy policy.
• Technical data: IP address, browser and device info, and cookies needed for security, sessions, and product functionality.

legal basis for processing

We process data to perform the contract of providing the service, for legitimate interests such as security and fraud prevention, and where required, with your consent. For attendees, the organiser acts as data controller for data collected through their event pages; Brindie acts as data processor on their behalf.

how we use data

We use data to provide and operate the service, process payments and manage refunds, send transactional emails (confirmations, receipts, updates), prevent fraud, and communicate with you about your account or material changes to this policy. We do not sell personal data. We do not use your data for advertising.

processors & third parties

We rely on Clerk for authentication, Supabase for database and hosting, Stripe for payment processing, Resend for email delivery, and Vercel for infrastructure. Each processor only receives data necessary for their specific function and is contractually bound to protect it.

retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required for legal, tax, or dispute resolution purposes (typically up to 7 years for financial records). Attendee data is retained for the duration of the organiser's account.

your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the email below and we'll respond within 30 days. If you are in the EU/EEA and believe we are not handling your data correctly, you have the right to lodge a complaint with your local data protection authority.

cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect service functionality.

children

Brindie is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of the service after changes constitutes acceptance.