Privacy Policy — TablFlip

1. Introduction

TablFlip ("we," "our," or "us") operates the TablFlip platform, including the website at tablflip.com and the TablFlip mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your email address, password (hashed), role (host, vendor, or attendee), and optional business name. If you sign in with Google, we receive your name, email, and profile picture from Google.

Payment Information

Payment processing is handled by Stripe (web) and Apple In-App Purchases (iOS app). We do not store your credit card numbers. Stripe and Apple may collect payment details in accordance with their own privacy policies.

Usage Data

We collect information about how you interact with our service, including pages visited, features used, and device information such as browser type, operating system, and device identifiers.

Push Notifications

If you enable push notifications, we store your device token to send you updates about your shows, bookings, and tickets. You can disable notifications at any time through your device settings.

3. How We Use Your Information

To create and manage your account
To process table bookings and ticket purchases
To facilitate payments between hosts and vendors via Stripe
To send push notifications about show updates and bookings
To provide customer support
To improve and maintain our service
To detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services:

Supabase — Database hosting and authentication
Stripe — Payment processing and payouts (web)
Apple App Store / StoreKit — In-app subscription purchases (iOS app)
RevenueCat — Subscription management and receipt validation (iOS app)
Google — OAuth sign-in
Firebase Cloud Messaging — Push notifications
Sentry — Error tracking and performance monitoring
Resend — Transactional email delivery

Each of these services has their own privacy policy governing how they handle your data.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (such as transaction records).

6. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, and row-level security on our database. However, no method of transmission or storage is 100% secure.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Delete your account and associated data
Export your data
Opt out of push notifications

You can delete your account at any time from the Settings page in the app.

8. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@tablflip.com.