Privacy Policy

What we collect

Your account: your mobile number (you log in with it), the username and display name you choose, and, if you add one, your Instagram, TikTok or X handle.

Your bookings: the events, tables and seats you book, join, give away or receive; what you paid and any refunds; and which promoter link, if any, you booked through.

Payments: Stripe processes every payment. We never see or store your full card number. We keep the name on the payment method so door staff can match it to your ID, plus a Stripe reference for refunds.

At the door: staff scan your pass and check your ID. Your ID is read on the staff member's phone; we keep only the answers (old enough or not, expired or not, whether the name matched, and whether staff overrode a result) and the check-in time. We don't keep your ID's name, birth date, address or license number. If someone gave you a seat, you may enter the name on your ID so staff can match it; only you and BoothBuddy can see it.

Technical: a login cookie that keeps you signed in, and standard server logs (such as IP address and browser) used for security and fixing problems. We don't use advertising cookies or sell ad targeting.

How we use it

To log you in, run group bookings and split payments, issue and check passes, process refunds, pay venues and promoters what they've earned, prevent fraud and scams, meet legal and tax duties, and support you when something goes wrong.

Text messages

We text a one-time code each time you log in. If you tick the optional box, we also text booking updates, such as checkout opening, your group being paid, refunds and event changes. Reply STOP to any message to stop booking updates, or change it on your account page. Login codes still work after you opt out.

We do not sell, rent or share your mobile number or your text-message consent with third parties or affiliates for their marketing or promotional purposes. Text-messaging opt-in data is never shared with third parties, except with the providers that deliver the messages for us.

Who sees what

Other guests at your table see your username, display name and social handle, never your phone number.

The venue sees the bookings for its events: usernames, which seats are paid and checked in, the payer name for ID matching, and the door-check answers above.

Promoters see the bookings made through their link and what they've earned, not your phone number or payment details.

Service providers who run BoothBuddy for us: Stripe (payments), Twilio (text messages), Supabase (database and login) and Vercel (hosting). They may only use your information to provide their service to us.

When the law requires it, or to protect people, prevent fraud, or enforce our Terms. If BoothBuddy is sold or merged, your information may move to the new owner under this policy.

How long we keep it

We keep your account while it's open. Payment and booking records are kept as long as tax, accounting and chargeback rules require, usually up to 7 years. Server logs are kept for a short time.

Your choices

You can edit your profile and text settings on your account page. To get a copy of your information or delete your account, email privacy@boothbuddyapp.com from your account's number or tell us your username; we'll confirm it's you first. Records we must keep by law are kept even after deletion.

Age

BoothBuddy is for people 21 and older. We don't knowingly collect information from anyone under 21.

Security

Data is encrypted in transit, access is limited to people who need it, and phone numbers are kept out of anything other users can see. No system is perfect; if something goes wrong that affects you, we'll tell you as the law requires.

Changes

If we change this policy in a way that matters, we'll update the date above and let you know in the app.