Summary: LuxEvents collects information you provide when creating an account or making a booking. We use Supabase for secure data storage and Stripe for PCI-compliant payment processing — we never store your full credit card details. We do not sell your personal data. You can request deletion of your account and data at any time.
1. Who We Are
LuxEvents ("we," "us," or "our") operates the LuxEvents marketplace platform accessible at luxevents.app. We connect clients seeking event services with independent event professionals and vendors ("Providers"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, password (hashed), and role (client or provider)
- Provider profile: business name, bio, service category, pricing, location, portfolio images
- Booking information: event date, event type, guest count, special requests
- Communications: messages sent through the platform between clients and providers
2.2 Payment Information
All payment processing is handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. LuxEvents does not store, transmit, or have access to your full credit card number, CVV, or banking details. Stripe may collect and use payment information in accordance with their own Privacy Policy.
2.3 Automatically Collected Information
- Authentication cookies: session tokens set by Supabase for secure login
- Usage data: pages visited, search queries, booking activity
- Device/browser data: IP address, browser type, operating system (for security purposes)
3. How We Use Your Information
- To create and manage your account
- To facilitate bookings between clients and providers
- To process payments and issue receipts via Stripe
- To send transactional emails (booking confirmations, receipts, account notifications)
- To improve the platform and personalize your experience
- To prevent fraud, abuse, and unauthorized access
- To comply with applicable laws and legal obligations
4. Information Sharing
We do not sell your personal information. We share information only in these circumstances:
- With Providers: when you book a service, your name, event details, and contact info are shared with the provider you booked
- With Clients: when a provider accepts a booking, limited client contact details are shared
- Service providers: Supabase (database), Stripe (payments), Vercel (hosting) — all under data processing agreements
- Legal requirements: if required by law, court order, or to protect the rights and safety of LuxEvents and its users
5. Data Storage & Security
Your data is stored securely using Supabase, which provides encrypted databases with row-level security. Data is hosted on infrastructure compliant with SOC 2 Type II standards. We use HTTPS for all data transmission.
While we implement industry-standard safeguards, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access.
6. Cookies
We use only strictly necessary cookies. See our Cookie Policy for full details.
7. Your Rights
- Access: request a copy of the personal data we hold about you
- Correction: update inaccurate or incomplete information via your account settings
- Deletion: request deletion of your account and associated personal data
- Portability: receive your data in a structured, machine-readable format
- Opt-out: unsubscribe from marketing emails at any time
Email: privacy@luxevents.app. We respond within 30 days.
8. Children's Privacy
LuxEvents is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Your continued use of LuxEvents after changes are posted constitutes your acceptance.
10. Contact Us