At Sostasis, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
1.1 Information You Provide
When you register, list a venue, or use our services, we may collect:
- Account information (name, email address, password)
- Profile information (phone number, profile photo)
- Venue information (venue details, photos, videos, location, amenities)
- Communication data (messages, inquiries sent through the platform)
- Payment information (credit/debit card details processed and stored by Stripe; Sostasis does not store raw card data)
1.2 Information Collected Automatically
When you access our platform, we may automatically collect:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent, search queries)
- Cookies and similar tracking technologies
1.3 Data Processors and Third-Party Services
We use the following third-party services to operate the platform. Each processes your data only as necessary to provide their services:
- Supabase — database, authentication, and file storage (servers in EU region)
- Stripe — payment processing and subscription management
- Resend — transactional email delivery
- Vercel — website hosting and deployment
- Google — location autocomplete (city/area search)
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our platform
- Process venue listings and facilitate connections between hosts and event planners
- Send you important updates and notifications
- Respond to your inquiries and provide customer support
- Ensure platform security and prevent fraud
- Comply with legal obligations
Legal Basis for Processing (GDPR and Israeli Privacy Law)
For users in the European Economic Area or Israel, we process your personal data on the following legal bases:
- Contract performance: processing necessary to list your venue, manage your account, and provide our services
- Legitimate interests: analytics, security, and platform improvement
- Legal obligation: compliance with applicable laws
- Consent: marketing communications (where you have opted in)
Israeli users: this policy is also subject to the Israeli Privacy Protection Law, 5741-1981 and its regulations.
3. Information Sharing
We do not sell your personal information. We may share your information with:
- Venue hosts and event planners: Your contact information is shared when you choose to connect through the platform.
- Service providers: Third-party vendors who help us operate the platform (see Section 1.3 above).
- Legal requirements: When required by law or to protect our rights and safety.
4. Data Security
We implement industry-standard security measures to protect your information. However, no internet transmission is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.
5. Cookies
We use cookies and similar technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookie settings through your browser.
6. Your Rights
Depending on your location, you may have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict certain processing activities
- Data portability
To exercise these rights, please contact us at legal@sostasis.com.
7. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
8. Children's Privacy
Sostasis is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. International Users
If you are accessing our platform from outside your country of residence, please be aware that your information may be transferred to, stored, and processed in different countries. By using our platform, you consent to such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the platform after changes constitutes acceptance.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: legal@sostasis.com
- Email: support@sostasis.com