This policy explains what information Crimson Cat Events ("we", "us") collects when you use the Crimson Cat Events app and website, how we use it, and the choices you have. This policy applies when you use the Crimson Cat Events app and website.
When you sign up and use the service, we collect:
We do not sell your personal information. We share data only with service providers that help us run the app:
Supabase — secure database and authentication (stores your account and app data).
Stripe — payment processing (handles card details directly under its own privacy policy).
Netlify — website and backend hosting.
You can delete your account at any time from Profile → Privacy & Legal → Delete Account. Deletion is a confirmed multi-step action. When you delete your account:
You can also request deletion by emailing us at the address below.
Card and PromptPay payments are processed by Stripe. We keep only payment records (amount, date, status, and order reference) for bookings, refunds, and accounting. We never store full card numbers or bank details — Stripe handles those under its own privacy policy.
When you join a waitlist we store your account email and the event you're waiting for, so we can notify you if a spot opens. Waitlist entries are removed when the event ends.
If you refer or bring a friend, we store the name and email you provide, only to issue their ticket and welcome them. Your friend can ask us to remove their details at any time.
We send notifications about your bookings, waitlist spots, event reminders, and rewards. You can manage or turn these off in Profile → Notifications.
The app does not use third-party analytics. The website uses GoatCounter for privacy-friendly traffic analytics.
If you redeem a partner perk we record the redemption. If you apply as a partner business we store the business and contact details you submit, to review and manage the partnership.
Events may be photographed or recorded. Photos may be used for community, marketing, or safety purposes. Tell the host before or during the event if you prefer not to appear in public photos. You can ask us to remove a public photo of you at any time.
Where photo tagging is available, tags may connect event photos to member profiles. You can ask us to untag you or remove a public photo of you at any time.
Our service providers (Supabase, Stripe, Netlify) may store or process data outside Thailand. They each protect data under their own security and privacy commitments.
Data is stored on secured cloud infrastructure with access controls. We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations.
Depending on your location (including under Thailand's PDPA and the EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact us below.
The service is intended for adults and is not directed to children under 18. If you believe a minor has provided us personal data, contact us and we will remove it.
We may update this policy from time to time. Material changes will be posted here with an updated effective date.
Questions or requests about your data: hello@crimsoncatevents.com