Privacy Policy

Last updated: July 3, 2026

PartyDeck ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our service (the "Service").

By using the Service, you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide

When you create an account and use the Service, you provide:

  • Account information: email address, password, name
  • Business information: business name, address, phone, email, tax rate, logo, currency, bank details for payment processing
  • Customer records: contact information and event details for your own customers (created and managed by you)
  • Inventory data: items, quantities, pricing, categories
  • Event and transaction data: quotes, invoices, payment records, event schedules
  • Payment information: processed by Stripe; we do not store credit card numbers

1.2 Information We Collect Automatically

  • Usage data: pages visited, features used, timestamps
  • Device information: browser type, IP address, operating system
  • Cookies and similar technologies: used for authentication and session management

1.3 Information from Third Parties

If you connect a Stripe account, we receive your Stripe account identifier and transaction metadata (never card numbers or bank credentials).

2. How We Use Information

We use information to:

  • Provide, maintain, and improve the Service
  • Process subscription payments and manage your account
  • Enable you to send invoices and collect payments from your customers
  • Send transactional emails (verification, password reset, invoices, team invitations)
  • Respond to your support requests
  • Comply with legal obligations
  • Detect and prevent fraud or abuse

We do not sell your information. We do not use your data or your customers' data to train AI models.

3. Legal Basis for Processing (for EU/UK residents)

We process your information based on:

  • Contract: to provide the Service you signed up for
  • Legitimate interests: to improve the Service, prevent fraud, and communicate with you
  • Consent: where you have provided consent (e.g., marketing emails)
  • Legal obligations: to comply with applicable laws

4. Third-Party Service Providers

We share information with the following processors, each under contractual data protection obligations:

  • Supabase, Inc. — database hosting and authentication
  • Stripe, Inc. — payment processing (both subscription billing and customer invoicing)
  • Resend — transactional email delivery
  • Vercel, Inc. — website hosting
  • Google LLC — business email hosting for support communications

We do not share your information with third parties for marketing purposes.

5. Data Retention

We retain your information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements.

  • Active accounts: data retained while you use the Service
  • Terminated accounts: data retained for 30 days, then deleted unless required for legal or accounting purposes
  • Payment records: retained for 7 years as required by tax and accounting regulations
  • Backups: may persist for up to 90 days after deletion

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of the personal information we hold about you
  • Correction: request that we correct inaccurate information
  • Deletion: request that we delete your information (subject to legal retention requirements)
  • Export: request an export of your data in a structured format
  • Objection: object to certain types of processing
  • Withdrawal of consent: withdraw any consent you previously provided

To exercise these rights, email hello@partydeck.io. We will respond within 30 days.

7. Your Customers' Data

When you upload information about your own customers (such as contact information for people renting from your business), you are the "data controller" of that information. You are responsible for:

  • Providing appropriate privacy notices to your customers
  • Obtaining necessary consents
  • Responding to your customers' data rights requests
  • Complying with applicable data protection laws in your jurisdiction

PartyDeck acts as a "data processor" for your customers' data, processing it only on your instructions and to provide the Service.

8. Data Security

We use industry-standard security measures to protect your information:

  • Encryption in transit (HTTPS)
  • Encryption at rest for sensitive data
  • Access controls limiting who can view your information
  • Regular security updates and monitoring

No system is completely secure. We cannot guarantee absolute security, but we work to protect your information and will notify you of any material breach affecting your data.

9. International Data Transfers

Our service providers may store or process data in countries outside your country of residence, including the United States. We rely on standard contractual clauses or equivalent safeguards to protect information transferred internationally.

10. Cookies

We use cookies for:

  • Authentication: to keep you logged in
  • Preferences: to remember your settings
  • Analytics: to understand how the Service is used (aggregated data only)

You can control cookies through your browser settings. Disabling cookies may affect your ability to use the Service.

11. Children

The Service is not intended for individuals under 18 years old. We do not knowingly collect information from children.

If you believe a child has provided us with information, contact hello@partydeck.io and we will delete it.

12. Marketing Communications

We may send you occasional emails about product updates, new features, or tips for using the Service. You can unsubscribe at any time using the link at the bottom of each email or by emailing hello@partydeck.io.

Transactional emails (invoices, password resets, security notices) cannot be opted out while you have an account.

13. Do Not Track

We do not currently respond to "Do Not Track" browser signals. Third-party analytics providers we use may honor these signals.

14. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act:

  • Right to know what personal information we collect and how we use it
  • Right to delete your personal information (subject to certain exceptions)
  • Right to opt out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, email hello@partydeck.io.

15. European Privacy Rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation and equivalent laws. See Section 6 for a summary of these rights.

To exercise these rights or file a complaint, contact hello@partydeck.io. You also have the right to lodge a complaint with your local data protection authority.

16. Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

To exercise your rights or file a complaint, contact hello@partydeck.io.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service. Continued use of the Service after changes constitutes acceptance.

18. Contact

Questions about this Privacy Policy or your data?

Email: hello@partydeck.io

For privacy-specific requests, please include "Privacy Request" in the subject line.