Privacy Policy

This policy covers three kinds of people: vendors and managers who create a Showfile account, the couples/clients/guests a vendor invites in via a link or code, and visitors to our public pages.

• Account information — your email, password (stored as a one-way hash, never in plain text, via our authentication provider), business name, and the preferences you set.
• Client and event information you enter— names, emails, phone numbers, event dates, venues, notes, and guest lists for the people and events you manage. This is your data about your own clients; you're responsible for having the right to collect it.
• Payment information — handled entirely by Stripe. We never receive or store your card number, only a subscription status and a Stripe-assigned customer/subscription ID.
• Automatically collected information — IP address (used to rate-limit abuse on public forms, not retained long-term) and standard server logs.
• Cookies / local storage— used to keep you signed in and remember basic preferences. We don't use third-party advertising trackers.

• To operate the Service — your pipeline, a couple's timeline, the emails a feature triggers (a quote link, a contract to sign, a booking confirmation).
• To send transactional email through our email provider — never marketing email without your opt-in.
• To process payments through Stripe.
• To search a public music catalog through Spotify when you use the timeline's song-search feature — this only ever sends a search term, never personal data.
• To prevent abuse and fraud.

We do not sell personal information, and we do not use it for third-party advertising.

We share information only with the service providers that make Showfile work, each used only to provide their service to us:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Spotify — public catalog search only; no personal data is sent to Spotify.
• Vercel — application hosting.

We may also disclose information if required by law, or to protect the rights, property, or safety of Showfile, our users, or others.

We keep your information for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where we're required to keep it longer (for example, billing records for tax purposes).

• Export— download a complete copy of your account's data at any time from Settings.
• Correction — edit most of your information directly in the app.
• Deletion — email [CONTACT EMAIL]to request deletion of your account and data; we'll confirm once it's done. There's no self-serve "delete my account" button yet, so this is handled by request.
• If you're in a jurisdiction with additional statutory privacy rights, contact us and we'll honor applicable requests.

Showfile is not directed at children, and we don't knowingly collect personal information from anyone under 16. If you believe a child's information has been provided to us, contact [CONTACT EMAIL]and we'll remove it.

We use industry-standard measures to protect your information — encrypted connections everywhere, password hashing, and access controls that scope every account to only its own data. No system is perfectly secure, and we can't guarantee absolute security.

Our servers and service providers are located in [DATA REGION, e.g. "the United States"]. If you use Showfile from outside that region, your information will be transferred there.

We'll post updates here with a new effective date. Material changes will be highlighted at sign-in.

Questions about this policy, or to exercise any of the rights above: [CONTACT EMAIL].