Legal

Privacy Policy

Last Updated: August 9, 2026

1.Data Controller

Hobby Handler ("we," "us," or "our") acts as the data controller for the personal information collected through our platform. We are committed to protecting the privacy of collectors, vendors, and event organizers by ensuring the security and integrity of your personal data.

2.Information We Collect

To provide a seamless event management experience, we collect the following:

• Account Information: Name, email address, and billing details provided during registration.

• Event & Management Data: Information created by organizers, including vendor lists, floor plans, booth assignments, and event schedules.

• Social Platform Data: When you connect Facebook, Instagram, or TikTok, we process the connected account identifier and profile details, encrypted authorization credentials, content you choose to publish, publishing results, and your automation settings. For comment automations, we also process the triggering comment text and the commenter's public identifier or username so we can send the private reply you configured.

• Usage Data: Automated information such as IP addresses, browser types, and interaction patterns collected to optimize platform performance.

3.Third-Party Services

To provide a high-quality experience, we use specialized third-party providers and integrated platforms:

• Clerk: Provides account authentication, session security, and subscription billing for new subscriptions.

• Supabase: Provides database and file storage.

• Vercel: Provides web hosting and edge infrastructure.

• GitHub: Used for version control and deployment pipeline.

• Resend: Provides transactional email delivery.

• Stripe: Processes event, ticket, vendor, invoice, payout, and grandfathered subscription payments. Your full payment-card details are never stored on our servers.

• Meta: Receives the Facebook and Instagram content, publishing instructions, and private or public replies you choose to send.

• TikTok: Receives the TikTok content and publishing settings you choose to send.

Your use of a connected social platform remains subject to that platform's own terms and privacy policy.

4.Data Retention & Deletion

We retain your information as long as your account is active to provide uninterrupted service. Disconnecting a social account deletes its stored authorization credentials and account-specific automations from Hobby Handler. Publishing and security records may remain until you delete your Hobby Handler account or request deletion, unless limited retention is required for legal, fraud-prevention, or financial record-keeping purposes. Users may request deletion through the Account Dashboard.

5.Security Measures

Our defense-in-depth strategy includes:

• Encryption: SSL/TLS technology for data in transit and authenticated encryption for stored social-platform access credentials.

• Granular Access: Row Level Security (RLS) within Supabase ensures organizers and vendors can only access data they are explicitly authorized to see.

• Environment Protection: Secure environment variable management via Vercel.

6.Cookie Policy

Hobby Handler uses cookies to maintain your session and personalize your experience. While you can disable cookies in your browser settings, doing so may limit your ability to use certain features of the event management suite.

7.Your Rights (PIPEDA & GDPR)

As a platform operating with users in Canada and internationally, we respect your rights to:

• Access the personal data we hold about you.

• Correct any inaccuracies in your information.

• Withdraw consent for data processing at any time.

• Request erasure of your personal information.

Questions about this policy? Contact us at privacy@hobbyhandler.app