Privacy Policy

Last updated: March 8, 2026

1. Introduction

OpenSeat, operated by Vanilla Studio ("we", "us", "our"), is a private event management platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect the following information when you sign up and use OpenSeat:

  • Account information: name, phone number, profile photo, bio, and interests
  • Event data: events you create, invitations you send or receive, and RSVP responses
  • Usage data: how you interact with the platform, including login times and feature usage
  • Payment information: processed securely by Stripe; we do not store card details

3. How We Use Your Information

  • Manage your account and provide the platform's core features
  • Send event invitations, RSVP confirmations, and reminders via WhatsApp
  • Share your phone number with event hosts/guests upon RSVP acceptance (so you can coordinate)
  • Process subscription payments
  • Improve our platform and user experience

4. WhatsApp Messaging

We use the WhatsApp Business API to send transactional notifications including event invitations, RSVP confirmations, event updates, cancellations, and reminders. By creating an account, you consent to receive these messages. You can opt out of WhatsApp notifications at any time through your profile settings.

5. Phone Number Sharing

When you accept an event invitation, your phone number is shared with the event host, and the host's phone number is shared with you. This enables direct coordination for the event. Phone numbers are only shared between confirmed participants.

6. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). We use encryption in transit (TLS) and row-level security policies to ensure only authorized users can access data. Profile photos are stored in secure cloud storage.

7. Third-Party Services

We use the following third-party services:

  • Supabase: database and authentication
  • Meta WhatsApp Business API: sending notifications
  • Stripe: payment processing
  • Vercel: hosting

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your account and data
  • Opt out of WhatsApp notifications
  • Export your data

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data will be removed within 30 days, except where required by law.

10. Contact

For privacy-related questions or requests, contact us at felixmvdw@gmail.com.