Privacy Policy

SuiteVenues ("SuiteVenues," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our venue booking and event marketplace, how we use it, who we share it with, and the choices and rights you have. By using SuiteVenues, you agree to the practices described here.

Information we collect

Information you give us

• Account information: your name, profile handle, email address, password, and — where phone verification is enabled — your phone number. We also record when your email or phone was verified.
• Profile information: your avatar, bio, tagline, business name, mailing address, public contact email and phone, links to your other sites, videos, timezone, and display preferences. You control what appears publicly with the visibility toggles in your profile settings.
• Listing information: venue and vendor listings you create, including the property address and coordinates, photos and videos, capacity, hours, pricing, deposit and tax settings, cancellation policies, service areas, add-ons, and on-site manager contact details you provide.
• Event information: events you post, including titles, descriptions, dates, locations, itineraries, guest counts, budgets, RSVP lists, and ticketing details.
• Booking information: booking requests and responses, dates, guest counts, amounts and fees, add-ons, decline reasons, cancellations, and RSVP or ticket purchases.
• Messages and reports: messages you exchange with other users through our inbox, along with reports you file, users you block, and the moderation records that result.
• Payment information: handled by Stripe, not by us. We store only the identifiers and non-sensitive details Stripe returns — a customer or connected-account ID, your card's brand and last four digits, and the payment or charge IDs for a booking. We never receive or store your full card number, CVC, or bank account credentials.
• Support and feedback: anything you send us through the contact or feedback forms, and any email you send our team.

Information we collect automatically

• Session and device data: your IP address, browser user-agent string, and session activity timestamps, recorded so we can keep you signed in and detect suspicious access.
• Usage data: pages viewed, searches run, and how you interact with the platform.
• Activity records: an internal audit log of significant changes made to listings, bookings, and accounts, including who made the change and when, kept for security, dispute resolution, and support.
• Cookies and similar technologies: described in detail below.

Information we receive from others

• From Stripe: payment and payout status, the outcome of a charge or refund, and — for hosts and vendors — whether identity verification and payout onboarding are complete. Stripe collects verification details (which may include government-issued ID and bank details) directly; those go to Stripe, not to us.
• From other users: information others provide about you, such as a booking request that names you or a report filed about a conversation.

How we use your information

• To provide, operate, secure, and improve the SuiteVenues marketplace.
• To create and maintain your account and verify your email address or phone number.
• To publish the listings, events, and profile details you choose to make public.
• To facilitate booking requests, payments, payouts, tickets, RSVPs, and messaging between organizers, venues, vendors, and entertainers.
• To send transactional messages — booking updates, payment receipts, verification codes, security alerts, and service notices — and, where you've opted in, marketing.
• To measure how the site is used so we can improve it.
• To prevent fraud, enforce our Terms of Use, investigate reports, and protect the safety of our users.
• To comply with our legal, tax, and accounting obligations, and to resolve disputes.

Cookies and similar technologies

A cookie is a small file a site stores in your browser. We also use browser storage (localStorage) for a few preferences. Here is what SuiteVenues actually sets, and why.

Strictly necessary

These are required for the site to function and cannot be turned off through our site.

• suitevenues-session — keeps you signed in and preserves your session. Expires after two hours of inactivity, or when you sign out.
• XSRF-TOKEN — protects forms and actions against cross-site request forgery.
• remember_web_* — set only if you choose "remember me" at sign-in, so you stay signed in across browser sessions.
• Cloudflare security cookies (such as __cf_bm and cf_clearance) — set by Cloudflare to distinguish humans from bots and to protect the site from abuse.

Preferences

• sv-theme — stored in your browser's localStorage, not as a cookie. It remembers whether you chose the light, dark, or system color mode so the page doesn't flash on load.

Analytics

• Cloudflare Web Analytics — a privacy-first, cookieless measurement beacon. It reports aggregate page views and performance, and does not use cookies, localStorage, or fingerprinting to track you across sites.

We do not currently use any cookie-based analytics, and we don't run advertising or retargeting trackers on the site. If that changes, we'll update this page before turning them on.

Payments and fraud prevention

• Stripe (cookies such as __stripe_mid and __stripe_sid) — set when you reach the payment step so Stripe can process the payment and detect fraudulent activity. Card details are entered on Stripe's own hosted checkout page.

Embedded content

• YouTube and Vimeo — when a listing includes a video tour and you play it, the player is loaded from YouTube or Vimeo and those services may set their own cookies. Nothing is loaded from them until you open the video.

Your choices

You can block or delete cookies through your browser settings, and most browsers offer a "do not track" or "global privacy control" signal. Blocking strictly necessary cookies will prevent you from signing in or completing a booking. Because we don't use cookie-based analytics or advertising trackers, there's no analytics opt-out to manage — there's nothing set for you to turn off.

Third-party service providers

We rely on a small set of vendors to run SuiteVenues. Each receives only the data it needs to perform its function, is bound to protect it, and may not use it for its own purposes. Our providers today are:

• Stripe, Inc. — payment processing, hosted checkout, payouts to hosts and vendors, subscription billing, and identity verification for payout accounts. Card and bank details go directly to Stripe. See the Stripe Privacy Policy.
• Cloudflare, Inc. — content delivery, DDoS protection and bot filtering in front of the site, object storage for the photos and files you upload, and cookieless web analytics. See the Cloudflare Privacy Policy.
• Google LLC — Google Fonts, which serves the site's typeface. It receives your IP address as part of that request; it is not used to measure or profile you. See the Google Privacy Policy.
• Laravel Cloud — application hosting, database, background job processing, and application performance monitoring. Personal data stored by SuiteVenues resides on this infrastructure. See the Laravel privacy policy.
• Postmark — delivery of transactional email such as verification links, booking notifications, and receipts. It receives your email address and the contents of those messages. See the Postmark Privacy Policy.
• Twilio Inc. — delivery of SMS verification codes, where phone verification is enabled. It receives your phone number and the message. See the Twilio Privacy Notice.
• YouTube (Google LLC) and Vimeo, Inc. — play the video tours embedded in listings, only once you start a video.

We'll update this list when our providers change. If you'd like the current list at any time, email legal@suitevenues.com.

How we share information

We share personal data only as described here:

• With other users, to complete a booking. When you request or accept a booking, the other party sees the details needed to honor it — your name, the event details, guest count, dates, and the contact information you've chosen to share. Hosts and vendors see the address and details of the events they're booked for; organizers see the venue address and on-site contact once a booking is confirmed.
• Publicly, where you've chosen to publish. Published listings, public profiles, events, and RSVPs are visible to anyone, including search engines. Your profile page — reachable at your chosen handle — shows what your privacy toggles allow: your location, email, phone, and contact form are each individually switchable.
• With the service providers listed above, to operate the platform.
• For legal reasons — with authorities or third parties when required by law, to enforce our Terms, or to protect the rights, property, or safety of SuiteVenues, our users, or the public.
• In a business transfer — if SuiteVenues is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We'll notify you before it becomes subject to a different privacy policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We don't run third-party advertising networks on the site.

Payments

Payments are processed by Stripe. When you pay for a booking, you're charged on the host's or vendor's own Stripe account, and SuiteVenues collects its platform fee from that payment — so your payment details are handled by Stripe and shared with the business you're booking, not stored by us. Hosts and vendors who accept payments complete Stripe's onboarding and identity verification directly with Stripe and are subject to Stripe's terms and privacy policy in addition to ours.

Communications and your choices

• Transactional messages — booking updates, verification and security notices, payment receipts, and policy changes — are part of the service and can't be turned off while your account is open.
• Marketing email is only sent where you've opted in, and every marketing message includes an unsubscribe link.
• In-app and push notifications can be managed from your notification settings; conversations can be muted individually.
• SMS, where enabled, is used for account verification and security codes only — never marketing — and only sent to a mobile number whose owner gave express consent by checking the SMS opt-in box at signup. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to opt out at any time.
• Mobile information is never sold or shared for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding the vendors and service providers that deliver messages on our behalf (see Twilio, above).

Data retention

• We keep your account data for as long as your account is open.
• Unverified accounts: if you never confirm your email address, we send reminders, then deactivate the account 30 days after registration, and permanently delete it at 90 days. You can restore a deactivated account by confirming your email before the 90-day mark.
• Closed accounts: when you delete your account we deactivate it immediately and remove your profile from public view, then purge the underlying record on our standard schedule.
• Booking, payment, and tax records are retained for as long as legal, tax, and accounting rules require, typically seven years, even after an account closes.
• Messages and moderation records are retained while the related accounts are open and for a reasonable period afterward so we can resolve disputes and investigate abuse.
• Session and log data is retained on a short rolling window.

Data security

We use industry-standard safeguards to protect your data, including encryption in transit (HTTPS everywhere), hashed passwords, optional two-factor authentication and passkeys, a strict content security policy, and access controls limiting who on our team can see your data. No method of transmission or storage is completely secure, but we work continuously to keep your information safe. If a breach affects your personal data, we'll notify you and any required regulators as the law requires.

International data transfers

SuiteVenues is operated from the United States, and our providers process data in the United States and other countries. If you access the service from outside the U.S., you understand your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent, and to be free from discrimination for exercising these rights. Many of these are available directly in your account: you can edit your profile, change what's public, download or remove your listings, and delete your account from your settings.

For anything else, email legal@suitevenues.com. We'll verify your identity before acting on a request and respond within the timeframe the applicable law requires. You may use an authorized agent where the law allows, and you may appeal a decision by replying to our response.

Children's privacy

SuiteVenues is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above and, for material changes, notify you by email or through the service before they take effect.

Contact us

Questions about this policy or your personal data? Email us at legal@suitevenues.com or visit our contact page.