Privacy Policy

This Privacy Policy explains how beTuanis (the "Service", "we", "our", or "us") collects, uses, and protects information when you visit betuanis.com or use the beTuanis mobile application (the "App").

beTuanis is operated as an independent project. For any privacy-related question or to exercise your data rights, contact us at privacy@betuanis.com.

1. Information we collect

We try to collect the minimum amount of personal data necessary to run the Service.

Information you provide

• Event submissions: when you use the "Add your event" form, we collect the event details you provide (title, description, venue, address, date and time) and the contact information you choose to share (typically your name, a WhatsApp number, and optionally an email).
• Direct communications: when you email us, we keep your message and email address in order to respond.

Information collected automatically

• Technical data: our hosting and backend providers log basic request information such as IP address, browser or device type, and pages or screens visited. When you submit an event, we may store the IP address associated with the submission to prevent abuse and spam. This data is used for security and operational purposes.
• Analytics: on our website we use Google Tag Manager, which we currently use to load Google Analytics 4, to understand how visitors use the site (pages viewed, approximate location, device and browser, referral source). These tools may set cookies and process this data on our behalf. We use Google Consent Mode: analytics cookies are not active until you accept them through our cookie banner. If you decline, only privacy-preserving, cookieless signals are collected.
• Cookies: we use essential cookies required for the site to function, and analytics cookies as described above. You can manage or reject non-essential cookies through the cookie banner shown on your first visit, or through your browser settings. The mobile App does not use advertising cookies or third-party trackers.

2. How we use information

• To publish curated event information on the Service.
• To contact event submitters to verify, clarify, or follow up on submitted events.
• To respond to messages you send us.
• To understand and improve how the Service is used (analytics).
• To maintain security, prevent abuse, and operate the Service (e.g. server logs and submission IP addresses for debugging and anti-spam).

We do not sell your personal data. We do not use your data to build advertising profiles.

3. Legal basis (for users in the EU/EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases of the GDPR:

• Legitimate interest: for publishing the events you submit, replying to your messages, basic server logging, and protecting the Service from abuse.
• Consent: for non-essential analytics cookies (Google Analytics). You can withdraw consent at any time via the cookie banner or your browser settings.
• Legal obligation: in the rare case we are required to retain or disclose data by law.

4. Service providers we use

We rely on the following third parties to operate the Service. Each of them processes data only on our behalf or under their own applicable privacy terms:

• Vercel — website hosting and server logs.
• Supabase — database and storage for event data, submissions, and images.
• Google Tag Manager / Google Analytics (Google LLC) — website usage analytics.
• Email provider — for receiving and answering messages you send us.

Some of these providers are based outside the EEA. When data is transferred internationally, it relies on standard contractual clauses or equivalent safeguards.

5. Data retention

• Event submissions: retained while the event is published plus 12 months after, for reference and to detect duplicates.
• Email correspondence: kept for up to 24 months unless legally required to retain longer.
• Server logs and submission IP addresses: rotated and deleted typically within 90 days.
• Analytics data: retained according to our Google Analytics configuration, typically up to 14 months.

6. Your rights

Depending on where you live (GDPR for EU/EEA/UK, and similar laws elsewhere), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Delete your data (right to be forgotten).
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority in your jurisdiction.

To exercise any of these rights, email us at privacy@betuanis.com. We will respond within 30 days.

7. Security

We take reasonable measures to protect personal data, including HTTPS encryption for all traffic, row-level security on our database, and limited access to submitted data. No system is perfectly secure; if you become aware of a security issue, please report it to privacy@betuanis.com.

8. Children's privacy

The Service is intended for users 16 years of age or older. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy occasionally. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide a more prominent notice (such as a banner on the homepage).

10. Contact

Questions, requests, or complaints about this policy or your data?

Email: privacy@betuanis.com