Privacy Policy

Last updated: July 17, 2026

This is a plain-language template, not legal advice. Please have it reviewed by a qualified attorney before you rely on it.

This policy explains what personal information Tavolina ("we", "us") collects, how we use it, and the choices you have. It covers our platform and website (the "Service").

Information we collect

Account information — your name and email address when you create an account or are invited to an organization.
Event and order information — for buyers, the name, email, and any details the organizer asks for at checkout, plus the tickets and tables you buy.
Payment information — card payments are processed by Stripe. We do not see or store full card numbers; we receive a confirmation and limited details needed to reconcile orders.
Technical information — basic log data such as device and browser type, and privacy-respecting, aggregate usage analytics. We do not use cross-site advertising trackers.

How we use information

We use personal information to provide the Service: to create and secure accounts, process orders, deliver tickets, enable check-in, send transactional email (receipts, reminders, and organizer messages you have not unsubscribed from), prevent fraud and abuse, meet legal obligations, and improve the Service.

Roles

For event data, the organizer is the controller and Tavolina is the processor acting on the organizer's instructions. For our own account and platform data, Tavolina is the controller.

How we share information

With organizers — buyers' order details are shared with the organizer running the event, so they can deliver and manage it.
With service providers — such as Stripe (payments), our email provider, and our hosting and database providers, only as needed to run the Service.
For legal reasons — when required by law, or to protect our rights, users, or the public.
In a business transfer — if Tavolina is involved in a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information.

Data retention

We keep personal information for as long as needed to provide the Service and meet legal, accounting, and reporting requirements. Organizers can export and delete their data; buyers can request access to or deletion of their information (see below).

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Buyers can manage and export their data from their order page, and unsubscribe from non-essential email using the link in any message. To make a request, use the contact link in the site footer; for event data, we may direct you to the organizer.

Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, scoped database access, and payment handling delegated to Stripe. No system is perfectly secure, so we cannot guarantee absolute security.

Children

The Service is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their personal information.

Changes

We may update this policy. If we make a material change, we will post the updated version here and revise the date above.

Contact

Questions about your privacy? Reach us through the contact link in the site footer.