Privacy Policy for QuackPlan

1. Introduction

Welcome to QuackPlan , We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our event planning and booking platform.

By using QuackPlan, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information You Provide

When you register and use our services, we collect:

For All Users:

• Email address (required)
• Password (encrypted and stored securely)
• Full name
• Phone number (optional)
• Date of birth (optional)
• Location/address (optional)
• Profile picture (optional)
• Biography/description (optional)

For Vendor Accounts:

• Academy/business name
• Specializations and service categories
• Business address
• Business phone number
• Business website
• Verification documents (for identity verification)

2.2 Booking and Event Data

We collect information related to your activities on the platform:

• Events you create (vendors)
• Events you book or attend
• Personal calendar events
• Booking history and status (confirmed, waitlisted, cancelled, no-show, checked-in)
• Event preferences and searches

2.3 Communication Data

• Notification preferences (email, SMS, push notifications)
• Communication history related to bookings and events
• Customer support interactions

2.4 Automatically Collected Information

• Login timestamps and authentication tokens
• IP address and device information
• Browser type and version
• Usage patterns and platform interaction data
• Session duration and frequency of use

2.5 Uploaded Content

• Profile pictures and images uploaded to our servers
• Event cover images and promotional materials

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Create and manage user accounts
• Process event bookings and manage waitlists
• Enable vendors to create and manage events
• Facilitate communication between vendors and customers
• Manage personal calendars and scheduling

3.2 Communication

• Send booking confirmations and updates
• Notify users of event changes or cancellations
• Send promotional communications (with your consent)
• Respond to inquiries and provide customer support

3.3 Platform Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Ensure platform security and prevent fraud
• Monitor and maintain system performance

3.4 Legal Compliance

• Comply with legal obligations
• Enforce our terms of service
• Protect our rights and interests
• Resolve disputes and prevent fraud

4. Information Sharing and Disclosure

4.1 With Other Users

• Vendors can see customer names and contact information for confirmed bookings
• Customers can view vendor profiles, business information, and public event details
• Profile information set to public is visible to other platform users

4.2 Service Providers

We may share information with third-party service providers who assist us with:

• Cloud hosting and data storage (MongoDB)
• Email delivery services
• SMS notification services
• Push notification services
• Payment processing (if implemented)

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or governmental requests
• Enforce our terms and policies
• Protect our rights, property, or safety
• Investigate fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Passwords are hashed using bcrypt with salt rounds
• Secure Authentication: JWT-based authentication with configurable expiration
• Database Security: Secure MongoDB connections with access controls
• HTTPS: All data transmission is encrypted using HTTPS
• Access Controls: Strict access controls and authorization checks
• Rate Limiting: Protection against brute-force attacks

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Active Accounts: Data retained while account is active
• Deleted Accounts: Personal data deleted within 30 days of account deletion
• Booking Records: Retained for 7 years for legal and financial compliance
• Communication Logs: Retained for 2 years
• Analytics Data: Anonymized data may be retained indefinitely

7. Your Rights and Choices

7.1 Access and Correction

You can access and update your personal information through your account settings.

7.2 Account Deletion

You may request deletion of your account by contacting us. Note that:

• Some information may be retained for legal compliance
• Booking history with vendors may be retained for business records

7.3 Communication Preferences

You can opt-out of promotional communications while still receiving:

• Booking confirmations and updates
• Important account notifications
• Legal notices

7.4 Data Portability

You may request a copy of your personal data in a structured, machine-readable format.

7.5 Cookie Management

You can control cookies through your browser settings, though this may affect platform functionality.

8. Children's Privacy

QuackPlan is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If we discover such collection, we will delete the information immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using QuackPlan, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via:

• Email notification
• In-app notification
• Prominent notice on our platform

Continued use of QuackPlan after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

13. Regional-Specific Provisions

13.1 For European Union Users (GDPR)

If you are located in the EU, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

13.2 For California Users (CCPA)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information to third parties.

13.3 For Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.