Privacy Policy

How Cirvo collects, uses, and protects personal data — and how you can access or delete your information.

1. Who we are

Cirvo ("we") operates the café event platform at cirvo.de. This policy explains how we process personal data under the GDPR and applicable German law.

2. Data we collect

Account data: name, email, city, profile settings, role (participant, organizer, venue owner).
Usage data: events you create or join, communities, messages, saved items, and technical logs.
Consent records: terms/privacy acceptance timestamps, policy versions, optional marketing consent.
Public host profiles: only if you opt in as an organizer or venue owner with "public profile" enabled.

3. How we use data

To provide the service, personalise recommendations (if you opt in to marketing emails), prevent abuse, and comply with legal obligations. We do not sell your personal data.

4. Legal bases

Contract (providing the platform), consent (marketing emails, optional public profile), and legitimate interests (security, analytics in aggregated form).

5. Sharing

We use processors such as Supabase (hosting/database) and email delivery providers. Public event and venue pages show only information you choose to publish; attendee identities are not listed publicly by default.

6. Retention

We keep data while your account is active and as needed for legal, tax, or dispute purposes, then delete or anonymise it.

7. Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability, or objection to processing where applicable.

8. Delete your account

To request deletion of your account and associated personal data, email privacy@cirvo.de from your registered address with the subject "Account deletion request". We will verify ownership and complete deletion within 30 days unless we must retain specific records by law.

You can also sign in and remove optional profile data under Settings → Privacy before requesting full deletion.

9. Data access requests

For a copy of personal data we hold about you, contact privacy@cirvo.de. We respond within one month.

10. Cookies

We use essential cookies and local storage for authentication and preferences. Analytics cookies are minimised in MVP.

11. Children

Cirvo is not directed at children under 16. Accounts require age confirmation at signup.

12. Changes

We may update this policy. The version shown at signup is stored on your profile; material updates may require re-consent.

13. Contact

Data protection enquiries: privacy@cirvo.de (placeholder — update before production).