Privacy Policy
Last updated 19 October 2026
The short version:
- We collect only what's needed to run your account: your email address (and first name, if you give it), your company and team, your plans and settings, and basic usage records.
- We only email you about new features if you say yes, and you can stop any time.
- Your data is stored in the EU (Ireland).
- We don't sell your data, show ads, or use tracking or analytics cookies.
- Card payments go to Paddle, our payment reseller. We never see your card details.
- You can ask to see, correct, export or delete your data at any time.
1. Who is responsible
Mike Guckian, trading as VenuCable, Wine Street, Sligo, F91 TN8C, Ireland, is the controller of the personal data described in this policy. Contact: support@venucable.com.
Some personal data is data you put into your plans, such as crew names, phone numbers and venue contacts. For that data, your business is the controller and we are your processor (see section 8 of our Terms). Questions about it should go to the business that entered it.
2. What we collect, why, and on what legal basis
| Data | Why | Legal basis |
|---|---|---|
| Your email address | To sign you in with a one-time code, and to contact you about your account, including important changes to the service | Contract |
| Your email address, if you tick "Send me occasional emails about new features" | To send you occasional emails about new features. Untick it any time under Account, use the unsubscribe link in any of those emails, or reply to stop | Consent |
| Your first name, if you give it | To greet you by name in the app's emails and when we reply to you. Change or remove it any time under Account | Consent |
| Which emails we've sent you, and whether you've asked us to stop | So you don't get the same email twice, so we know what you've been told about your account, and so nobody who has asked us to stop gets emails about their trial, account or new features (use the "Stop emails like this" link in any of them, or reply). Sign-in codes and billing emails still reach you | Legitimate interests |
| Company name, team membership and role, invites | To run your company account and control who can see what | Contract |
| Plans and company settings (rates, kit, crew, logo) | To store and sync your work | Contract |
| Trial dates, subscription status, and Paddle customer and subscription IDs | To provide trials and subscriptions | Contract |
| Usage records: when you last opened the app, and the web address and app version it ran from | To show the owner when team members were last active, to support you, and to detect unauthorised copies of the app | Legitimate interests (running and protecting the service) |
| Free-trial records: your email address and network (IP) address in scrambled (hashed) form, a random id for the device the trial was started on, and your email domain if it's a work address | To give one free trial per person and stop repeat trials. A trial is refused for an email address or device that has already had one | Legitimate interests (protecting the service) |
| Technical logs kept by our hosting providers (IP address, browser, time of request) | Security, preventing abuse, fixing problems | Legitimate interests |
| Emails you send us | To reply and help you | Legitimate interests / contract |
We don't use your data for advertising, don't sell it, and don't make automated decisions about you that have legal or similar effects.
3. Payments
Subscriptions are sold through Paddle.com, which acts as the reseller and Merchant of Record. Paddle collects your payment details, billing address and tax information, and is the controller of that data under Paddle's privacy policy. Paddle tells us your subscription status and IDs; we never receive your card details. Paddle's checkout may set its own cookies for payment and fraud prevention.
4. Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, and the payment webhook | EU (Ireland) |
| Cloudflare | Hosting the website, and security | Global network; EU data protection terms apply |
| Resend | Sending sign-in code emails | EU (Ireland) sending region |
| Brevo | Sending our other emails to you (about your account and, if you said yes, new features) | EU |
| Paddle | Payments (as an independent controller, see section 3) | UK / EU |
Some of these providers are companies based in the United States, or may access data from outside the EU for support or security. Where that happens, the transfer is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. Storage on your device
The app stores your sign-in session, a random id for the device (used only for the one-trial-per-device check), and a working copy of your company's plans in your browser's local storage, so it loads quickly and works without an internet connection. This is essential to the service. We don't use tracking, analytics or advertising cookies. Signing out removes your company's copy from that browser.
Keeping your data on your own computers. A company's account owner can choose to keep its plans on each person's own computer instead of in our database (Account → Where your plans are kept). We then delete the company's plans, photos, rate card and settings from our database and don't store them again while that choice is on. We still hold what the account needs to work: the company name, members' email addresses, subscription status and usage records. Individual plans can also be kept on one computer only, or saved to files you control.
6. How long we keep data
- Account, company, plans and settings: while the account exists. If a company account has been view-only or cancelled for 12 months, we may delete it after emailing the owner at least 30 days before. Deleting a company also deletes the sign-in details of its people who don't belong to another company.
- Usage records (app opens): 12 months.
- Free-trial records: 2 years from the start of the trial, even if the company is deleted sooner.
- Emails with us: as long as needed to deal with your query, then up to 2 years.
- Hosting providers' technical logs: according to their own retention, typically days to weeks.
7. Security
Data is encrypted in transit. Access is controlled by the database itself: members of one company cannot see another company's data. Sign-in uses one-time codes, so there are no passwords to steal. No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the Data Protection Commission as the law requires.
8. Your rights
You have the right to:
- access your personal data;
- correct it;
- have it deleted;
- restrict or object to how we use it;
- receive it in a portable format. Plans can also be exported from the app at any time.
Email support@venucable.com to use any of these. We'll reply within one month.
If you're not happy with how we handle your data, you can complain to the Data Protection Commission in Ireland: dataprotection.ie.
9. Children
VenuCable is a business service, and is not intended for anyone under 18.
10. Changes
We'll post any changes here and update the date at the top. For significant changes, we'll tell account owners by email or in the app.