Privacy Policy

We may collect the following categories of information:

Information You Provide

When you create an account, request services, or communicate with us, we may collect:

• Name
• Business name
• Email address
• Telephone number
• Mailing address
• Event details
• Messages sent through the Platform
• Profile photographs
• Menus and service descriptions
• Business licenses and insurance documents (for Vendors)
• Tax information where required
• Customer reviews and ratings

Payment Information

Payments are processed by independent third-party payment processors.

The Company does not store full payment card numbers.

We may receive limited payment information such as:

• Payment status
• Transaction identifiers
• Last four digits of payment methods
• Billing information provided by the payment processor

Automatically Collected Information

When you use the Platform, we may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Referring websites
• Pages viewed
• Session duration
• Search activity
• Booking activity
• Error logs
• Cookies and similar technologies

Location Information

With your permission, we may collect approximate or precise location information to improve search results, recommend nearby Vendors, or provide location-based features.

You may disable location permissions through your device settings.

We may use your information to:

• Create and manage accounts;
• Process bookings;
• Facilitate communications between Customers and Vendors;
• Process payments;
• Verify Vendor identities;
• Detect fraud;
• Prevent unauthorized activity;
• Improve Platform performance;
• Personalize search results;
• Respond to customer support requests;
• Send transactional communications;
• Send marketing communications where permitted by law;
• Comply with legal obligations;
• Enforce our agreements; and
• Protect the safety and security of the Platform.

We may share information with:

Vendors

Customer information necessary to complete a Booking.

Customers

Vendor profile information necessary to evaluate and complete a Booking.

Service Providers

Third parties that assist us with:

• Payment processing
• Cloud hosting
• Customer support
• Analytics
• Email delivery
• SMS messaging
• Fraud prevention
• Identity verification
• Marketing services

Legal Authorities

We may disclose information when required to:

• Comply with legal obligations;
• Respond to subpoenas, court orders, or lawful requests;
• Protect the rights, property, or safety of the Company, our users, or others;
• Investigate suspected fraud or illegal activity.

The Platform uses cookies and similar technologies to:

• Remember user preferences;
• Keep users signed in;
• Measure traffic;
• Improve performance;
• Analyze usage;
• Deliver relevant content.

Users may disable cookies through their browser settings, although some features may not function properly.

We retain personal information only for as long as reasonably necessary to:

• Provide the Platform;
• Complete bookings;
• Resolve disputes;
• Comply with legal obligations;
• Enforce our agreements;
• Maintain business records.

When information is no longer required, it will be securely deleted or anonymized where reasonably practicable.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location and applicable law, you may have the right to:

• Access your personal information;
• Correct inaccurate information;
• Delete certain personal information;
• Obtain a copy of your information where applicable;
• Object to certain processing;
• Restrict certain processing;
• Withdraw consent where processing is based on consent;
• Opt out of marketing communications.

We will respond to applicable requests in accordance with governing law.

Users may unsubscribe from promotional emails by using the unsubscribe link contained within those emails.

Transactional messages relating to bookings, payments, account security, or legal notices may continue to be sent even if marketing communications are declined.

The Platform is not intended for individuals under the age of 18.

We do not knowingly collect personal information from children. If we learn that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information.

The Platform may contain links to third-party websites or integrate with third-party services.

The Company is not responsible for the privacy practices, security, or content of those third parties. Users should review the privacy policies of any third-party services they use.

If the Company is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or other corporate transaction, user information may be transferred as part of that transaction, subject to applicable law.

We may modify this Privacy Policy from time to time.

When material changes are made, we will update the Effective Date and provide notice where required by applicable law.

Continued use of the Platform after the updated Privacy Policy becomes effective constitutes acceptance of the revised Privacy Policy.

When Vendors participate in the Platform's verification program, NContro may collect and process information such as business licenses, insurance certificates, permits, professional certifications, portfolio samples, driver's licenses and vehicle registrations for transportation vendors, related expiration dates, verification status, and other supporting verification documentation.

Authorized NContro personnel and service providers may process this information for verification, fraud prevention, compliance, and Platform safety. Access is restricted to individuals with a legitimate business need.

Vendors are responsible for keeping submitted verification information accurate and for promptly updating information upon material change, expiration, cancellation, suspension, or loss of relevant credentials.

If a user elects to connect a supported third-party integration to their NContro account, NContro may exchange information reasonably necessary to provide that integration. We follow data-minimization principles and only exchange the fields required for the integration to function.

For calendar-availability integrations (for example, Tripleseat), NContro imports only the information required to determine whether a Vendor is available on a particular date and time period — such as event date, times, status, and internal event identifiers. NContro does not import Tripleseat customer emails, phone numbers, private notes, payment details, or guest personal information for availability purposes.

Users may disconnect an integration at any time. When an integration is disconnected, NContro deactivates further data exchange with that provider. Historical event records already imported may remain in the account's audit history and are subject to the retention terms below.

NContro uses automated and AI-supported functionality to power certain Platform features — for example, parsing menu or service documents that Vendors upload, extracting images from Vendor-supplied websites, and similar convenience features.

Information and files submitted for such features may be processed using automated systems and third-party service providers as reasonably necessary to provide those features. NContro selects providers that offer appropriate confidentiality and security commitments.

Automated systems used by NContro do not make legally significant decisions about Users. Verification, moderation, refund review, and account suspension decisions are reviewed by NContro personnel.

NContro may preserve, review, compile, and where reasonably necessary provide relevant Platform records when responding to refunds, payment disputes, chargebacks, cancellations, no-shows, fraud investigations, safety complaints, or compliance investigations.

Relevant records may include the accepted Proposal or Booking record, the applicable cancellation and refund policy, timestamps, payment and refund records, Platform communications, cancellation and no-show records, and uploaded supporting documentation.

NContro may share relevant information with payment processors, financial institutions, regulators, law enforcement, and other appropriate entities where legally permitted and reasonably necessary.

Deletion of a User account does not require immediate deletion of every record. NContro may retain information reasonably necessary for legal obligations, tax and accounting obligations, Booking records, fraud prevention, security, refunds, disputes, chargebacks, enforcement, and contractual obligations, subject to applicable law.

Retention periods vary by record type and applicable law. Where information is retained beyond active account use, access is limited to individuals with a legitimate business need.

If you have questions regarding this Privacy Policy or our privacy practices, please contact: