Privacy Policy

We may collect account information such as your name, email address, business name, phone number, location, and account role.

Vendors may provide business descriptions, social links, photographs, menus, insurance documents, permits, certificates, and application details.

Organizers may provide event information, organization details, application requirements, fees, locations, and contact information.

We may also collect technical information such as IP address, browser type, device information, login activity, and basic usage data needed to operate and secure the service.

We use information to create and manage accounts, display vendor and event profiles, process event applications, manage documents, communicate application updates, provide support, prevent misuse, and improve FestLink.

We may send service-related messages such as account notices, application confirmations, approval updates, security alerts, and document reminders.

Marketing messages will only be sent where permitted, and recipients may unsubscribe from promotional communications.

Vendor profile and application information may be shared with organizers when a vendor applies to an event.

Organizer and event information may be displayed to vendors and visitors where the organizer has chosen to publish it.

We use the following service providers to operate FestLink: Supabase (database, authentication, and file storage), Vercel (application hosting), Resend (transactional email delivery), and Google (optional sign-in). Each provider only receives the information necessary to perform its function.

We do not sell personal information.

We may disclose information where required by law, to protect users and the platform, or as part of a business restructuring or sale.

Users are responsible for ensuring that documents, photographs, and other uploaded materials are accurate, lawful, and appropriate to share.

Private documents are intended to be accessible only to authorized users and service providers involved in delivering FestLink features.

Users should not upload payment card details, government identification, health information, or other highly sensitive information unless FestLink specifically requests it.

FestLink uses reasonable administrative, technical, and organizational safeguards designed to protect personal information, including row-level database access controls (so accounts can only access their own records), encrypted connections in transit, and private storage for sensitive documents such as insurance and permits.

No online service can guarantee absolute security. Users are responsible for protecting their passwords and notifying us if they believe their account has been compromised.

Information may be processed or stored by service providers located outside your province or outside Canada, where it may be subject to local laws.

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, resolve disputes, and meet legal obligations.

When information is no longer required, we may delete, anonymize, or securely dispose of it.

You may update much of your account and profile information through your dashboard.

You may contact us to request access to or correction of personal information, subject to applicable legal limitations.

You may request account deletion, although some information may be retained where required for legal, fraud-prevention, security, or legitimate business purposes.

You may unsubscribe from promotional emails using the unsubscribe link included in those messages.

FestLink uses cookies and similar technologies to keep users signed in, protect accounts, remember preferences, and understand how the service is used.

Disabling essential cookies may prevent login and other parts of the service from functioning correctly.

FestLink is intended for business users and is not directed to children under 13.

We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy as FestLink changes.

Material changes may be communicated through the website, dashboard, or email.

The effective date shown at the top indicates when this policy was last updated.