Privacy Notice

Pavel-Petru Verșan is the data controller for personal data processed through StageFlow. This notice explains what we collect, why, and your rights.

What we collect and why

• Account data (name, email, phone, password): to create your account and sign you in — contract.
• Organization and team data (roles, rosters, availability, events): to provide the service — contract.
• Support messages: to help you — contract and legitimate interests.
• Usage data, device information and IP address: for security, fraud prevention and improving StageFlow — legitimate interests.
• Product emails (invites, sign-in codes): to run the service — contract. Marketing only with your consent.

Who we share it with

• Service providers who host and run StageFlow (hosting, database, email delivery, AI features).
• Paddle, our Merchant of Record, for sales, subscription management, payments, tax and invoicing.
• Professional advisers such as legal and accounting.
• Authorities where the law requires it.

International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.

Retention

We keep data while your account is active and as needed for legal obligations, then delete or anonymise it.

Your rights

You can ask to access, correct, erase, restrict or port your data, object to processing, and withdraw consent at any time. You may also complain to your data protection authority. We respond within one month. Contact us through the app.

Security

We use encryption, access controls and per-organization data separation to protect your data.

Cookies

We only use essential storage needed to keep you signed in and remember your organization. We don't use advertising cookies.