Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect information provided through Google Single Sign-On (SSO), including your name, email address, and profile photo. You may also provide additional information such as a display handle, career title, bio, phone number, and location.

Profile and Listing Content

If you are a place owner, we collect information about your spaces including photos, descriptions, pricing, amenities, availability schedules, and address. If you are an artist, we collect your professional profile information, service offerings, and portfolio content. All users may upload photos and other media to the platform.

Payment Information

Payment processing is handled by Stripe. When you make or receive payments, Stripe collects your payment card details, bank account information, and billing address. We do not directly store your full credit card numbers or bank account details on our servers. We do store transaction records including amounts, dates, and Stripe identifiers.

Messages

We store messages exchanged between users through our platform messaging system. Messages are transmitted via WebSocket connections and stored to maintain conversation history.

Usage and Analytics Data

With your consent, we collect analytics data through Firebase Analytics and HeyCatch, including pages visited, features used, device type, browser information, and general interaction patterns. This data helps us understand how the platform is used and where we can improve. Analytics data sent to HeyCatch is tied to an internal account identifier — we do not send your email address or name to HeyCatch. When you create an account, we also record a signup event with HeyCatch under that same internal identifier.

Location Data

We collect location information that you provide when listing a space (address) or searching for spaces. We may also use your general location (city or region) to show relevant results. We do not track your precise real-time location.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Display your profile, listings, and content to other users
• Match artists with available spaces and clients with artists
• Process payments between place owners, artists, and clients through Stripe
• Facilitate communication between users via our messaging system
• Send transactional notifications (booking confirmations, payment receipts, messages)
• Improve and optimize the platform based on usage patterns (with your consent for analytics)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy governing how it handles your data:

Firebase (Google)

We use Firebase for authentication (Google SSO), analytics (with your consent), and media storage (photos and uploads). Firebase is operated by Google and subject to Google's Privacy Policy.

HeyCatch

We use HeyCatch for product analytics (with your consent), including pages visited and general interaction patterns. We do not send your email address or name to HeyCatch — analytics is tied to an internal account identifier. See HeyCatch for its privacy policy.

Stripe

We use Stripe to process all payments on the platform, including rental payments, service bookings, and payouts to place owners and artists. Stripe collects and processes your payment information directly and is subject to Stripe's Privacy Policy.

Render

Our application is hosted on Render. Render may process server logs that include IP addresses and request metadata. See Render's Privacy Policy.

Twilio

We use Twilio to deliver SMS text messages to users who have opted in. Twilio processes your mobile number and message content solely to send and receive those messages on our behalf. See Twilio's Privacy Policy.

4. Cookies and Tracking

Essential Cookies

We use essential cookies and local storage for authentication sessions and basic platform functionality (such as remembering your login state and cookie consent preference). These are necessary for the platform to function and cannot be disabled.

Analytics Cookies

We use Firebase Analytics and HeyCatch cookies to understand how users interact with the platform. These are only activated after you give explicit consent through our cookie consent banner. You can decline analytics cookies without affecting your ability to use the platform. You may change your cookie preferences at any time using the "Cookie Preferences" option in the site footer.

Payment Cookies

Stripe may set cookies necessary for fraud prevention and payment processing. These are considered essential for completing transactions.

5. Data Sharing

We do not sell your personal information to third parties. We share your information only in the following circumstances:

• With other users: Your public profile, listings, and reviews are visible to other platform users. When you book a space or service, relevant contact and booking details are shared with the other party.
• With service providers: We share data with Firebase, Stripe, Render, and Twilio as described above, solely to operate the platform.
• Mobile numbers and SMS consent: We do not share your mobile number or your SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. See SMS Messaging below.
• For legal compliance: We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: If Gildra is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. SMS Messaging

If you provide your mobile number and opt in to SMS messages (for example, by checking the SMS consent box during booking checkout), we use that number to send you text messages about your appointments, such as confirmations, reminders, reschedules, and cancellations. Opting in is voluntary and is not a condition of booking or of using the platform.

• No third-party marketing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use cases exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
• Message frequency varies with your appointment activity. Message and data rates may apply.
• Opting out: Reply STOP to any message to unsubscribe at any time, or reply HELP for assistance. You will receive one final confirmation message after opting out.

The full program terms are in our Terms of Service.

7. Data Retention and Deletion

We retain your account information and content for as long as your account is active. Transaction records are retained for a minimum of seven years to comply with financial and tax regulations.

You may request deletion of your account and associated personal data at any time by contacting us at partners@gildra.xyz. Upon receiving a verified deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law (such as financial transaction records).

When your account is deleted, your public profile, listings, and user-generated content will be removed. Messages you sent to other users may be retained in those users' conversation histories but will no longer be associated with your identity.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: Request a machine-readable copy of your personal data.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to object: Object to processing of your data for certain purposes, including direct marketing.
• Right to withdraw consent: Withdraw consent for analytics cookies at any time through the Cookie Preferences option in the footer.

To exercise any of these rights, contact us at partners@gildra.xyz. We will respond within 30 days.

9. Your Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to know: Request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request deletion of your personal information, subject to certain exceptions.
• Right to opt-out of sale: We do not sell your personal information to third parties. As such, there is no sale to opt out of.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your rights, contact us at partners@gildra.xyz.

10. Data Security

We take reasonable measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), secure authentication through Firebase, and PCI-compliant payment processing through Stripe. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you become aware of any unauthorized access to your account, please contact us immediately at partners@gildra.xyz.

11. Children's Privacy

Gildra is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we discover that a user under 18 has created an account, we will promptly delete the account and associated data. If you believe a child under 18 has provided us with personal information, please contact us at partners@gildra.xyz.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the platform or by email. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise any of your data rights, contact us: