Privacy

Who we are

[Operator legal name], [registered address], [company number] is the data controller for RizzBay. Contact: hello@rizzbay.com.

What we collect and why

We collect what the forms ask for and what your browser tells us. Nothing is bought in from elsewhere.

• Waitlist: email, handle, niches, platforms, city, profile link, who referred you. Used to run the waitlist and to decide which cities open first. Lawful basis: our legitimate interest in running the service you asked to join.
• Vendor application: trading name, your name, email, phone, website, categories, city, message. Used to assess and contact you about a founding place. Lawful basis: steps before a contract.
• Subscription: handled by Stripe. We store your Stripe customer and subscription identifiers and the subscription status, never card numbers. Lawful basis: performing the contract.
• Accounts and listings (when the marketplace opens): profile details, listings, enquiries and messages, reveals of contact details. Lawful basis: performing the contract and our legitimate interest in keeping the platform safe.
• Analytics: pages viewed, actions taken, device and rough location, collected by PostHog with session replay on a sample of visits. Lawful basis: consent, through the cookie banner. Decline it and the site still works.
• Advertising: if you arrive from an ad, the campaign details in the link. We may share a hashed version of your email with Meta to measure whether ads work. Lawful basis: consent.

Who sees it

Owners see creators' handle, profile link, city and message when a creator enquires. Creators see owners' contact details only after revealing them, and each reveal is logged.

Our processors: Supabase (database and storage, London), Stripe (payments), Resend (email), PostHog (analytics), Lovable (hosting), Sentry (error reports). Each is bound by its own data processing terms. We do not sell personal data.

Where it lives and for how long

Data is stored in the UK and EU, with some processors in the US under standard contractual clauses. Waitlist and application data is kept until you ask us to delete it or the account it became is closed. Verification documents are deleted 90 days after a decision; we keep only the decision. Webhook and analytics logs are kept for 12 months.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing hello@rizzbay.com. We answer within a month. Deleting an account anonymises your enquiries and reviews rather than removing them, so that owners' review histories stay honest. You can complain to the Information Commissioner's Office (ico.org.uk) if you think we have got it wrong.

Cookies

Essential cookies keep you signed in and the site working. Analytics cookies (PostHog) are set only if you accept them in the banner, and you can change your mind at any time from the footer link.