Privacy Policy

1. Who we are

PartyOps is operated by SquareTwo, based in Dublin, Ireland ("we", "us", "our"). This policy explains how we handle personal data when you use PartyOps. You can contact us about privacy at hello@squaretwo.ie.

2. Our two roles

For your account and how you use PartyOps, we are the data controller.

For the data you enter into PartyOps about your own customers and bookings, you are the controller and we act as your processor, handling that data on your instructions in order to provide the service.

3. What we collect

Account data: your name, business name, email address, and password (which is stored in hashed form by our authentication provider, not in plain text).

Business content: the products, prices, bookings, customer records and invoices you create in the service.

Payment data: we use Stripe to process payments. Card details are handled by Stripe and are not stored on our systems. We store limited payment information such as amounts, status, and Stripe identifiers.

Technical data: log, usage, and device or browser information, used to operate and secure the service.

4. How and why we use data

We use personal data to provide and maintain the service and your account, to take payments, to send you service related emails, to keep the service secure and prevent abuse, and to meet our legal obligations.

Our legal bases under the GDPR are performance of our contract with you, our legitimate interests in running and securing the service, compliance with legal obligations, and, where required, your consent.

5. Sharing and sub-processors

We use a small number of trusted providers who process data on our behalf: Supabase (database, authentication and hosting), Stripe (payments), Resend (transactional email), and Vercel (application hosting).

We do not sell your personal data, and we only share it where needed to provide the service or where required by law.

6. International transfers

Some of our providers may process data outside the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses.

7. How long we keep data

We keep personal data for as long as your account is active and for as long as needed for legal, accounting, and security purposes. After that we delete or anonymise it.

8. Security

We use access controls, row level isolation between businesses, encryption in transit, and regular backups. No method of storage or transmission is completely secure, but we take reasonable steps to protect your data.

9. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent where we rely on it. To exercise these rights, contact hello@squaretwo.ie.

If your personal data was entered into PartyOps by an operator using the service, that operator is the controller of that data, so please contact them first.

You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie.

10. Cookies

We use only essential cookies needed to sign you in and keep your session active. We do not use advertising cookies.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a revised date.

12. Contact

Questions about this policy or your data can be sent to hello@squaretwo.ie.