TeaCat (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
1. What We Collect
- Phone number (required when you set up your profile)
- Email address (for account creation, OTP verification, and ticket delivery)
- Payment information (processed by Stripe — we never store card details)
- Gender (required when you set up your profile). Hosts only see an aggregated audience breakdown for their events, never your individual answer. It is never sold.
- Date of birth (optional)
- Name and email address, if you buy a ticket at the door as a guest (no account needed)
- Event activity (events viewed, tickets purchased, events saved)
- Instagram handle (optional — you may add one so other users can find your Instagram; it is never required to use TeaCat, and you can remove it at any time from your profile settings)
- Crew information (crew names you create and your crew memberships). Crews are visible to other TeaCat users by default — this is intentional, to help people discover crews, find events, and go out together. Any crew can be set to private in its settings, hiding it from non-members.
- Event recommendations and reactions you post within a crew (visible to the other members of that crew)
- Saved payment methods (optional — if you choose to save a card at checkout, it is stored by Stripe against a Stripe customer record linked to your account; TeaCat never stores or sees card details)
- Event page view counts (a small cookie stops the same browser being counted twice) and, if you turn on push notifications, a push-notification identifier tied to your account
1a. What Other Users Can See
- Your public profile (name, username, photo, bio, neighborhood, and Instagram handle if you added one) is visible to other TeaCat users
- If you hold a ticket to an event, your name and photo may appear in that event's attendee list, visible to other users viewing the event page
- The host of an event you hold a ticket to can see your name and email address, which is needed to check you in at the door. Hosts can also see the name and email address of people on their event's waitlist. Hosts cannot see this information for anyone who hasn't bought a ticket or joined that waitlist.
- Crew names and membership are visible to other users by default, to encourage discovery and connection; a crew can be made private in its settings, which hides it from anyone who isn't a member. Event recommendations and reactions inside a crew are always visible to that crew's members.
2. How We Use Your Data
- To create and manage your account
- To deliver tickets and QR codes via email
- To send OTP verification codes via email
- To personalize your event discovery feed
- To send platform notifications (with your permission) — we email you for ticket confirmations and essential account notifications, and may send push notifications for things directly relevant to you (like a crew request). No marketing emails or notifications without explicit opt-in
- To improve the TeaCat platform
3. Who We Share It With
We do not sell your data. We share data only with the following service providers necessary to operate the platform:
- Stripe — payment processing
- Resend — transactional email delivery
- Supabase — authentication and secure database storage
- Vercel — platform hosting
- OneSignal — push notifications
- QR Server (api.qrserver.com) — draws the QR code image for your ticket, so your ticket code is sent to it whenever a QR code is displayed or emailed
- OpenStreetMap (Nominatim) — address search when a host types a venue address
- jsDelivr — delivers the code library used by the ticket scanner
4. Data Storage and Security
Your data is stored securely via Supabase with row-level security enabled. All payment data is handled by Stripe and never stored on TeaCat's servers.
We use cookies to keep you signed in and to count event page views once per browser. We do not use advertising cookies or third-party analytics trackers.
5. Your Rights
You may request deletion of your account and associated data at any time by contacting us at teacatnyc@gmail.com. We will process deletion requests within 30 days. Payment and ticket records are kept as needed for refunds, disputes and taxes, with your name and contact details removed; our payment provider, Stripe, also keeps its own payment records as the law requires.
- You can leave any crew at any time from the Crew section of your profile
- If you delete your account, your crew memberships are removed and the event recommendations and reactions you posted are deleted along with your account
- You can remove your Instagram handle, hide yourself from attendee lists, or set your profile to private at any time without deleting your account
- Saved payment methods can be removed at checkout or by contacting us; they are stored by Stripe, not by TeaCat
6. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top when it changes. Continued use of TeaCat after changes are posted constitutes acceptance of the updated policy.