Privacy policy
Last updated 13 November 2026 · Contact
What we collect
Account: email address, sign-in timestamps. Profile (you choose what to fill): name, job, company, short bio, what you look for and offer, language. Activity: invitation requests, attendance (check-in at the door), likes, claimed offers, points, introduction and connection requests, reports. Business pages: the details you publish. Photos taken at events. Technical: cookies strictly needed to keep you signed in and remember your language. We do not use advertising trackers.
Why we use it
To run the community: manage your account, review invitation requests, issue passes and check you in, show your profile to other signed-in members, apply offers, calculate points, prevent abuse, and contact you about events you joined. Legal bases under the UAE Personal Data Protection Law (Federal Decree-Law 45/2021): performance of our service, your consent (profile details, photos), and our legitimate interest in keeping the community safe.
Who can see what
Visitors who are not signed in see events and business pages only. Member profiles and guest lists are visible to signed-in members only. Your email is never shown to other members. Business owners see how many offers were claimed, not who claimed them in public.
Service providers
Supabase (database and authentication, hosted on AWS, Mumbai region), Vercel (website hosting), Resend (email delivery), Apple (push notifications for the iOS app). They process data on our instructions only. Data may be stored outside the UAE with appropriate safeguards.
How long we keep it
As long as your account exists. When you delete your account, your data is erased immediately from the live database; backups are overwritten within 7 days. Event photos remain in the gallery unless you ask us to remove those showing you.
Your rights
You can access, correct, export or delete your data, withdraw consent and object to processing. Most of this is available in your profile; otherwise email marketing@bonsoirdubai.com. We answer within 30 days.
Security
Passwordless sign-in, encrypted connections (HTTPS), row-level access rules in the database so each member only reads what they are allowed to, and server-side checks on every action.
Children
The Service is for adults (18+). We do not knowingly collect data from minors.