Privacy Policy

1. Information We Collect

Information you provide directly

• Account information: Your email address, used to log in via magic link.
• Performer profile: If you create a performer profile, we collect your name, drag name, biography, Instagram handle, photos, and any other information you choose to include.
• Booking enquiries: When you submit a booking request, we collect your name, email address, phone number, and details about your event (date, city, venue, type, budget, and message).
• Tips: When you send a tip to a performer, payment is processed by Stripe. We do not store your card details. We retain a record of the transaction (amount, performer, timestamp) for accounting purposes.

Information collected automatically

• Analytics: We use PostHog to understand how people use Fruity — which pages are visited, which features are used, and how users navigate the platform. PostHog may set cookies and collect your IP address. This requires your consent, which we request via our cookie banner.
• Technical data: Standard server logs may include your IP address, browser type, operating system, and referring URL. We use this data for security, debugging, and performance monitoring.

2. Legal Bases for Processing (GDPR)

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Performance of a contract: Processing your email to provide login, processing booking enquiries and tip transactions.
• Legitimate interests: Fraud prevention, platform security, and improving the service. We always balance our interests against your rights.
• Consent: Analytics tracking via PostHog. You may withdraw consent at any time by adjusting your cookie preferences or contacting us.
• Legal obligation: Retaining transaction records for tax and accounting purposes as required by Dutch law.

3. How We Use Your Information

• To create and maintain your account
• To display your performer profile on the platform
• To forward booking enquiries to the relevant performer or our team
• To process tips via Stripe
• To send transactional emails (booking confirmations, magic link logins)
• To improve the platform using anonymised analytics
• To detect and prevent fraud and abuse
• To comply with legal obligations

We do not sell your personal data. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Sharing of Your Information

We share your data only where necessary to provide the service or comply with the law:

• Stripe: Payment processing for tips. See stripe.com/privacy .
• PostHog: Analytics platform, hosted in the EU. See posthog.com/privacy .
• Bytescale: Image hosting and CDN for performer and event photos. See bytescale.com/privacy .
• Google Maps Platform: Used for venue search and autocomplete. See policies.google.com/privacy .
• Fly.io: Our hosting provider. Servers are located in Amsterdam, the Netherlands. See fly.io/legal/privacy-policy .
• Legal disclosure: We may disclose your data if required by law, court order, or to protect the rights and safety of Fruity, our users, or the public.

5. Data Retention

• Account data: Retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
• Booking enquiries: Retained for 2 years for business and accountability purposes.
• Transaction records (tips): Retained for 7 years as required by Dutch tax law.
• Analytics data: Subject to PostHog's retention settings. We do not retain analytics data beyond what is needed to understand platform usage.

6. Cookies

• Session cookies: Strictly necessary for login and security. No consent required.
• Analytics cookies (PostHog): Used to understand platform usage. Requires your consent. You can accept or decline via our cookie banner when it is shown. If you want to change this choice later, please clear your browser's site data for Fruity or contact us at will@getfruity.io.

7. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Ask us to delete your personal data ("right to be forgotten"), subject to legal obligations.
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Ask us to restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at will@getfruity.io . We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (AP) .

8. Data Security

We take reasonable measures to protect your personal data from unauthorised access, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and secure hosting. No method of transmission over the internet is completely secure, but we continuously work to improve our security practices.

9. Children

Fruity is not directed to children under 16. If you become aware that a child under 16 has provided us with personal data without parental consent, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or by a notice on the platform. The "last updated" date at the top of this page reflects the most recent revision. Continued use of Fruity after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or your personal data:
Will Tan — will@getfruity.io