Privacy Policy – PocketWell

Effective Date: December 28, 2025

PocketWell ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services (collectively, the "Service"). By using PocketWell, you agree to the practices outlined in this Policy.

Applicable Privacy Laws: Depending on your location, we comply with:

Australia: Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs)
United Kingdom: UK GDPR and Data Protection Act 2018
European Union: General Data Protection Regulation (GDPR)
United States: Applicable state privacy laws including CCPA/CPRA (California), VCDPA (Virginia), and other state regulations
Canada: Personal Information Protection and Electronic Documents Act (PIPEDA)
New Zealand: Privacy Act 2020

1. What Information We Collect

We collect the following types of personal information from you, either directly or via third-party services:

1.1 Information You Provide to Us

When registering: Name, email address, password, country/region
When creating an event: Event name, description, images, location, and any custom fields you enter
When setting up payouts: Information required by Stripe Connect for identity verification and payout processing (see section 1.3)
When contacting us: Email correspondence or support messages

1.2 Information We Collect Automatically

Device and browser type
IP address and general location data
Usage data (pages visited, buttons clicked, features used)
Referral source and timestamp of activity
Cookie and session identifiers

1.3 Payment and Financial Data

Payment Processing: Payment card details are not stored or processed by PocketWell. All payment processing is handled securely via Stripe, our third-party payment processor.

Payout Processing via Stripe Connect: To receive payouts as an event host, you are required to create or connect a Stripe Connect account. Through this process:

Stripe Connect handles all identity verification and Know Your Customer (KYC) requirements
You provide information directly to Stripe, including:
- Full legal name and date of birth
- Government-issued identification (varies by country: SSN/EIN for US, ABN/TFN for Australia, NI Number for UK, SIN for Canada, IRD Number for New Zealand)
- Bank account details for receiving payouts
- Business information (if applicable)
- Address and contact information
This information is collected, stored, and processed by Stripe in accordance with Stripe's Privacy Policy and Stripe Connect Account Agreement
PocketWell receives limited information from Stripe necessary to facilitate your use of the Service, such as verification status and payout account status
We do not store or have access to your full payment card details, bank account numbers, or identification documents

For more information about how Stripe handles your data:

1.4 Analytics

We use PostHog, hosted in the US Cloud, to monitor usage patterns and improve platform performance. While usage data is de-identified wherever possible, it may include technical identifiers like IP addresses or browser fingerprints.

2. How We Use Your Information

We use your information to:

Create and manage user accounts
Enable you to host and contribute to events
Facilitate payment processing and payouts via Stripe Connect
Verify host eligibility and prevent fraud
Monitor site performance and improve features
Respond to user support requests
Send important service updates and notifications
Enforce our Terms & Conditions and protect against misuse or fraud
Comply with legal obligations and regulatory requirements

We do not use your personal information for unsolicited marketing or advertising purposes.

Where applicable, we process your data based on:

Contract performance: To provide our services
Legitimate interests: To improve our services and prevent fraud
Legal obligation: To comply with applicable laws
Consent: Where specifically obtained for certain processing activities

We do not sell or rent your personal data to third parties. We may share your information only in the following cases:

With Stripe Connect:

To process payments, facilitate payouts, and verify host identities
Stripe acts as both a service provider and data controller for the information you provide during account setup
See Stripe's Privacy Policy for details on their data practices

With Service Providers:

PostHog: For performance analytics (US-based)
Cloud hosting providers (e.g., Supabase): For secure data storage
Customer support tools: To respond to inquiries
All service providers are bound by strict confidentiality agreements

To Comply with Legal Obligations: We may disclose personal information if legally required, including:

Court orders or subpoenas
Regulatory investigations
Law enforcement requests
Compliance with financial regulations (e.g., AML/KYC requirements)

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4. International Data Transfers

PocketWell operates globally and serves users in multiple countries. Your information may be transferred to, stored, and processed in jurisdictions outside your country of residence, including:

United States: Where Stripe, PostHog, and other service providers are located
Other countries: Where our infrastructure or service providers operate

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by relevant authorities
Adequacy decisions by regulatory bodies
Service provider agreements requiring equivalent data protection

For EU/UK users: Your data may be transferred outside the European Economic Area (EEA) or UK only with appropriate safeguards in place as required by GDPR/UK GDPR.

For Australian users: International transfers are made in accordance with APP 8 (Cross-border disclosure of personal information).

5. How We Protect Your Data

We take reasonable steps to secure your data using:

HTTPS encryption for data in transit
Secure authentication protocols (password hashing, multi-factor authentication where available)
Data isolation through role-based access control
Regular security assessments and updates
Limited retention of sensitive logs
Stripe's industry-leading security for payment and payout data

While no method of transmission or storage is 100% secure, we implement industry best practices to protect your information.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

All Users:

Access: Request a copy of the personal data we hold about you
Correction: Request corrections to inaccurate or outdated information
Deletion: Request deletion of your account and associated data (subject to legal retention requirements)

Data Portability: Receive your data in a structured, machine-readable format
Restrict Processing: Request we limit how we use your data
Object to Processing: Object to processing based on legitimate interests
Withdraw Consent: Where processing is based on consent
Opt-out of Sale/Sharing: We do not sell personal information

Additional Rights (California Residents - CCPA/CPRA):

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt-out of sale of personal information (we do not sell data)
Right to non-discrimination for exercising privacy rights

To exercise your rights, contact us at:

Email: support@pocketwellapp.com
Contact Form: pocketwellapp.com/contact

We will respond to your request within the timeframes required by applicable law (typically 30 days).

Note: Some information may be retained if required by law or necessary for legitimate business purposes (e.g., fraud prevention, financial record-keeping).

7. Data Retention

We retain your personal information for as long as necessary to:

Provide our services
Comply with legal obligations (e.g., tax, financial regulations, AML/KYC requirements)
Resolve disputes and enforce agreements
Maintain business records

Specific retention periods:

Account information: Retained while your account is active and for up to 7 years after closure (for financial and legal compliance)
Payment/payout records: Retained for 7 years as required by financial regulations in most jurisdictions
Stripe Connect data: Governed by Stripe's retention policies (see Stripe Privacy Policy)
Analytics data: Typically retained for 2 years or as necessary for performance monitoring

If you delete your account, most of your personal data will be removed or anonymized within 30 days, except where we are required to retain it by law.

8. Cookies and Tracking Technologies

PocketWell uses cookies and similar technologies to:

Maintain your logged-in session
Remember your preferences
Measure site usage with analytics
Improve site performance and user experience

Types of cookies we use:

Essential cookies: Required for the Service to function
Analytics cookies: Help us understand how users interact with our Service
Performance cookies: Improve loading times and functionality

You can manage cookie preferences in your browser settings. Note that blocking essential cookies may impact site functionality.

For more information, see our Cookie Policy.

9. Children's Privacy

Our services are intended for users aged 18 and over (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

If you believe a child has submitted personal data to us, please contact us immediately at support@pocketwellapp.com, and we will take steps to delete that information.

10. Third-Party Links

Our Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings.

Material changes will be communicated via:

Email notification to registered users
Prominent notice on our website
Updated "Effective Date" at the top of this Policy

Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

12. Contact Us & Data Protection Officers

For any questions, concerns, or complaints regarding your personal information or this Privacy Policy, please contact:

Email: support@pocketwellapp.com
Contact Form: www.pocketwellapp.com/contact
Website: www.pocketwellapp.com

13. Stripe Connect Specific Information

Since PocketWell uses Stripe Connect to facilitate payouts to event hosts, the following additional terms apply:

Stripe as Data Controller

For information you provide directly to Stripe during the Connect account setup (identity verification, bank details), Stripe acts as the data controller. This means Stripe determines how that data is processed and protected.

PocketWell receives limited information from Stripe necessary to provide the Service (e.g., account verification status, payout eligibility)
We do not receive or store your full bank account details, identification documents, or sensitive financial information
This information exchange is governed by the Stripe Connect platform agreement

Your Rights Regarding Stripe Data

To exercise rights regarding information held by Stripe (access, correction, deletion), please contact:

Stripe Support: https://support.stripe.com/contact
Stripe Privacy: privacy@stripe.com

For more information, review:

Last Updated: December 28, 2025

Privacy Policy

Our privacy policy and how we use your data