Terlo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

We collect information you provide directly to us, as well as information collected automatically when you use our Service. Personal Information You Provide: • Account Information: email address, password, full name, display name • Contact Information: phone number (optional) • Profile Information: user preferences and settings • Payment Information: processed securely through Stripe (we do not store credit card details) • Business Information: business name, description, contact details, verification documents • Event Information: event details, ticket types, pricing, refund policies Information Collected Automatically: • Location Data: geographic coordinates for businesses and events, used for proximity searches • Device Information: device type, operating system, unique device identifiers • Usage Data: pages visited, features used, time spent on pages • Error Reports: crash reports and performance data via Sentry • IP Address: for security and fraud prevention Information from Third Parties: • Public event information from external sources for event aggregation • Stripe account information for payment processing • Social media profile information (if you connect accounts)

We use the information we collect to: • Provide, maintain, and improve our Service • Process transactions and send transaction notifications • Send you weekly event recommendations and updates • Respond to your comments, questions, and support requests • Communicate about products, services, offers, and events • Monitor and analyze trends, usage, and activities • Detect, investigate, and prevent fraudulent transactions • Personalize and improve your experience • Send administrative information and legal notices • Fulfill any other purpose for which you provide information • Verify business ownership for business accounts • Generate aggregated analytics for event organizers

We may share your information in the following situations: With Your Consent: We may share your information with your explicit consent. Service Providers: We share information with third-party vendors who perform services for us: • Stripe - Payment processing and merchant services • AWS (Amazon Web Services) - Email delivery via SES • Cloudflare R2 - Media storage and delivery • Supabase - Database and authentication services • Sentry - Error tracking and performance monitoring • OpenAI - Content generation for admin tools (business data only) • MapTiler - Mapping and tile services Event Organizers: When you purchase tickets, we share your email and name with the event organizer for ticket delivery and event communications. Public Information: Business profiles and event listings marked as public are visible to all users. Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: • Encryption of data in transit using HTTPS • Secure password hashing • Regular security audits and updates • Limited access to personal information by employees • Secure third-party payment processing through Stripe • Session-based authentication with secure tokens However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law: • Account information: Retained while your account is active • Transaction records: Retained for 7 years for tax and legal compliance • Event data: Retained for 2 years after event date • Email logs: Retained for 90 days • Error logs: Retained for 30 days You may request deletion of your account and associated data at any time, subject to legal retention requirements.

You have the following rights regarding your personal information: Access and Portability: You can request a copy of your personal information in a structured, machine-readable format. Correction: You can update or correct inaccurate information through your account settings or by contacting us. Deletion: You can request deletion of your personal information, subject to certain exceptions. Marketing Communications: You can opt-out of marketing emails by clicking the unsubscribe link or contacting us. Location Services: You can disable location services in your device settings, though this may limit certain features. Cookies: You can manage cookie preferences through your browser settings.

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country. By using our Service, you consent to the transfer of information to countries outside your country of residence.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including: • The right to know what personal information we collect, use, disclose, and sell • The right to request deletion of your personal information • The right to opt-out of the sale of personal information (we do not sell personal information) • The right to non-discrimination for exercising your privacy rights To exercise these rights, please contact us at [email protected].

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide notice via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: [email protected]