Privacy policy

Amourette is operated by InboxPilot, Inc., the organization responsible for the personal-data processing described in this policy.

Contact address: 2810 N Church St PMB 16104, Wilmington, Delaware 19802-4447, USA.

For questions about your personal data or to exercise your rights, email privacy@getamourette.com.

This policy explains how we use personal data when you visit Amourette, create a profile, participate in a venue night or contact our team. It applies wherever Amourette is offered, including Europe and the United States. Amourette is intended for adults aged 18 and over.

You provide your profile information, including your first name, photographs, optional biography, gender, dating preferences and confirmation that you are at least 18. We also receive the messages and in-app reports you choose to send, and record how those reports are handled. We receive emails you address to the team, including questions and requests about your personal data. We collect your email address if you subscribe to future-night announcements or email us.

Using the service generates account and session identifiers, records of joining and leaving a venue night, activity timestamps, likes, mutual matches and conversation activity. Participation records indicate the venue you attended. Other participants may supply information about you through a report or a message.

Technical services also process information needed to deliver and protect the app, such as request paths, IP addresses, browser information and error records. Your browser stores session information, settings and draft data as explained below.

Your profile and an adult confirmation are required to enter the participant experience. Matching requires your agreement to the covered use of gender and dating preferences. A biography and subscription to announcements are optional.

When you reserve, InboxPilot, Inc. records your first name, email, language, event, accepted conditions and their acceptance time, reservation status, attendance verification and payment/refund references. Your name and email are required to manage the reservation. A waiting-list signup records your email, language, event and signup order, without a payment or marketing subscription.

Where the GDPR applies, we process the information necessary to provide the reservation service and related transactional emails to perform our contract with you, or take steps at your request before a contract. Abuse prevention uses our legitimate interest in protecting the service. Financial recordkeeping may also involve legal obligations. We do not collect dating preferences in this form or activate public venue presence.

Stripe hosts payment entry and processes payments and refunds. Amourette does not collect raw card details. Stripe processes information under the roles applicable to its payment services, including its own regulatory and fraud-prevention responsibilities. Resend delivers the reservation-access and recovery emails; authorized organizers access the details needed for support and event operations. Our hosting and international-processing information also applies to this data.

Your browser keeps your encrypted reservation access and submitted booking details in session storage, with an access lifetime of seven days. You can recover access by email. A management link is separate from the arrival QR. Technical abuse limits use hashed identifiers rather than storing raw IP addresses in the reservation rate-limit table.

Reservation, payment, refund and attendance records are not automatically deleted at the end of an evening: they remain available for booking support, refunds, disputes and applicable recordkeeping obligations. Access-email delivery records are removed 30 days after sending or definitive abandonment; unexpired access links are preserved until expiry. Ask us about retention or exercise your rights using the contact below.

Contact privacy@getamourette.com for access, correction, deletion and other applicable data rights. Cancelling a reservation and requesting deletion of personal data are separate requests; some records may need to be retained to meet legal obligations or handle a dispute.

We use your data to:

• Maintain your profile and session and show who is participating in a venue night.
• Suggest mutually compatible participants, process discreet likes and open a conversation when two participants like each other.
• Deliver messages between matched participants during the venue night.
• Review photos manually, handle reports and blocks, and protect participants.
• Evaluate and improve venue nights through statistics on entry into the app, participation, likes, matches and conversations started.
• Send future-night announcements when you choose to subscribe.
• Respond to requests, maintain the service and meet applicable legal obligations.

These statistics help us identify entry difficulties, understand whether matches are spread across participants and measure whether matches lead to an exchange. They do not establish whether participants actually spoke in person. After the night, the retained report contains grouped statistics without participant names or account identifiers, message content or individual interaction histories.

Legal grounds where the GDPR applies: use of gender and dating preferences for matching is subject to your explicit consent. Future-night marketing emails use a separate consent. We process the data necessary to manage your account and session and enable your participation in venue nights to perform our service contract with you.

We use the data necessary to handle reports and protect participants and the service on the basis of our legitimate interests in preventing abuse and maintaining a safe service, while respecting the rights of those involved. We use the information necessary to handle your data-rights requests and comply with our legal obligations under data-protection law.

We measure QR scans, profile completions and room entries to understand how the entry flow works and improve it, on the basis of our legitimate interest in evaluating and improving the service, using only the data necessary for that purpose. Other purposes require their own legal grounds.

We use your gender and the genders you want to meet to suggest compatible people at the same venue night and show your profile to them. These choices can reveal information about your sexual orientation.

You can withdraw your matching consent from your profile at any time. Withdrawal immediately removes your profile from discovery and stops new likes and matches. We stop the covered use of your preferences and initiate their deletion.

Your existing conversations remain available until the definitive end of the venue night, subject to the usual presence, blocking and moderation rules. They are then deleted. Withdrawing this consent is different from deleting your account.

Withdrawal does not change the lawfulness of processing carried out before it. It does not subscribe or unsubscribe you from future-night emails.

Other eligible participants see the profile information presented by the app, such as your first name, photo and biography, within the venue experience. Likes are discreet: a conversation opens only when interest is mutual. Messages are made available to the matched participants.

Authorized team members handle service operation, photo moderation, reports and privacy requests, with access to the data needed for these tasks.

We use service providers for these functions:

Supabase

Database, account sessions, photo storage and real-time communication.

Vercel

Website and server-side application hosting.

Resend

Delivery of application emails and configured outgoing team replies.

Cloudflare

Domain/DNS services and routing emails sent to our contact addresses.

Founder mailbox providers

Receipt and handling of forwarded contact emails; current routing uses Gmail.

Our production database and photo storage are hosted in the European Union.

Our operator is based in the United States. Our team and service providers may process or access data outside your country of residence, including outside the European Economic Area. EU hosting does not mean all processing stays in the EU.

For information about international processing and applicable transfer safeguards, contact privacy@getamourette.com.

We keep your data for the periods described below.

Profile and preferences

Your profile and current photos are kept between nights, then deleted after two years without voluntary app use, or earlier on a valid deletion request. Withdrawing matching consent initiates earlier deletion of your gender and dating preferences.

Night interactions

Likes, matches and conversations are deleted at the definitive end of the night, not during a temporary pause. Arrival, departure and participation records are separate and are not automatically erased at night end.

Replaced or rejected photos

Unused replaced or refused files are removed once more than 24 hours have passed since upload. A rejected displayed photo is hidden immediately and becomes eligible for deletion after an approved replacement or 30 days without correction, subject to that upload-age rule.

Safety and privacy requests

Reports, resolved photo-moderation cases and privacy requests are kept during handling and for 12 months after closure or resolution. Unnecessary supporting documents are removed sooner. Blocks remain while both profiles exist.

Consent evidence

Minimal evidence of matching consent is kept while relied on, then for 12 months after withdrawal or account deletion, whichever happens first. Giving consent again does not extend older evidence’s retention.

Emails

Subscriptions last three years from subscription or the last explicit confirmation. Unsubscribe stops announcements immediately; a minimal do-not-send record is kept for three years after unsubscribe. Ordinary activity does not renew these periods or resubscribe you. Delivery records are kept for 30 days after successful sending or definitive abandonment.

Device storage and backups

Unfinished profile drafts expire 24 hours after your last deliberate edit and are cleared when the app next runs, or earlier on successful profile creation. Technical logs and backups have separate retention periods; deletion from the active app does not immediately erase every backup or copies downloaded by another participant.

Necessary case or consent evidence may be kept longer for an ongoing dispute. Reports may also be retained for a specific continuing need that is documented and reviewed, such as an active sanction. Deleted photos are not retained as moderation history.

After a night, we retain grouped statistics without participant names, account identifiers, message content or individual interaction histories.

The app uses browser storage for the session, interface preferences, profile drafts and functions such as conversation read state. This can keep some information on your device between visits. Clearing browser data can remove local drafts and interrupt access to your existing session.

You can resume an unfinished profile draft for 24 hours after your last deliberate edit. This covers the first name, biography, photo and form progress saved on your device; gender and dating preferences are not saved in the persistent draft. Drafts are cleared when your profile is successfully created.

An expired draft is no longer restored and is cleared when the app next runs its cleanup, including when you reopen it. The app cannot clear device storage while it is closed. Simply reopening or reloading does not extend the draft’s lifetime.

Your rights depend on the law applicable to you and the processing involved. You can contact us to request access to your data, correction or deletion, or to ask about other rights available to you.

European Economic Area: where the GDPR applies, you may also request restriction of processing, object to processing based on legitimate interests and request portability when its conditions apply. You can withdraw consent without affecting the lawfulness of earlier processing. We respond without undue delay and normally within one month; if a permitted extension is necessary, we explain why within that month. The extension can be up to two additional months.

United States: depending on your state of residence and whether its privacy laws apply to our processing, you may have rights to access, correct, delete or obtain a copy of your personal data, as well as other protections under those laws. We handle requests within the applicable legal deadlines and explain any permitted extension or limits.

For requests and questions about the rights applicable to you, contact privacy@getamourette.com.

We may ask for proportionate information if we have reasonable doubts about your identity. We do not require identity documents systematically. We protect other people’s rights when responding and explain any applicable limits to a request.

You can stop future-night announcements using the unsubscribe link in our emails. This does not itself delete your profile. Matching consent can be withdrawn from your profile as described above.

You may lodge a complaint with the competent privacy or data protection authority under applicable law. You do not need to contact us first.

We use access controls, authenticated sessions, restricted photo storage and encrypted network connections to protect personal data. We investigate incidents and take appropriate measures to contain their effects. When required, we notify the competent authority and affected people.

We will date updates to this policy and inform you of material changes through an appropriate channel. Where a change requires consent, we will ask for it separately. Continued use alone does not constitute consent to a new purpose.