Privacy policy

We collect what we need to run a managed venue marketplace — nothing more. We don’t use third-party analytics or advertising trackers.

• Your name and phone number, from your profile.
• Your email address, used to sign you in.
• Booking details: the date, guest count, and the event message you send.
• Payment metadata: the amount, the status, and a transaction id. We never store card numbers.
• A device push token, if you turn on notifications, so we can send booking updates.
• Venue location, for the venues shown on the platform.
• Error logs, to find and fix problems and keep the service secure.

Your information is used to:

• Coordinate your booking and carry messages between you and the venue.
• Hold, capture, refund, and pay out payments.
• Send booking updates and notifications you’ve asked for.
• Verify venues and keep both sides of the marketplace safe.
• Diagnose errors and keep the platform running.

We rely on the lawful bases that fit each use: performing the booking you asked for, our legitimate interest in running a safe and working platform, meeting legal and accounting duties, and your consent where it applies (such as notifications).

Samia is a managed marketplace, so you and the venue don’t swap personal contact details. Everyone communicates through Samia.

We share data only with the services that make the platform run, and only what each one needs:

• WaafiPay, to process payments.
• Supabase, which provides our hosting and infrastructure.
• A web-push delivery service, to send the notifications you’ve turned on.

We never sell your personal data. Not to anyone, not for anything.

We keep your data while your account is active. You can ask us to delete it: we scrub your personal data, but we keep transaction records that the law and accounting rules require us to hold. Where you have bookings, we anonymise the account rather than hard-delete it — so the booking and payment record stays intact, but it’s no longer tied to you.

Your data is stored on secured infrastructure with access limited to the people who need it to run the service and help you. Payments are handled by WaafiPay, and card details never reach or rest on our systems.

• Access: ask for a copy of the personal data we hold about you.
• Correction: update your details in account settings, or ask us to fix them.
• Deletion: ask us to delete your data — we scrub personal data and keep only the transaction records the law requires, anonymising accounts that have bookings.

To make any of these requests, contact us and a person will handle it.

If we change this policy in a way that matters, we’ll tell you by email before the change takes effect. For any privacy question or request, contact us — a person, not a queue, reads it.