Privacy Policy

Last updated: March 2026

1. Introduction

Onyx / Slate ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our event management platform and related services (the "Service"). This policy applies to all users of the Service, including event planners (account holders) and their clients (portal users).

2. Information We Collect

We collect the following categories of information:

Account Information: When you register, we collect your name, email address, password, and business name. For clients invited to the portal, we collect names, email addresses, and phone numbers as provided by the event planner.

Event Data: Information you enter into the Service including event details, milestones, vendor information, guest lists, mood board content, invoices, and messages between planners and clients.

Payment Information: Subscription payments are processed by Stripe. We do not store credit card numbers on our servers. We retain Stripe customer and subscription identifiers for billing management.

Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, device information, and IP address.

3. How We Use Your Information

We use your information to: provide, maintain, and improve the Service; process subscriptions and payments; send transactional communications related to your account; provide customer support; enforce our Terms of Service; detect and prevent fraud or abuse; and comply with legal obligations. We do not sell your personal information to third parties.

4. Data Sharing

We share your information only in the following circumstances: with Stripe for payment processing; with Supabase for data hosting and authentication; with service providers who assist in operating the Service, subject to confidentiality obligations; when required by law, regulation, or legal process; and to protect the rights, property, or safety of Onyx / Slate, our users, or the public. Event planners control what client data is entered into the Service and shared through client portals.

5. Data Storage and Security

Your data is stored securely using Supabase, which provides encrypted storage and transmission. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we retain your data for 30 days to allow for reactivation, after which it may be permanently deleted. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing of your data; request portability of your data; and withdraw consent where processing is based on consent. To exercise these rights, contact us at support@onyxandslate.com.

8. Cookies and Tracking

The Service uses essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use third-party advertising cookies or tracking pixels. We may use analytics tools to understand how the Service is used, and any data collected is aggregated and anonymized.

9. Third-Party Services

The Service integrates with third-party services including Stripe (payment processing) and Supabase (data hosting and authentication). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at support@onyxandslate.com.