Privacy Policy

Information We Collect

We may collect the following types of information when you use our Services:

• Personal Information: This may include your name, email address, phone number, mailing address, and payment information when you voluntarily provide it through forms, bookings, or communication with us.
• Automatically Collected Information: We automatically collect certain information when you visit our Site. This includes IP addresses, browser types, operating systems, referring URLs, page views, and timestamps.
• Cookies and Tracking Technologies: We may use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and provide personalized content.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services
• Process and manage bookings or transactions
• Improve, personalize, and expand our Services
• Communicate with you, including sending transactional emails or updates
• Prevent fraud and enhance security
• Comply with legal obligations

Sharing of Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as payment processors and data analytics services.
• Legal Compliance: We may disclose your information if required by law or in response to a subpoena or other legal request.
• Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

Data Retention

We will retain your personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations, resolve disputes, and enforce our agreements.

Security

We take the security of your personal information seriously and apply layered protections across our platform:

• Account access: Passwords are stored as one-way cryptographic hashes, they cannot be read or recovered, even by us. Two-factor verification is required for any sensitive action, including changes to payment information, password, or account email. Every login is recorded with device, IP address, and timestamp.
• Banking information: Bank account numbers, routing numbers, IBANs, and SWIFT codes are encrypted at rest in our database using AES-256, the same standard used by banks and major payment processors. The encryption key is stored separately from the database, so a database leak alone would not expose those numbers. Inside the PRIMA dashboard, and in every administrative or accounting export, only the last four digits are ever displayed.
• Card payments: PRIMA never sees or stores full credit card numbers. Card data is sent directly from your browser to our payment processor, Stripe, which is PCI-DSS Level 1 certified. We retain only the card brand and last four digits, used solely for receipts and dispute handling.
• API access: Every API token is scoped to the specific permissions and venues granted to it. All endpoints are rate-limited to prevent abuse. Webhook deliveries are signed and verified cryptographically.
• Monitoring and audit: Every change to bookings, profiles, and payout details is recorded in an immutable audit log. Errors are tracked through Sentry, configured to strip personal information before reports are stored.

Despite these safeguards, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, such as:

• Accessing or updating your information
• Requesting the deletion of your information
• Objecting to or restricting the processing of your data
• Withdrawing your consent at any time

To exercise your rights, please contact us at the information provided below.

Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. Please review their privacy policies before providing them with your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

prima@primavip.co