Privacy Policy
Last updated: 2026-04-11
Gololu respects your privacy. This page explains what data we collect, how we use it, and the choices you have. We follow GDPR and CCPA where they apply.
What we collect
- Account data: name, email, profile photo, city.
- Onboarding data: interests, personality quiz answers.
- Host application data: skill, phone number, venue address, and a legal ID document (passport / national ID / residence card).
- Usage data: sessions booked, reviews left, messages sent.
- Payment data: handled by Stripe — we never see your card details.
How we use it
- To match you with sessions and hosts.
- To process payments and handle refunds.
- To verify host identities (your legal document is only visible to our trust & safety team and is stored with authenticated access).
- To send service-related notifications (bookings, reminders, reviews).
- To keep the platform safe and prevent abuse.
Who we share it with
We never sell your personal data. We share data only with the processors we need to run the platform: Stripe for payments, Cloudinary for media storage, Resend for transactional email, Twilio for SMS (if you opt into host phone verification), and our hosting provider. Each processor has their own privacy terms which we vet before integrating.
Your rights
You can export or delete your data at any time from your account settings. You can also ask us to correct inaccurate information or restrict certain processing. For requests or questions, head to the contact page.
Data retention
We keep active account data for as long as your account is open. After you delete your account we permanently remove personal data within 30 days, except where we're legally required to retain it (e.g. payment records for tax purposes).
This page is a placeholder pending full legal review. Please contact your legal counsel before relying on it in production.