On your information.

Privacy Policy

Effective July 14, 2026.

This Privacy Policy ("Policy") explains how Tsuaf LLC d/b/a rsrvi ("Company," "we," "us," or "our") processes Personal Data that we collect from you (the "Subscriber" or "you").

1. Definitions

(a) "Personal Data" means any information relating to an identified or identifiable natural person (a "data subject") — including a name, identification number, location data, an online identifier, or factors specific to that person's identity.

(b) "Service(s)" means the rsrvi website, mobile apps, and venue-booking marketplace platform, and all related features and content, operated by Tsuaf LLC d/b/a rsrvi.

(c) "Subscriber" means any individual whose Personal Data the Company collects through the Services, including venue hosts, event organizers, event attendees, and individuals invited to events.

(d) "Terms" means the binding contract between the Company and the Subscriber that governs access to and use of the Services.

2. Data We Collect

The Subscriber directly provides the Company with most of the data we collect. We collect Personal Data from the following sources:

1. Directly from the Subscriber. Information you provide when creating an account, completing your profile, or using the Services — including name, email address, telephone number, and profile photo; for venue owners, venue listings (name, description, address and geographic location, and photos); and any content you submit, such as bookings, messages, and reviews.

2. Automatically, through use of the Services. Information collected automatically when you access the Services, including device identifiers and push-notification tokens, device platform (iOS or Android), IP address and approximate location/country, and strictly-necessary cookies (session and security tokens), together with server and activity logs.

3. From third-party service providers. Information received from providers acting on our behalf — including our identity provider, Auth0 (Okta), which supplies your authentication identifier, email, name, and profile picture; and our payments provider, Stripe, which supplies payment and payout status, identity-verification (KYC) status for hosts, and dispute/chargeback information.

4. From other users of the Services. Where an organizer invites a person to an event, we receive that invitee's email address (and, where applicable, RSVP and check-in information) from the inviting organizer.

We do not knowingly collect Personal Data from anyone under 18, and the Services are restricted to users 18 and older.

3. How We Use Personal Data

We process the Subscriber's Personal Data to:

• Provide and operate the Services — create and authenticate accounts, maintain profiles, and enable venue owners to list spaces and organizers to discover and book them;
• Facilitate bookings — managing booking requests, acceptances, cancellations, event invitations, RSVPs, and door check-in;
• Process payments, payouts, and refunds through Stripe, including calculating and collecting the platform fee and releasing funds to hosts;
• Verify identity and prevent fraud — including host identity verification (KYC) and dispute/chargeback handling through Stripe;
• Enable communication between users — host–organizer messaging and reviews tied to a booking;
• Send transactional communications — booking confirmations, receipts, payment and refund notices, reminders, and event invitations;
• Send marketing communications about the Services, where permitted, from which you may opt out at any time;
• Provide location-based features — searching for and displaying venues by proximity;
• Maintain the safety and integrity of the Services — content moderation, enforcing acceptable use, and blocking abusive or banned accounts;
• Comply with legal, tax, and accounting obligations — including financial record-keeping and tax reporting (such as a Stripe-issued Form 1099-K to hosts) and responding to lawful requests;
• Respond to privacy rights requests — fulfilling requests to access, export, correct, or delete personal data; and
• Secure the Services — maintaining audit logs, detecting security incidents, and protecting against misuse.

We collect Personal Data where we need it to provide the Services under our Terms, where processing is in our legitimate interests, where you have consented, or where we have a legal obligation. Where we rely on consent, you may withdraw it at any time.

4. How We Share Personal Data

We share Personal Data in the following instances:

• With other users, as necessary to provide the Services. When a booking is made, we share relevant information between the organizer and the venue owner (such as name, booking details, and messages) so the booking can be fulfilled; reviews and the reviewer's display name are shown to other users; and event details are shared with invited attendees.
• With service providers acting on our behalf ("subprocessors"), who process personal data only to provide services to us and under contractual confidentiality obligations:
  • Stripe — payment processing, payouts, host identity verification, fraud detection, and dispute handling;
  • NoFraud — payment fraud screening, to which we disclose your name, email address, phone number, billing address, IP address, and limited card details (last four digits, card brand, and the address- and security-code verification results returned by your bank) at the time of payment;
  • Auth0 (Okta) — account authentication and identity management;
  • Amazon Web Services / Cloudflare — cloud file storage for photos and attachments;
  • Amazon SES / Resend — delivery of transactional and marketing email;
  • Neon — managed database hosting;
  • Sentry — error monitoring and diagnostics (with personal data minimized); and
  • our application-hosting providers.
• To comply with law and protect rights. We may disclose personal data when required by law, regulation, legal process, or governmental request, or where necessary to enforce our Terms, investigate fraud or abuse, or protect the safety, rights, or property of the Company, its users, or the public.
• In connection with a business transaction. If we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy.
• With your direction or consent. We may share personal data in other ways with your consent or at your direction.

We use Stripe (including Stripe Radar) and NoFraud to help detect and prevent fraudulent transactions. When you pay, your payment is authorized and the amount is placed on hold before it is charged; if the transaction cannot be verified, the hold is released and no charge is made. We do not sell your personal data, and we do not share personal data for cross-context behavioral advertising.

5. Retention of Personal Data

We retain Personal Data for as long as needed to provide the Services and for legitimate business, legal, tax, and accounting purposes. In practice:

• Account data is retained until you delete your account; on deletion, we anonymize your Personal Data, though certain records are retained as described below.
• Financial and transaction records (bookings, payments, refunds, payouts) and audit logs are retained for approximately seven (7) years to meet tax and accounting obligations.
• Messages are retained for approximately 365 days.
• Payment webhook records are retained for approximately 90 days.
• Server logs are retained for approximately 30 days.

Where we no longer need Personal Data, we delete or aggregate it, or securely isolate it from further processing until deletion.

6. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your Personal Data, including under the California Consumer Privacy Act (CCPA/CPRA) and comparable laws in states such as Colorado, Connecticut, Utah, Virginia, Texas, and Florida:

• Right to know / access the Personal Data we hold about you and to receive a copy (you can export your data from your account settings, or by contacting us);
• Right to delete your Personal Data (you can delete your account from your settings), subject to records we must retain for legal, tax, or accounting reasons;
• Right to correct inaccurate Personal Data;
• Right to opt out of the sale or sharing of Personal Data and of targeted advertising — note that we do not sell or share Personal Data or use it for targeted advertising; and
• Right to non-discrimination for exercising these rights.

To exercise any of these rights, use the controls in your account settings or contact us at [email protected]. We will verify your request and respond within the time required by applicable law. Where required, we honor recognized opt-out preference signals such as Global Privacy Control (GPC); because we do not sell or share Personal Data, such signals do not change how we process strictly-necessary data.

7. Security of Personal Data

We use appropriate technical and organizational measures designed to provide a level of security appropriate to the risk of processing your Personal Data. No method of transmission or storage is completely secure; if you have concerns about the security of your Personal Data, please contact us.

8. Changes to this Policy

We keep this Policy under regular review and may update it at any time. If we make material changes, we will take reasonable steps to notify you.

9. Contact

If you have any questions or concerns about this Policy or wish to exercise your privacy rights, contact us at [email protected].