Review draft · not approved for publication
Privacy notice
Review draft for the website and Closed Beta app. Based on inspected source code, with unconfirmed operational details identified explicitly.
1. Controller and contact
Studio3000 GmbH, Bachstrasse 33, 5034 Suhr, Switzerland is responsible for this website, account administration and its own communications. Send privacy requests to [email protected] or our postal address, subject Privacy VenueMaster3000.
2. Website and app
This notice distinguishes the public website www.venuemaster3000.com from the restricted app at venuemaster3000.com. Closed Beta access is by invitation. Visiting the website does not create an app account or a paid subscription.
3. Visiting the website
Requests require connection data such as IP address, time, requested URL, browser information and response status to deliver pages and detect attacks. The inspected website serves static HTML and hosts its font files itself. The appearance preference vm3k-website-theme stays in local browser storage until you clear it or the website data. The inspected website source includes no analytics, advertising or session-replay scripts. Cloudflare is visible in the public delivery path; service agreements, processing countries and log retention still need confirmation. The operator confirms hosting with Hetzner in Finland. Backup location and retention are being confirmed separately.
4. Accounts, invitations and communication
Depending on use, the app processes email address, name, profile information, user identifier, roles, organisation membership, invitations, authentication and session information. Supabase Auth handles sign-in and permissions. The app stores session information in the browser to keep you signed in. Recent searches and appearance preferences may also be stored locally. When you contact us, we use your contact details, message and attachments to respond. Contacting us alone does not subscribe you to advertising. Support and personal email addresses use Fastmail. The operator confirms selection of the EU region. Fastmail describes primary storage in Amsterdam and a replica, backups and logs in the US, so this is not exclusively EU processing.
5. Your organisation’s data
Events, contacts, staff, shifts, remuneration details, booking requests, messages, documents and audit records may contain personal data. The organisation normally determines the purposes and content of data managed in its tenant and acts as controller. Studio3000 processes that content on its behalf under an agreed data processing arrangement. Direct related rights requests to the organisation; we support its response. The applicable DPA and subprocessor list need confirmation before binding use.
6. App analytics and session recordings
The app code includes PostHog for pageviews, interactions and session recordings. Sign-in is designed to identify the user by ID and email; tenant ID and name can also be associated. The default destination eu.i.posthog.com is configurable. Input values and page text are intended to be masked. Sentry is integrated for errors, performance, console logs and session recordings, with default personal data enabled. The code specifies recording 10% of sessions and 100% on errors, with text masking and blocked media. The operator confirms PostHog and Sentry are active. The recording rates and masking describe the code; the deployed configuration still requires reconciliation. Consent controls, actual transmitted fields, recipients and retention need verification before approval. We do not claim anonymous analytics or an existing consent mechanism.
7. Optional connections and feedback
Enabled connections may exchange data with Google services, Microsoft, Dropbox, Notion, Todoist, Slack, ticket providers or an email service configured by the organisation. Transactional mail currently uses ZeptoMail with an EU endpoint. Resend exists as an alternative, but active use was not found in the inspected standard sending path. Other sign-in and fallback paths still require reconciliation. Resend use would involve US data storage. Quackback is configured for feedback linked to a user and tenant. Feedback and voluntarily attached images can contain additional personal information. Crikket capture is restricted to staging in source. Existing Stripe code does not establish active payment collection in the Closed Beta.
8. Frameworks and systems
The website uses Astro, TypeScript, i18next, Zod, locally served Geist fonts and ShadcnStudio/AdminCN design sources. Directus supplies editorial content only at build time; browsers do not request that content from the CMS. The app uses React, React Router, Vite, TypeScript, Tailwind CSS, shadcn/ui with Radix and Base UI, TanStack Query/Table, React Hook Form, Zod, i18next, Tiptap, Recharts and SVAR components. The backend includes self-hosted Supabase with PostgreSQL, Auth, Storage, Realtime and Deno Edge Functions, plus Inngest background workflows. We self-host GrowthBook and use it in the production and staging app to centrally control which features are available. The browser downloads feature definitions from gb-api.apps3k.com and evaluates them locally. Requests involve technically necessary connection data such as IP address and browser information. The inspected integration passes no names, email addresses or tenant content and includes no GrowthBook usage-tracking integration. Definitions retrieved on 25 October 2026 contain no personal targeting conditions or A/B-test assignments. The public website does not use GrowthBook. Libraries and self-hosted software do not become data recipients merely because they are used. Transfers depend on the actual configured services and connections.
9. Purposes and legal bases
We process data to provide and secure the service, manage accounts and permissions, support collaboration, respond to support requests and meet legal duties. Swiss data protection law applies. Where the GDPR applies, processing may rely, as appropriate, on contract or pre-contract steps (Article 6(1)(b)), legal obligations (c), legitimate interests in secure operation and responding to requests (f), or voluntary consent for optional purposes (a). The specific allocation and balancing assessment for analytics, recordings and employee data still need approval; this list does not substitute for valid consent.
10. Recipients and international transfers
Authorised people in the relevant organisation and contracted operations, communication and support providers receive access according to their tasks. The actual legal entities, countries, subprocessors and safeguards need confirmation in the service register. Transfers to countries without adequate protection require assessment of applicable safeguards or legal exceptions, such as applicable standard contractual clauses. An EU endpoint or Swiss registered office alone does not guarantee exclusive storage in that territory.
11. Retention and deletion
Data is retained as required for its purpose, contract and statutory duties, then deleted or anonymised unless further retention is lawful and necessary. Tenant content follows the agreed instructions. Accounts, invitations, documents, audit records, analytics, recordings and backups require different periods. Specific durations, recovery windows and deletion jobs still need reconciliation with operations. Immediate erasure from every backup is not promised.
12. Your rights and updates
Under applicable law you may request access, correction, deletion and, where applicable, data release or portability, restriction and objection. You may withdraw consent for the future. We may request proportionate evidence to identify the relevant records. You may contact the Swiss Federal Data Protection and Information Commissioner (www.edoeb.admin.ch) or an EU supervisory authority where competent. We update this notice for material changes. Review draft dated 25 October 2026.