GildLuxe Privacy Policy
1. Who we are and what this policy covers
GildLuxe is software that caterers and event businesses use to run their events: inquiries, proposals, agreements, invoices, payments, vendor coordination and a public business page. GildLuxe is operated by Chima Obinna, doing business as GildLuxe, of 9718 Oxbridge Way, Bowie, Maryland 20721, United States ("GildLuxe", "we", "us").
This policy explains what information we collect, how we use and share it, and the choices you have. It applies to:
- Businesses that use GildLuxe, and the people who work for them (owners, managers and staff).
- Clients and guests of those businesses, whose details a business stores in GildLuxe or who contact a business through its GildLuxe inquiry form, business page or QR code.
- Vendors a business works with through GildLuxe, such as florists, DJs and decorators.
- Visitors to gildluxe.com and to business pages hosted by GildLuxe.
It covers gildluxe.com, app.gildluxe.com and business pages hosted by GildLuxe, such as app.gildluxe.com/p/yourbusiness or yourbusiness.gildluxe.com. It does not cover a business's own website or social media, or the separate services of Stripe and BoldSign, which have their own privacy policies.
Effective date: October 19, 2026.
2. Information we collect
From businesses and their staff
- Account details: name, email address, phone number and role (owner, manager, sales or kitchen).
- Business details: business name, address, logo, tax and service charge settings, packages and prices, and the content of the business's public page, including photos the business uploads.
- Payment account details: when a business connects Stripe to receive payments, Stripe collects the business's identity and bank details directly. GildLuxe receives only the account ID and its status, never bank or card numbers.
About clients and guests (entered by a business, or sent through an inquiry form)
- Contact details: names, email addresses and phone numbers.
- Event details: date, venue, guest count, budget, the type of celebration and its traditions, menus and timelines.
- Dietary needs and allergies, when a business records them for an event.
- Agreements and signatures: signed agreements are sent and signed through BoldSign. GildLuxe stores the signed copy and its status.
- Payment records: amounts, dates and receipts. Card payments are handled by Stripe, and GildLuxe never sees or stores full card numbers.
- How the inquiry reached the business, such as Instagram, the business's page, or a QR code at an event.
About vendors (entered by a business, or by the vendor in GildLuxe)
- Contact details, services, rates, agreements, payout records, and documents the vendor provides, such as insurance certificates or licenses.
Collected automatically
- Technical information: IP address, browser and device type, and pages visited, used to keep the service secure, prevent abuse and fix problems.
- QR code scans: the number of times a code is scanned and when. We do not record who scanned it.
- Error reports: when something breaks, a report is sent to our error monitoring service. We remove names, email addresses, phone numbers and other personal details from these reports before they are sent.
3. How we use information
We use information to:
- Provide GildLuxe: run each business's inquiries, events, proposals, agreements, invoices, payments, vendor payouts and business page.
- Send service emails, such as sign-in links, inquiry confirmations, invoices, receipts, agreement requests and reminders. These are part of the service, not marketing.
- Keep GildLuxe secure: verify sign-ins, limit abuse such as automated form submissions, and investigate problems.
- Fix and improve GildLuxe, using error reports and usage patterns.
- Improve GildLuxe's tradition library using combined, de-identified patterns across events (for example, which checklist steps are commonly added for a ceremony). This never includes names or contact details, and no business's information is shown to another business.
- Meet legal obligations, such as tax and accounting records, and respond to lawful requests.
We do not sell personal information, and we do not use it for advertising. We do not share one business's clients, prices or event details with any other business.
4. When GildLuxe acts on a business's behalf
When you send an inquiry to a caterer through GildLuxe, sign a caterer's agreement, or pay a caterer's invoice, your relationship is with that business. The business decides what information to collect about you and how to use it. GildLuxe stores and processes that information for the business, as its service provider, and only to provide GildLuxe to it.
This means:
- The business's own privacy practices apply to how it uses your information. If you have questions about that, or want to access, correct or delete your information, contact the business first.
- We will help. If you contact us about information a business holds in GildLuxe, we will pass your request to that business, and help it respond.
- Payments go to the business, not to GildLuxe. Card payments are processed by Stripe into the business's own Stripe account. Refunds and disputes are handled by the business.
Businesses agree, in GildLuxe's terms of service, to have the right to give us the information they enter, and to use GildLuxe lawfully.
5. How we share information
We share information only with the service providers that run parts of GildLuxe for us, and only what each one needs:
| Provider | What it does for GildLuxe | Information involved |
|---|---|---|
| Supabase | Database, file storage and sign-in (United States) | All information stored in GildLuxe |
| Vercel | Hosts the website and app | Technical information about visits |
| Stripe | Processes card payments and verifies businesses that receive payments | Payment details, client name and email on payments, business identity and bank details |
| BoldSign | Sends agreements for electronic signature | Names, email addresses and the agreement's content |
| Resend | Sends GildLuxe's emails | Recipients' names and email addresses, and the email's content |
| Sentry | Error monitoring | Technical details of errors, with personal details removed |
| Uptime monitor | Checks the site is online | No personal information |
We may also share information:
- Within a business's own team: staff see information according to their role, which the business's owner controls.
- With a client or vendor of the business: for example, a client sees their own proposal, invoices and agreement in their client portal.
- When required by law: to comply with a valid legal process, or to protect the rights, safety or property of GildLuxe, our users or others.
- In a business transfer: if GildLuxe is sold or merged, information may transfer to the new owner, who must continue to protect it under this policy.
6. Cookies and similar technologies
GildLuxe uses only the cookies it needs to work:
- Sign-in cookies keep you signed in to the app and protect your account.
- Security cookies help prevent abuse, such as automated form submissions.
We do not use advertising or cross-site tracking cookies, and we do not let advertisers place cookies through GildLuxe. If we measure page speed or visits, we do so in aggregate, without cookies that identify you.
You can block or delete cookies in your browser, but you will not be able to sign in to GildLuxe without them.
7. How long we keep information
| Information | How long we keep it |
|---|---|
| A business's account and its events, clients, vendors and agreements | While the business uses GildLuxe, then 90 days after it closes its account, so it can ask us for a copy. Then deleted, except as below. |
| Payment, invoice and refund records | 7 years, for tax and accounting obligations |
| Signed agreements | As long as the business keeps them, and at most 7 years after the event, unless the business deletes them sooner |
| Inquiries that never became bookings | Until the business deletes them, or the business's account closes |
| Error reports | Up to 90 days, at our error monitoring provider |
| Database backups | Up to 7 days, then overwritten |
A business can delete individual clients, inquiries and photos at any time. Information that is removed from GildLuxe may remain in backups until they are overwritten.
8. How we protect information
- Each business's information is kept separate. The database itself checks every request, so one business can never see another's clients, prices or events.
- Access follows roles. Within a business, what staff can see and change depends on the role the owner gives them.
- Encryption. Information is encrypted when it travels between your device and GildLuxe, and when it is stored.
- No card numbers. Card details go straight to Stripe and never reach GildLuxe's servers.
- Limited support access. GildLuxe staff can view a business's information to help with a problem only when the business's owner grants support access, for a limited time.
- Sign-in without passwords. Users sign in with a one-time link or code sent by email, so there is no GildLuxe password to steal.
No system is perfectly secure. If a security incident affects your information, we will notify you and the business involved as required by law.
9. Your choices and rights
You can ask us to:
- Access the personal information we hold about you, and receive a copy.
- Correct information that is wrong.
- Delete your information, unless we must keep it for a legal reason, such as tax records.
If the information is held for a business (see section 4), we will pass your request to that business and help it respond. Business owners can ask us at support@gildluxe.com for a copy of their business's information, or for it to be deleted.
To make a request, email support@gildluxe.com. We may need to confirm your identity before acting on it. We will respond within 45 days and will not treat you differently for making a request.
Depending on where you live, you may have further rights under state privacy laws, such as Maryland's Online Data Privacy Act. We will honor those rights where they apply.
Emails: GildLuxe's emails are about your account, events, agreements and payments, so they cannot be switched off while the service is in use. If GildLuxe ever sends marketing email, every message will include a way to unsubscribe.
10. Children, changes and contact
Children. GildLuxe is for businesses and adults planning events. It is not directed to children, and we do not knowingly collect personal information from children under 13. A business may record a child's name or dietary needs as part of an event, such as a naming ceremony or a guest list. If you believe a child's information was collected in error, contact us and we will help the business remove it.
Changes. We may update this policy as GildLuxe changes. We will post the new version here with a new effective date, and tell businesses by email before a significant change takes effect.
Contact. Questions or requests about privacy:
- Email: support@gildluxe.com
- Mail: Chima Obinna, doing business as GildLuxe, 9718 Oxbridge Way, Bowie, Maryland 20721, United States
Version 2026-10-19, effective October 19, 2026.