Venuvo
Sign in

DRAFT. This page is a skeleton. It needs review by a Brunei lawyer before anyone relies on it. It is not legal advice. Items marked OPEN are decisions that have not been made yet.

Privacy policy

DRAFT skeleton of the privacy policy. The list of data below is what the app stores today.

Who is responsible

  • OPEN: the legal name and address of the operator and a privacy contact.
  • OPEN: whether a data protection officer must be named. Brunei's personal data protection order needs to be checked for the in-force dates and the duties it sets.

What we store about you

  • Your account: email address, display name, phone number if you give one, and language setting. Passwords are held as hashes by the sign-in service, never by the app.
  • Your organization (if you have one): its name, type, district, description, the members and their roles.
  • Your requests and bookings: dates, guest numbers, notes, the quotes and their line items, and every message in the booking thread.
  • Payment records: the amounts, the reference code, the status, and any proof of payment file you upload.
  • Bank details that a seller enters so customers can pay it. They are private and shown only to the parties of a booking after a quote is accepted.
  • Documents a venue or vendor uploads for verification, and the review decisions with their notes.
  • Events, layouts and floor plans you create.
  • Your notification choices, and a queue of the emails the app sends you (who it is for, what kind, and the few details used in the text).
  • Support tickets you open and the replies.
  • An audit log of important actions, including admin actions on your data.
  • Short-lived counters that slow down abuse. They include the network address a request came from.

What is private

  • Bank details, phone numbers, payment proof files, quotes and line items, notes on a request, every thread message and the audit log are private.
  • Proof files and verification documents are opened only through a short-lived signed link, and only by people allowed to see them.
  • Platform admins can read a thread only with a recorded reason, and every admin read is logged.

What we never store

  • Card numbers or any other payment credential.
  • Passwords in readable form.
  • National ID or passport numbers.
  • Messages outside a booking. There is no general chat or inbox, and WhatsApp conversations stay outside the app.
  • Your searches on the home page: they live in the page address only until you send a request.
  • Customer money. The platform does not hold it in this version.

Cookies and browser storage

  • A sign-in session cookie that keeps you signed in.
  • Your light or dark theme choice, and whether you dismissed the cookie notice, saved in your browser.
  • No advertising or tracking cookies.

How long we keep it

  • OPEN: retention periods for each kind of data. To be decided and drafted with a lawyer.

Your rights and how to use them

  • To be drafted by a lawyer to match Brunei's personal data protection order: access, correction, withdrawal of consent, complaints, breach notice.
  • OPEN: the contact for privacy requests.