Privacy Policy — Avenue Mine

1. Information we collect

When you create an account or submit an RFP, we collect the contact details you give us — name, email, phone — plus details about your event. We also collect basic technical information about your device and how you interact with the site (cookies, IP address, page views) so the platform works and we can improve it.

2. How we use your information

We use the information you provide to operate Avenue Mine — to send your RFP to vendors, deliver proposals back to you, send transactional emails (booking confirmations, password resets), and provide support. We don't sell your personal data.

3. Who we share data with

Vendors you choose to send an RFP to receive the event details and contact information you provided. We use third-party processors (Stripe for payments, our email provider for transactional mail, AWS for hosting and file storage) to operate the service — each under their own confidentiality terms.

4. Cookies and tracking

We use essential cookies for sign-in and CSRF protection, and analytics cookies to understand product usage. You can opt out of analytics in your browser settings.

5. Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or request deletion of your account at any time. Use our contact form and we'll respond within 30 days.

6. Data security

Data is stored on AWS infrastructure. Passwords are hashed with bcrypt. All traffic is encrypted in transit (HTTPS). Payment details are tokenized by Stripe and never touch our servers. Access to production data is limited to a small number of authorized employees on a need-to-know basis.

7. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email and in-product before they take effect.

8. Contact

Questions about this policy? Get in touch via our contact form.