Privacy Policy

What we collect

Your account. Your name, email address, password (stored only as a secure hash by our authentication provider), whether you are a customer or a hall owner, and optionally your phone number and city.

Booking requests (customers). When you request a booking we store the hall, event date and sitting, occasion, number of guests, the menu, decoration and other options you chose, the price estimate, any special requests you write, and the contact name and phone number for the booking.

Listings (hall owners). Your venue's name, area, address, map location or Google Maps link, halls, capacities, sitting times, prices, menus, inclusions, decoration packages, and the photos and videos you upload. Your calendar blocks and your responses to booking requests.

Saved venues and reviews. The venues you save, and any review you write.

Device permissions. The app asks only when you use the feature: location (while using the app) to pin your venue on the map; camera, photo library and microphone to add photos and videos to a listing. We do not track your location in the background.

We do not use advertising, analytics or tracking tools, we do not sell your data, and we do not process payments in the app.

How we use it

• To create and secure your account and keep you signed in.
• To show venues, prices and availability, and to send your booking request to the hall.
• To let hall owners manage listings, calendars and requests.
• To answer you when you contact us.

Who can see your information

• The hall you send a request to sees your booking details, contact name and phone number, so they can confirm and contact you.
• Everyone can see published listings: venue details, photos and videos, prices, the venue's location, and the owner's phone number so customers can call or message the hall. Your review and first name may appear on a venue page.
• Our service providers, who store data on our behalf: Supabase (accounts and database), Hetzner Online (photo and video storage, servers in Finland) and Vercel (website hosting). Your data may therefore be stored outside Pakistan.
• Authorities, if the law requires it.

When you tap Call, WhatsApp or a map link, your phone opens that app, which handles your data under its own policy.

Deleting your account

You can delete your account at any time: in the app under Profile → Account settings → Delete account, or on the website on your profile page. Step-by-step instructions are on our Delete your account page. When you do:

• you are signed out and the account can no longer sign in;
• your pending booking requests are cancelled, and any venues you listed are taken down;
• your reviews are no longer shown.

Records of past bookings are kept, because the other party relies on them for their own records. While you have an upcoming confirmed booking, the account can't be deleted until the event is over.

To have your remaining personal data erased as well, email saiyanrahiz@gmail.com from the address on your account.

Your rights

You can view and correct your name, phone and city in Account settings at any time. You can ask us for a copy of your data or for its erasure by emailing saiyanrahiz@gmail.com.

Security and retention

Data is sent over encrypted connections, and access to it is restricted per account by our database rules. We keep account and booking data while your account is active, and booking records afterwards for the other party's records.

Children

Shamiana is meant for adults arranging events. It is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date at the top, and tell you in the app for significant changes.