Privacy policy

1. Who is responsible

The Table of Strangers operator identified on your invoice or payment receipt is the data fiduciary responsible for the processing described here. Privacy questions and grievances may be sent to hello@tableofstrangers.com.

2. Data we collect

• Account and contact: phone number, email, name, login records, and communication preferences.
• Eligibility and profile: date of birth, gender, city, relationship or marital status, table categories, dietary preferences, alcohol preference, and new-to-city information.
• Matching: quiz answers and scores, registrations, selection history, attendance, feedback, and safety or conduct restrictions.
• Identity verification: government-ID type, image, review status, and limited verification records. Do not submit another person's ID.
• Transactions: payment status, amount, invoice details, refunds, and provider references. We do not intend to store complete card or bank credentials.
• Events and support: event communications, necessary host notes, cancellation requests, complaints, incident reports, and correspondence.
• Technical: IP address, device and browser information, security logs, cookie or similar identifiers, and basic usage events.

3. Why we use it

• To authenticate accounts, verify identity, determine eligibility, build tables, and operate registrations.
• To take payment, issue invoices and refunds, prevent fraud, and maintain accounting records.
• To send transactional messages about selection, deadlines, venues, changes, safety, and support.
• To host events, accommodate stated dietary needs, enforce conduct rules, investigate reports, and protect users and staff.
• To maintain, secure, troubleshoot, analyse, and improve the service.
• To comply with law, lawful requests, tax and accounting duties, and establish or defend legal claims.
• To send optional marketing where you consent or law otherwise permits. You may opt out at any time.

4. Consent and notices

Where processing is based on consent, we aim to provide a clear notice describing the data and purpose before collection. You may withdraw consent as easily as you gave it, but withdrawal does not affect earlier lawful processing and may prevent features that require that data. Certain processing may be permitted or required without consent under applicable law.

5. Matching and decisions

Quiz scores and profile information help organise potential pairings, but matching also involves operational rules and human review. Registration does not guarantee selection. We do not use matching data to determine credit, employment, insurance, housing, or similarly significant matters.

6. Who receives data

• Other guests: no profile, contact details, or identity document before the event. You decide what to disclose in person.
• Hosts: the minimum information required for admission, seating, dietary coordination, safety, and support.
• Venues: head count, table logistics, dietary totals or requirements, and information reasonably needed to provide the event.
• Processors: providers supporting cloud hosting, secure storage, communications, analytics, support, identity review, payments, and fraud prevention.
• Authorities and advisers: where required by law, necessary for an emergency or protection of rights and safety, or needed for professional advice and legal claims.
• Business transactions: a prospective or completed purchaser, investor, successor, or restructuring participant, subject to confidentiality and law.

We do not sell personal data or share it with unrelated parties for their independent advertising.

7. Identity documents

ID images are intended to be stored in restricted systems and available only to authorised reviewers for verification and related fraud or safety review. They are not shown to guests or venues. We aim to delete the image 30 days after your last event, or 30 days after review if you never attend, unless longer retention is reasonably necessary for an active investigation, dispute, fraud prevention, legal hold, or legal obligation. Limited verification outcomes may be retained separately.

8. Retention

We retain personal data only as long as reasonably necessary for the stated purposes, account operation, safety, fraud prevention, dispute handling, and legal, tax, or accounting obligations. Periods vary by data type. When data is no longer required, we delete, anonymise, or securely isolate it. Backups may persist for a limited cycle before deletion.

9. Security

We use reasonable administrative, technical, and organisational safeguards appropriate to the data. No internet, storage, or verification system is completely secure. You are responsible for controlling access to your phone and reporting suspected misuse promptly. If a personal-data breach requires notice, we will provide the notice and information required by applicable law.

10. International processing

Some providers may process data outside your state or outside India. Where cross-border processing occurs, we take steps intended to comply with applicable transfer restrictions and contractual or security requirements. We will not transfer data to a jurisdiction prohibited by the Government of India.

11. Your choices and rights

• Access a summary of personal data and processing information available through your account or by contacting us.
• Correct, complete, or update inaccurate personal data.
• Request erasure of data no longer necessary, subject to lawful retention grounds.
• Withdraw consent and opt out of optional marketing without losing transactional event messages.
• Raise a grievance and, where applicable, nominate another person to exercise rights in the event of death or incapacity.
• Complain to the Data Protection Board of India or another competent authority when that remedy is available.

We may need to verify identity before completing a request. Rights are subject to exceptions and procedures under applicable law.

12. Your duties

Provide authentic information, do not impersonate another person, do not suppress material information when exercising rights, and do not submit frivolous or fraudulent grievances. Tell us when information changes.

13. Children

The service is only for adults aged 18 or older. We do not knowingly offer accounts or events to children. If you believe a child provided personal data, contact us so we can investigate and delete it where appropriate.

14. Cookies and analytics

We may use essential storage for authentication, security, preferences, and operation, and limited analytics to understand performance and usage. Where consent is required for non-essential technologies, we will request it. Browser controls may block storage, but essential features may stop working.

15. Changes and grievances

We may update this policy when practices or legal obligations change. Material changes will be highlighted or communicated where required. For access, correction, deletion, consent withdrawal, or a grievance, email hello@tableofstrangers.com. Include enough information to identify your account and request. We will acknowledge and respond within the period required by applicable law.