Privacy Policy

Vulpio is operated by Vulpio Pty Ltd, registered in New South Wales, Australia. This Privacy Policy explains how we collect, use, store, and share personal information when you use the Vulpio platform.

Account information. Name, email address, business name, role, and authentication details.

Business content. Menus, pricing, venues, event configurations, team members, branding assets, and other content you choose to upload.

Event & guest data. Event details, guest names, contact details, RSVP responses, dietary preferences, allergy information, and any allergy-confirmation photos uploaded by guests.

Payment & billing data. Billing contact, subscription tier, and transaction metadata (full card numbers are handled by our payment processor and never stored by Vulpio).

Technical data. IP address, device, browser type, pages visited, and timestamps captured automatically for security, analytics, and audit purposes (including legal-acceptance audit records).

We use personal data to:

• Provide, operate, and improve the Vulpio platform;
• Authenticate users and secure accounts;
• Process payments and manage subscriptions;
• Deliver transactional communications (e.g. invoices, password resets, RSVP confirmations);
• Comply with legal obligations and respond to lawful requests;
• Detect, investigate, and prevent fraudulent or abusive activity.

We do not sell your personal information.

When a business invites guests to an event, the inviting business is the controller of the guest data they collect. Vulpio processes that data on the business's behalf, in line with this Policy.

Allergy and dietary information is treated as sensitive personal information and is only displayed to authorised operational staff associated with the relevant event.

We use trusted third-party services to deliver parts of the platform, including:

• Payment processing (e.g. Stripe);
• Accounting integrations (e.g. Xero) when enabled by the business;
• Cloud hosting and storage providers;
• Email delivery services for transactional messages.

These providers handle data on our behalf under written agreements requiring appropriate security and confidentiality. Each provider is responsible for the data they process under their own privacy policies.

We use cookies and similar technologies to:

• Keep you signed in;
• Remember preferences (e.g. selected venue, theme);
• Measure performance and improve the platform.

You can control cookies through your browser settings. Blocking essential cookies may impact your ability to use the platform.

We apply reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, and audit logging.

Data may be stored or processed in jurisdictions outside Australia, including by our cloud and integration providers. Where we transfer data internationally, we take steps to ensure it remains protected to a comparable standard.

We retain personal data for as long as needed to provide the platform, meet legal and accounting obligations, and resolve disputes. Business accounts and associated event data may be retained for a reasonable period after cancellation before permanent deletion. Audit records of legal-acceptance events are retained for compliance purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or out-of-date information;
• Request deletion of your personal information (subject to legal retention obligations);
• Object to or restrict certain processing;
• Withdraw consent for optional communications;
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data-protection authority.

Vulpio is intended for use by businesses and adult event guests. We do not knowingly collect information from children under 16 except where an adult guest provides it (e.g. a child meal request) for the purpose of attending an event.

We may update this Privacy Policy from time to time. When changes are material, we will increase the version number and may ask you to re-accept the updated policy.

For privacy questions, data-access requests, or complaints, please contact us at [contact email].