Privacy Policy

1. Who we are

Vowra is a product of SIA Potion Agency, registration number 40203488582, VAT number LV40203488582, registered at Ādmiņu iela 8-55, Rīga, LV-1009, Latvia (“we”, “us”, “our”).

2. What data we collect

We collect the following categories of personal data:

• Account data — name, email address, and password hash when you sign up.
• Business data — studio name, address, and payment details (processed by Stripe; we never store card numbers).
• Booking data — guest names, email addresses, ticket selections, and payment amounts.
• Usage data — pages visited, button clicks, browser type, IP address, and device information collected automatically.
• Communications — messages you send through the platform and support requests.

3. Why we collect it

• To provide, maintain, and improve the Vowra platform.
• To process bookings and payments on behalf of experience hosts.
• To send transactional emails (booking confirmations, receipts).
• To analyze usage and improve our product.
• To comply with legal obligations (tax records, fraud prevention).

4. Legal basis (GDPR)

We process personal data under the following legal bases:

• Contract performance — to provide our services and process bookings.
• Legitimate interest — to improve our product, prevent fraud, and ensure security.
• Legal obligation — to comply with tax, accounting, and regulatory requirements.
• Consent — for optional marketing communications (you can withdraw any time).

5. How we share data

We do not sell your personal data. We share it only with:

• Stripe — payment processing (as a data processor).
• Supabase — database hosting and authentication (EU region).
• Vercel — application hosting.
• Experience hosts — guest booking details are shared with the host who provides the experience.

6. Data retention

We retain account data for as long as your account is active. Booking records are kept for 7 years to comply with tax and accounting regulations. You can request deletion of your account and personal data at any time by contacting us.

7. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija).

8. Cookies

We use essential cookies required for authentication and session management. We use basic analytics to understand how visitors interact with our website. We do not use third-party advertising cookies.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. Payment card data is handled entirely by Stripe and never touches our servers.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The effective date at the top of this page indicates the latest revision.

11. Contact

For privacy-related questions or to exercise your rights, contact us at info@vowra.com.

SIA Potion Agency
Ādmiņu iela 8-55, Rīga, LV-1009, Latvia
Reg. No. 40203488582