Privacy Policy

Studio Spotlight .net Ltd.

Company ID (EIK): 201153652 | Address: v. Dunavtsi 6145, 7 Krairechen St., Bulgaria

Email: hello.relatedapp@gmail.com

Last updated: March 23, 2026

1. What Personal Data We Collect

• First and last name
• Email address (password stored as a hash by Firebase Auth)
• Event data (date, type, guest count, location, budget)
• Professional data for specialists (category, description, prices, portfolio photos)
• Chat messages, inquiries and offers
• Banking details for professionals (IBAN, bank name, account holder) — for payment purposes only
• Technical data (device type, OS version)

2. Purposes of Processing

• Providing the service connecting organizers and professionals
• Processing inquiries, offers and contracts
• Sending important notifications and alerts
• Email verification upon registration
• Improving and developing the application
• Processing payments through Stripe
• Compliance with legal obligations

3. Legal Basis (GDPR)

• Consent — upon registration and for marketing communications
• Contract performance — to provide the service
• Legitimate interest — for security and service improvement
• Legal obligation — when required by competent authorities

4. Third Parties and Data Processors

• Google Firebase — data storage and authentication. EU servers (europe-west1). Privacy Policy
• Stripe — payment processing. We do not store full card details. Privacy Policy
• Apple / Google — app distribution and in-app purchases

We do not sell or share personal data with advertisers or other third parties.

5. International Data Transfers

Data is primarily stored in the EU (Firebase europe-west1). If transfer outside the EU is necessary, it is carried out with appropriate safeguards under GDPR (Standard Contractual Clauses).

6. Data Retention

• Active accounts — for as long as the account is active
• Upon account deletion — data is erased within 30 days
• Financial data — up to 5 years under accounting legislation
• Backup copies — up to 90 days after deletion

7. Children's Privacy

RELATED is intended exclusively for users aged 18 and over. We do not knowingly collect data from persons under 18. If such an account is identified, it will be immediately terminated.

8. Your Rights under GDPR

• Access — obtain a copy of your data
• Rectification — correct inaccurate data
• Erasure — the "right to be forgotten"
• Restriction — limit processing of your data
• Portability — receive your data in machine-readable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — at any time, without affecting prior lawful processing

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

9. Payments and Financial Data

Payments are processed by Stripe. We do not store full payment card details. Professionals' IBAN data is stored solely for the purpose of calculating and displaying payments within the platform.

10. Data Security

We implement technical and organizational measures to protect personal data, including encryption in transit (HTTPS/TLS) and access controls. In the event of a data breach, we will notify affected users and the CPDP within the timeframe required by GDPR.

11. Cookies and Tracking

The application does not use cookies. Firebase may collect anonymous technical data for app stability and performance monitoring.

12. Changes to This Policy

We will notify users of material changes through the app. We recommend reviewing the current version periodically.