Privacy Policy — Stagire

1. Who We Are

Stagire ("we", "us", "our") is a mobile platform that connects stage crew professionals with event organisers. This Privacy Policy explains what personal data we collect when you use the Stagire app or website, how we use it, and the rights available to you.

For any privacy-related questions, contact us at info@stagire.com.

2. Data We Collect

When you create a Stagire account, we collect:

Full name — used to identify you to other users.
Email address — used to verify your account with a 6-digit code, to sign in, for password recovery, and for platform communications.
Password — stored as a secure one-way hash (Argon2); never stored or transmitted in plain text.

You can choose to add:

Phone number — optional. You add it in your profile and confirm it with a code sent by SMS. It can be used to sign in and is shown to users you work with. You can remove it at any time in the app.
Profile photo — optional. A photo you take or pick is resized to a small square JPEG, stored in our database, and shown to other users. The app asks for camera or photo library access only when you choose to set a photo.
Roles and qualifications — the roles you work and any qualifications you write for them, plus whether you use Stagire to organise events, work at events, or both.

When you use the app, we also collect:

Events and venues — events you create (name, description, times, venue, the roles you need and their requirements) and venues you add (name, address, coordinates).
Applications and offers — roles you apply for, the compensation you ask for or are offered, the qualifications you enter, selections, and any reason you give when withdrawing.
Messages — the messages you send to other users about an event, with timestamps and read status.
Ratings and reviews — star ratings and optional comments you give or receive.
Favourites — the people you mark as favourites.
Map region preferences — the centre point and radius (up to 250 km) of the area you choose to receive event notifications for.
Push notification token — a device-level token used to deliver push notifications. Stored only if you grant notification permission.
Device location — read on demand, only when you use the "locate me" button or when the app suggests the nearest venue while you create an event. Your coordinates are used for that request and are not stored on our servers.
Technical data — our servers process IP addresses to apply rate limits and protect against abuse, and record error details to fix problems.

3. How We Use Your Data

We use the data we collect to:

Create and manage your account, including identity verification via email and, if you add a phone number, SMS.
Display your profile information to other users you interact with on the platform.
Match crew members with relevant event opportunities based on their roles and saved map region.
Send push notifications about new roles in your saved map region that match the roles you offer (only if you have enabled notifications and saved a region).
Send transactional notifications such as new applicants, selections, declines, withdrawals, counter offers, and new messages.
Let organisers and crew message each other about an event.
Enable the ratings and reviews system so users can build a trusted reputation.
Keep the service secure, investigate misuse, and enforce our Terms & Conditions.

4. What We Share With Other Users

Stagire is a connection platform, so some of your information is visible to other signed-in users. This is intentional: the platform exists to facilitate real working relationships. You accept this visibility by using the platform.

If you apply for a role, the organiser can see your name, email address, phone number (if set), profile photo, the compensation and qualifications you entered, and the qualifications in your profile for that role.
If you organise an event, your name, email address, phone number (if set), and profile photo, plus the event details and venue, are visible to crew who offer a role you have open and to crew who have applied. Crew can see this before they apply.
Messages are visible only to the two people in the conversation.
Ratings and reviews you receive or give are visible to other signed-in users, together with the name and photo of the person who wrote them and the name of the event.

5. Third-Party Services

We use the following third-party services to operate the platform:

Expo Push Notifications — to deliver push notifications to your device. Notifications are delivered through Expo and the push services of Apple (iOS) and Google (Android).
SMSAPI — to send the SMS verification code when you add or change a phone number.
Email delivery provider — to send verification and password reset codes to your email address.
Google Maps Platform — to display maps in the app, to suggest addresses as you type a venue address (the text you type is sent to Google), and to turn venue addresses into map coordinates.
Sentry — for error monitoring and performance data. It is configured not to collect personal data by default. For a sample of sessions in which an error occurs, a screen replay may be recorded with all text, images, and graphics masked.

We do not sell, rent, or trade your personal data with any third party for marketing purposes.

6. Data Retention & Account Deletion

We retain your account data for as long as your account is active. You can delete your account yourself in the app (Profile, then the menu in the top corner, then Delete account) or by following the instructions on our account deletion page. Email requests are processed within 30 days.

When an account is deleted:

Your email address, phone number, name, profile photo, password, saved map region, and push notification token are removed or overwritten.
Your roles and qualifications, pending applications, favourites, and verification codes are deleted.
Events and venues you created, roles you were confirmed for, and ratings you gave or received remain, but your name and photo are no longer shown and appear as "N/A".
Messages you sent and the text of any rating comments you wrote are not erased automatically. They stay attached to the anonymised account, and the other participant can still read them. If you want specific messages or comments removed, email info@stagire.com.

An account cannot be deleted while you have an active event or are confirmed for an active event. Aggregated and anonymised data (such as platform usage statistics) may be retained indefinitely as it cannot be linked back to any individual.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data. Passwords are hashed using a strong one-way algorithm and are never stored in plain text. All data is transmitted over encrypted connections (HTTPS/TLS), and sign-in, sign-up, and recovery requests are rate limited.

No system is completely secure. We cannot guarantee absolute security and accept no liability for unauthorised access beyond what is required by applicable law.

8. Your Rights

Under applicable data protection law (including the EU General Data Protection Regulation — GDPR), you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data. You can edit your phone number and photo in the app.
Erasure — request deletion of your personal data ("right to be forgotten").
Restriction — ask us to limit how we process your data in certain circumstances.
Portability — request your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — for processing based on consent (e.g. push notifications), withdraw at any time without affecting prior lawful processing.

To exercise any of these rights, visit our account deletion page or contact us at info@stagire.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania.

9. Cookies & Website Analytics

The Stagire website does not use tracking or advertising cookies. The app does not use browser cookies. We do not employ any third-party analytics scripts on this website.

10. Children

Stagire is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us at info@stagire.com and we will remove the account promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy or how your data is handled, please contact us at info@stagire.com.