Privacy Policy

1. Who operates BlockStay

BlockStay is an early-stage project operated by Rohan Malik. It is not currently offered by a separately registered company. In this policy, “BlockStay”, “we” and “us” refer to that operator. You can reach us about privacy at rohan.malik2005@gmail.com.

2. Information we collect

Wedding planner interest list

When you join the interest list at /planners/join, we collect:

• your full name and work email address (required);
• your wedding planning company, city or primary market, and roughly how many weddings you plan per year (all optional);
• whether you ticked the optional box to receive product news, and when;
• a record of the consent wording you saw (its version), the date and time you joined, the page you joined from, and your subscription status.

To limit spam and abuse, we also briefly record a one-way, keyed hash of your IP address together with the email address submitted. We don't store the IP address itself in our database, and these records are deleted automatically after about 24 hours.

Accounts and the demo app

If you create an account, we collect your name, email address, password and role (host, wedding planner or traveler). Passwords are handled by our authentication provider and stored in hashed form; we can't see them. We also store what you enter while using the app, such as wedding names, dates and cities, hotel block details (hotel, room counts, rates and cutoff dates) and simulated reservations. No payment information is collected: reservations on this site are simulated.

Book a Block waitlist

If you join the separate Book a Block waitlist, we collect your email address, wedding city and, optionally, your wedding date and expected number of rooms. That waitlist is kept separately from the planner interest list.

Information collected automatically

Like most websites, our hosting and database providers automatically log technical information when you visit, such as your IP address, browser type, the pages requested and the time of the request. These logs are used to operate, secure and debug the service.

3. How we use information

• to add you to the interest list and contact you about your registration, early-access opportunities and requests for feedback on the product;
• to send occasional product news and updates, only if you ticked the optional box;
• to operate accounts and the demo app, including showing your dashboards and simulated reservations;
• to protect the site against spam, abuse and security incidents; and
• to comply with legal obligations and enforce our Terms of Service.

We don't sell personal information, and we don't share it for targeted (cross-context behavioural) advertising.

4. How the interest list works

Joining the interest list is free, doesn't create an account, and doesn't guarantee access to BlockStay. Signing up lets us email you about your registration and early access. Broader product news is a separate, optional choice that is unticked by default. Each email we send will include a way to unsubscribe. If you unsubscribe, we keep a minimal record of your email address and unsubscribe date so that we don't email you again by mistake.

We do not add people to this list from other sources, such as survey responses, purchased lists or personal contacts.

5. Service providers and sharing

We share personal information only with providers that help us run the site, and only as needed for that purpose:

• Vercel hosts the website and processes requests and server logs.
• Supabase provides our database and account authentication. Our database is hosted in the United States (US East).
• Unsplash serves some of the photos on this site directly to your browser, so it receives your IP address and browser information when those images load.

To show hotel addresses and reference prices in the demo app, our server sends hotel names, locations and dates (not your personal information) to Photon (an OpenStreetMap-based search service) and Xotelo (a hotel price data service).

We don't currently use a third-party email delivery service. If we start using one to email the interest list, we'll update this policy first. We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a merger, acquisition or transfer of the project, in which case this policy will continue to apply to information collected under it.

6. Cookies and tracking

We use only the cookies needed to keep you signed in to an account. These are set by our authentication provider when you log in. We don't use advertising cookies, analytics or tracking pixels, and you don't need any cookies to view the site or join the interest list.

7. Data security

We use encrypted (HTTPS) connections, database access rules that restrict who can read each record, and server-side storage of secret keys. Interest-list records can be viewed only by authorised administrators. No website or storage system is completely secure, though, and we can't guarantee the security of information you send us.

8. Data retention

• Interest list: kept while BlockStay is in development and we may contact planners about it, or until you ask us to delete it. If we stop pursuing BlockStay, we intend to delete the list.
• Unsubscribes: a minimal suppression record (email address and date) is kept so we can honour your choice.
• Spam-prevention records: deleted after about 24 hours.
• Accounts and app data: kept while your account exists; ask us to delete your account at any time.
• Server logs: retained by our hosting and database providers under their own retention periods.

9. Your choices and rights

You can ask us to access, correct or delete the personal information we hold about you. Email rohan.malik2005@gmail.com from the address you used, and we may ask you to confirm the request before acting on it.

To stop emails, use the unsubscribe link in any email from us, or contact us. Unsubscribing doesn't require an account.

Depending on where you live, privacy laws (for example, in California and some other US states, or outside the United States) may give you additional rights, such as to know what we collect or to appeal a decision about your request. Some of these laws apply only to businesses above certain size thresholds. Even where a law doesn't require it, we aim to honour reasonable access, correction and deletion requests. We won't treat you differently for exercising your privacy rights.

10. Children's privacy

BlockStay is intended for adults and wedding professionals. It is not directed to children, and we don't knowingly collect personal information from anyone under 18. If you think a child has given us information, contact us and we'll delete it.

11. International visitors

BlockStay is run from the United States, and information is stored and processed in the United States. If you use the site from another country, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

12. Changes to this policy

We may update this policy as BlockStay develops. We'll post the new version here with a new “Last updated” date. If we make a material change to how we use interest-list information, we'll tell people on the list before the change takes effect.

13. Contact and privacy requests

For questions or privacy requests, email rohan.malik2005@gmail.com. Postal address: 170 Rosemar Meadows Drive, Vienna, WV 26105.