Privacy Policy

Effective date: 2026-04-27

1. Controller / Processor roles

When you use Embedbook as an Organizer, you may act as a data controller for Attendee data collected via the Widget. Embedbook processes Attendee data on your behalf to provide the Service. Details for EU/UK processing are in our DPA.

2. Data collected

Organizer account data: email, authentication identifiers, settings, billing-related data.
Attendee booking data submitted via the Widget: name, email, phone, message, player count.
Operational data: logs, security events, email delivery logs (e.g. email_sends).

3. Embedded widget disclosure

If an Organizer embeds the Widget on their website, the Attendee enters their data into a form presented on the Organizer’s site, but the data is transmitted to Embedbook.com and stored/processed there to provide the booking workflow (including confirmation emails).

4. Marketing communications

We send transactional emails necessary to operate the Service. Marketing emails are sent only where you have provided consent as recorded in your account preferences.

5. Sub-processors

We use service providers to run the Service, such as database/auth hosting (Supabase), email delivery (Resend), and payments (Stripe). Where required, we maintain contractual protections (e.g., DPAs/SCCs).

6. Contact

Questions? Use the in-app support form or contact us via email.