Privacy Policy

Flubatek Limited (“Flubatek”, “we”, “us”) operates the Fluba Cloud platform and associated products including Fluba Stage View and Fluba Hub. Our services are provided to professional event teams and creative businesses.

For privacy enquiries: privacy@flubatek.co.nz

We collect information you provide directly:

• Account information: name, email address, and password (via Firebase Authentication).
• Organisation details: organisation name and billing contact information.
• Payment information: processed securely by Stripe — we do not store card numbers.
• Support communications: messages sent via our support channels.

We also collect information automatically:

• Usage logs: pages visited, features used, and timestamps.
• Device information: browser type, operating system, and IP address.
• Uploaded files: media files you upload as part of using Fluba Hub, stored in Google Cloud Storage.

We use collected information to:

• Provide, maintain, and improve our services.
• Process payments and manage subscriptions.
• Authenticate you and keep your account secure.
• Respond to support requests and resolve issues.
• Send transactional emails (account activity, billing receipts).
• Meet our legal and compliance obligations.

We do not sell your personal information to third parties, and do not use it for third-party advertising.

Your data is stored on Google Cloud Platform infrastructure in the Asia Pacific region. We use industry-standard encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised Flubatek personnel.

Despite reasonable precautions, no internet transmission is completely secure — you use our services at your own risk with respect to data that you transmit.

We retain your account data for as long as your account is active. If you close your account, we retain data for up to 90 days before deletion, except where we are required to retain it longer by law (e.g. billing records for tax purposes).

We share personal information only with:

• Stripe — for payment processing.
• Google Cloud / Firebase — for authentication, hosting, and storage.
• Resend — for transactional email delivery.

These service providers are contractually obligated to protect your data and may not use it for their own purposes.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Object to or restrict processing of your data.
• Export your data in a portable format.

To exercise any of these rights, email privacy@flubatek.co.nz.

We use an HTTP-only session cookie (__session) to authenticate you after sign-in. This cookie expires after 1 hour of inactivity and is not used for advertising or shared with third parties.

We also set a fluba_org cookie to remember your active organisation. No third-party tracking or analytics cookies are used.

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. Continued use of our services after changes constitute acceptance of the updated policy.