Privacy Policy

Mazí Dinners ("Mazí", "we", "us", or "our") operates a membership-based dinner club that connects members with curated dining experiences at partner restaurants. This Privacy Policy comprehensively discloses how our application accesses, collects, uses, stores, and shares personal data — including Google user data — when you use our website and services at mazidinners.com (the "Service").

By creating an account or using the Service, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not access the Service.

Our application collects, or processes on behalf of our members, the following categories of personal data when you use or interact with our products and services:

1. Account and identity data

• Full name
• Email address
• Phone number (for optional verification)
• Profile picture (if uploaded, or obtained from Google Sign-In)
• Password (stored as a one-way hash, never in plain text)

2. Profile and preference data

• City and neighbourhood
• Preferred languages for dinner conversation
• Conversation interests and social style preferences
• Cuisine preferences
• Availability (nights of the week you are free)
• Optional demographic information you choose to provide

3. Membership and referral data

• Referral code and membership token codes
• Who referred you (inviter's code) and who you invited
• Subscription plan selection and status
• Token balance and transaction history
• Ambassador status and founding-member designation

4. Dinner and booking activity

• Dinner tables you create or join
• Restaurant preferences and saved restaurants
• Notes you add to tables (e.g., dietary needs, conversation topics)
• Feedback and ratings you submit after dinners
• Special thanks you give to other members
• Photos or videos you optionally submit, and your permission to use them

5. Payment and billing data

• Subscription plan purchased, amount, currency, and billing interval
• Payment method is handled entirely by our payment processor (Stripe). We do not store full card numbers, CVV, or raw card details on our servers.
• Transaction status and provider charge identifiers

6. Device and usage data (collected automatically)

• IP address and browser type
• Pages and features you interact with within the Service
• Approximate location (city-level, derived from your device or profile) used to surface relevant restaurants
• Email open and click events, tracked to improve our communications
• Cookies and similar authentication tokens

7. City launch and waitlist data

• Waitlist application responses (motivation, availability, preferences)
• Engagement score (computed from email opens, clicks, referrals, and application completeness)
• Queue position and wave assignment
• UTM parameters (campaign, source, content) used to attribute how you found us

We will use your data to provide you with the services you requested. Specifically, we use the personal data we collect — including Google user data — for the following purposes:

• Account creation and authentication: To create and manage your account, verify your identity, and maintain your login session.
• Dinner matching: To match you with dinner tables and other members based on your city, preferences, languages, and availability.
• Restaurant bookings: To send booking requests to partner restaurants on your behalf and confirm reservations.
• Communications: To send you dinner invitations, waitlist updates, booking confirmations, feedback requests, and service announcements via email and in-app notifications.
• Membership management: To process subscription payments, manage your plan, and track your membership status.
• Token rewards: To track and award tokens earned through referrals, hosting, joining tables, special thanks, and feedback submissions.
• Programs: To administer ambassador and founding-member programs, including discounts and entitlements.
• Service improvement: To analyze usage patterns, improve restaurant discovery and matching, and develop new features.
• Marketing attribution: To track which campaigns and referral sources brought you to Mazí, so we can optimize growth.
• Legal compliance: To comply with legal obligations, resolve disputes, and enforce our Terms of Service.

We will not sell your data to third parties. We may share it with our partners who help us provide our services, as described below.

We do not transfer or disclose your personal information to third parties for purposes other than those described in this policy. We share data in the following specific circumstances:

• Partner restaurants: When you book a table, we share your name, booking size, date, time, and any notes relevant to the reservation so the venue can prepare your experience. We do not share your payment details or password with restaurants.
• Payment processors (Stripe): Payment data is transmitted directly to and handled by Stripe. We receive a tokenized reference and transaction status but do not store raw card details.
• Email delivery providers: We use a third-party email delivery service (Resend) to send you dinner invitations, waitlist updates, and service communications. Your email address and name are shared with this provider solely to deliver emails on our behalf.
• Analytics and infrastructure providers: Hosting, analytics, and other service providers may receive limited data necessary to operate the Service, under contractual obligations to protect it.
• Legal requirements: When required by law, court order, or to protect the rights, property, or safety of Mazí, our members, or others, we may disclose data to authorities.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred subject to confidentiality obligations.

We do not share your Google user data with any third party for advertising purposes. We do not transfer your personal data to third parties for purposes other than providing and improving the Service as described in this policy.

Your personal data is stored on secure cloud infrastructure. Specifically:

• Encryption: Data is encrypted in transit using TLS and at rest using industry-standard encryption.
• Access controls: Access to personal data is restricted to authorized personnel who require it to operate the Service, and is logged and monitored.
• Authentication credentials: Passwords are stored as one-way cryptographic hashes and can never be read in plain text by anyone, including Mazí staff.
• Payment data: Full card details are never stored on our servers; they are handled exclusively by our PCI-compliant payment processor.
• Retention: We retain your data for as long as your account is active or as needed to provide the Service. After account closure, we may retain certain data to comply with legal obligations, resolve disputes, and enforce agreements.
• Backups: Data backups are maintained for disaster recovery purposes and are protected with the same security measures.

Mazí offers the option to sign in using your Google account ("Google Sign-In"). When you choose Google Sign-In, Google authenticates your identity and shares the following Google user data with us. This section specifically discloses how our application accesses, uses, stores, and shares Google user data:

Google user data we access:

Our application will access the data you have provided to us through Google Sign-In, including:

• Your Google account name (full name as it appears in your Google profile)
• Your Google account email address
• Your Google profile picture URL
• A Google-issued authentication token used to verify your identity on subsequent logins

We request only the email andprofile scopes from Google. We do not request access to any other Google data such as your contacts, documents, calendars, drive files, search history, or activity history.

How we use your Google user data:

We will use your Google data to provide you with the services you requested, including:

• To create and identify your Mazí account when you sign in with Google
• To authenticate your login sessions and verify your identity
• To display your name and profile picture within the Mazí app
• To send you dinner invitations, booking confirmations, and service communications to your Google email address
• To match you with dining experiences based on your profile preferences

We will not sell your Google data to third parties. We will not use your Google data for advertising purposes. We will not use your Google data for any purpose not described in this policy.

How we store your Google user data:

• Your Google name and email are stored on our servers in encrypted form and retained for as long as your account is active.
• Your Google profile picture URL is stored to display your avatar within the app.
• We do not store your Google password. Google handles password authentication on their side.
• Google-issued authentication tokens are stored securely and used only to maintain your login session. Tokens are encrypted at rest.

How we share your Google user data:

• We do not transfer or disclose your Google user data to third parties for advertising or marketing purposes.
• We share your name with partner restaurants when you book a table, so they can prepare your reservation.
• We share your email address with our email delivery provider solely to send you service-related emails on our behalf.
• We will not share your Google data with any other party without your consent, except where required by law.

Revoking access:

You may revoke Mazí's access to your Google account at any time through your Google Account security settings (myaccount.google.com → Security → Third-party apps with account access). Revoking access prevents future logins via Google but does not automatically delete data already stored in your Mazí account. To request deletion of your data, contact us at membership@mazidinners.com or use the account deletion option in your profile settings.

We use cookies and similar technologies to maintain your session, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, but disabling them may affect functionality such as staying logged in.

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain data after account closure to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data through your profile settings or by contacting us at membership@mazidinners.com.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data, subject to legal exceptions.
• Withdraw consent to marketing communications at any time.
• Object to or restrict certain processing of your data.
• Revoke Google's access to your account at any time via Google security settings.

To exercise any of these rights, contact us at membership@mazidinners.com.

We implement reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

The Service is intended for individuals aged 18 and older. We do not knowingly collect information from children under 18. If you believe we have collected information from a minor, please contact us and we will promptly delete it.

Your information may be transferred to and processed in countries other than your own, including for hosting and service-provider operations. We take steps to ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and notify users if we change how our app uses Google user data. For material changes, we will provide notice through the Service or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Mazí Dinners
Email: membership@mazidinners.com