Privacy Policy

Last updated: 03/13/2026

This privacy policy describes how Bagheera is operated by Kultura AS (org. no. 934 361 237), how we collect, use, and share personal data on our website and mobile app, and which rights you have under the GDPR and Norwegian privacy law.

What data we collect

We collect data that you provide to us, data we generate when you use Bagheera, and data that is necessary to deliver the service.

Mobile app data

In the mobile app we may collect low-accuracy location data to show nearby events and a push token to send notifications. You can control location permissions in your device settings.

Website and account data

When you create an account or use our services, we may collect:

  • Account details: email address and name
  • Profile and organizer details: venue name, address, contact person, contact email, and related information you choose to provide
  • Event and venue content you publish, including descriptions, images, and metadata

Payment information

If you purchase a subscription, payments are handled by Stripe. We receive limited payment metadata necessary for billing and customer support.

  • Subscription status and plan
  • Stripe customer and subscription identifiers
  • Billing history and receipts

Card details are processed by Stripe and are not stored by us.

  • Usage data such as interactions, feature usage, and device/browser information
  • Technical data such as IP address, timestamps, and error logs
  • Cookies and similar technologies (see the Cookies section)

Cookies and similar technologies

We use cookies and similar technologies to ensure the platform works, remember your preferences, and analyze usage.

  • Session and authentication cookies
  • Preference and language cookies
  • Analytics cookies (if you consent)

You can manage cookies through your browser settings and in our cookie banner where available.

Types of cookies

  • Essential: Required for login, security, and core functionality.
  • Analytics: Helps us understand how the service is used (Google Analytics).
  • Preferences: Remembers your settings such as language.
  • Marketing: Not currently used unless explicitly stated and consented to.

Why we process your data

We process personal data only when we have a lawful basis. The main purposes are:

  • Provide and operate the Bagheera platform
  • Create and manage user accounts and organizer profiles
  • Enable event discovery and location-based features
  • Process subscriptions and payments
  • Provide customer support and respond to inquiries
  • Improve security, prevent abuse, and detect fraud
  • Analyze usage to improve features and user experience
  • Comply with legal obligations

Legal bases for processing

We rely on GDPR Article 6(1)(b) (contract) to provide the service, Article 6(1)(c) (legal obligation) for accounting and compliance, Article 6(1)(f) (legitimate interests) for security and product improvement, and Article 6(1)(a) (consent) for optional features such as analytics cookies and location where required.

Storage and hosting

We use Firebase (Google Cloud) to store and process account data, events, and media. The service is hosted on Vercel. Data may be processed outside Norway, but always under GDPR-compliant agreements and safeguards.

Images and files are stored in Firebase Storage. Access is controlled by security rules and role-based access.

Who we share data with

We share data only with service providers that help us deliver the service and only for the purposes described.

  • Firebase (Auth, Firestore, Storage) for authentication and data storage
  • Stripe for payment processing
  • Vercel for hosting
  • Google Maps for map and address lookup
  • Google Analytics and Google Search Console for analytics and performance
  • Resend for transactional email delivery

We may disclose data when required by law or to protect our rights and users.

Your rights

You have the right to access, correct, delete, or restrict processing of your data, and to object to certain processing. You also have the right to data portability and to withdraw consent where processing is based on consent.

  • Access and receive a copy of your data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise your rights, contact us at hello@bagheera.no.

Retention

We retain personal data for as long as necessary to provide the service and to comply with legal obligations. Account data is deleted upon request unless we must retain it for legal or accounting purposes.

Changes to this policy

We may update this privacy policy from time to time. Significant changes will be communicated on the website or in the app.

Contact

Data controller:

Email: hello@bagheera.no

Address: Vikesdalslia 52, 4389 Vikesa

Org. no.: 934 361 237

By using Bagheera, you acknowledge that you have read and understood this privacy policy.