Privacy Policy

Last updated: April 2026

1. Introduction

This Privacy Policy explains how BachataHub.com ("we", "us", "the platform") collects, uses, stores, shares, and protects your personal information.

This policy applies to all visitors and users of the platform, whether registered or not, and across all devices (desktop, mobile, tablet).

By using BachataHub, you agree to this Privacy Policy. If you do not agree, please refrain from using the platform.

2. What Data We Collect

2.1 Information you provide

When you create an account or fill out your dancer profile, we may collect:

  • • Email address (required)
  • • Full name (required)
  • • Password (stored as a secure hash — we never see your actual password)
  • • Dance preferences — role (leader/follower/both), level, style
  • • Profile details — age, height, bio, region, availability
  • • Profile photo
  • • Social links — Instagram, dance videos

2.2 Information from Google OAuth

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your contacts, calendar, or any other Google data.

2.3 Information collected automatically

  • • Authentication data: session tokens, JWT tokens managed by Supabase Auth
  • • IP address: logged by our hosting provider (Vercel) for security
  • • Browser & device info: browser type, OS, screen resolution — as collected by hosting services
  • • Pages visited: statistical usage data

3. How We Use Your Data

  • Platform operation: managing accounts, displaying profiles, enabling messaging, showing club and event information.
  • Matching dancers: helping you find dance partners by region, level, and role.
  • Club listings & event recommendations: showing relevant clubs, classes, parties, and festivals near you.
  • Service improvement: analyzing usage patterns to improve the user experience.
  • Security: protecting against misuse, fraud, and unauthorized access.
  • Communication: sending essential account-related updates (not marketing).

4. Cookies & Analytics

We use cookies minimally and only for essential purposes:

Essential cookies

  • Supabase authentication cookies: keep you signed in. These contain an encrypted JWT token and refresh automatically.
  • Locale cookie (NEXT_LOCALE): remembers your language preference.

What we do NOT use

  • • No tracking cookies
  • • No advertising cookies
  • • No Google Analytics, Facebook Pixel, or similar tracking tools
  • • No third-party marketing cookies

You can manage cookies through your browser settings. Blocking essential cookies will prevent you from signing in.

5. Data Sharing

We do not sell your personal data. We do not share personal information for third-party marketing purposes.

Your profile information (name, dance role, level, bio) is visible to other registered users on the platform, based on your privacy settings.

We share data only with clubs and instructors you directly interact with (e.g., when you register for a class or contact a club through the platform).

We use the following essential third-party services:

  • • Supabase — database, auth, storage (EU servers — Frankfurt, Germany)
  • • Vercel — hosting (global CDN)
  • • Google Fonts — font loading

We may also disclose information when required by law, court order, or to protect the safety of our users.

6. GDPR Compliance (EU Users)

Our primary database is hosted on Supabase in the eu-central-1 region (Frankfurt, Germany), within the European Union.

If you are located in the EU/EEA, you have the following rights under GDPR:

  • • Right of access — request a copy of your personal data
  • • Right to rectification — correct inaccurate data
  • • Right to erasure — request deletion of your data
  • • Right to data portability — receive your data in a machine-readable format (JSON/CSV)
  • • Right to object — object to processing of your data
  • • Right to restrict processing — limit how we use your data

Our legal bases for processing include: consent (account registration), contract performance (providing the service), and legitimate interest (security, service improvement).

7. Data Deletion

You can request deletion of your account and all associated personal data at any time by contacting us. Upon deletion:

  • • Your profile, messages, and uploaded content will be removed within 30 days.
  • • Backup copies may be retained for up to 90 days for technical reasons.
  • • Data required by law will be retained for the legally mandated period.

8. Children's Privacy

BachataHub is not intended for children under 16. We do not knowingly collect personal information from anyone under 16. Users aged 16-18 must have parental or guardian consent. If we learn we have collected data from a child under 16 without consent, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the most recent revision. For material changes, we will post a prominent notice on the platform. Continued use of BachataHub after changes constitutes acceptance of the updated policy.

10. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your personal data:

We take every inquiry seriously and will respond as soon as possible, no later than 30 days from receipt.

Terms of Service|Accessibility