Privacy policy

Information we collect

• Accounts and profiles: your name, email address, a protected password hash, membership status and plan, and profile details you choose to provide, such as your business, biography, photo, and links.
• Visits and payments: desk and room reservations, guests, recurring schedules, waitlist entries, tour details, day-pass purchases, amounts, payment references, payment and refund status, and confirmation details.
• Community activity: posts, replies, reactions, mentions, channel participation and read positions, event RSVPs and visibility choices, notifications, and concerns you submit.
• Agreements and technical records: the time and version of the policies you accept, sign-in and verification records, session information, and operational logs that may include IP addresses, request times, and requested pages.

Card details are entered on Stripe's checkout. This app stores payment references and status, not your full card number or card security code.

How we use information

We use this information to manage accounts and memberships, reserve space, process payments and refunds, send receipts and account or visit emails, run community features, respond to concerns and support requests, and protect the service against misuse.

Booking and payment records also help resolve disputes and maintain business records. Agreement records show which policies were presented when you signed up or checked out.

Who can see your information

Hosts and admins can access information needed to manage memberships, bookings, payments, tours, community moderation, and concerns. Your booking details are not part of the public desk-availability display.

Members with access to the directory can see visible member profiles, including optional profile details and links. Email addresses are not displayed in the member directory. You can hide your directory profile, but this does not hide your name, photo, posts, or replies where you participate in the community. Day-pass visitor accounts are excluded from the directory.

Posts, replies, reactions, and mentions are visible to people with access to the relevant channel, including admins. Event attendee-name visibility follows the option you choose when you RSVP.

Only admins can read submitted concerns in the app. Anonymous concerns are saved without a link to your user account. Sign-in is still required to submit a concern, and identifying details in the message or operational logs may affect anonymity. Do not include details you do not want considered as part of the report.

Service providers and external links

We use Stripe to process payments and refunds, and Amazon Web Services for hosting, stored uploads, and transactional email. These providers receive information needed to perform those services. Stripe also handles information under its own privacy policy.

The site loads typefaces from Google Fonts. Your browser makes requests to Google when loading those fonts, which can disclose connection details such as your IP address and browser information. See Google Fonts' privacy information.

Member profile links and other external links lead to services with their own privacy practices. Review their policies before sharing information there. We may also disclose relevant records when required by law or when needed to address fraud, safety concerns, or a dispute.

Cookies and browser storage

The app uses session cookies to keep you signed in, protect forms, and associate your browser with an unfinished checkout. Browser session storage remembers community message drafts and calendar position. Blocking this storage may prevent features from working.

This app does not include advertising trackers. Payment-provider pages may use their own cookies and similar technologies.

Retention and security

Account, booking, payment, and community records are retained to operate the service and support account history, business records, and dispute handling. There is no automatic account-deletion schedule. Contact support to request deletion or ask what information remains.

Some information may need to be retained for accounting, legal, security, or dispute purposes, and backup copies may remain after a change to the live service. Removing a directory listing does not delete your account or community contributions.

We use access controls, protected password storage, and HTTPS on the hosted service. No online service can guarantee absolute security. Keep your password private and report suspected unauthorized access promptly.

Your choices and requests

You can edit your profile, remove optional profile information, change directory visibility, and choose attendee-name visibility for each event. Account deletion and email changes require help from support.

Email support@env8.com to ask about access to, correction of, or deletion of your information, or to raise a privacy concern. We may ask for information to verify that a request concerns your account. We will explain any information we need to retain and respond in accordance with applicable law.

Updates to this policy will appear here with a revised date. Acknowledging this notice is not permission for unrelated advertising or other uses beyond those described here.