Information we process
VMS processes account email addresses, authentication and session information, Authenticator enrollment, device labels and access records. Passwords are handled by our authentication provider.
Venue owners and authorized staff enter venue details, customer names and contact details, inquiries, event bookings, payments, expenses, follow-ups and generated documents. Subscription information includes the plan, payment reference, amount and dates. Audit and technical logs support security and troubleshooting.
Why we use it
We use this information to provide venue management, authenticate users, enforce venue permissions and device limits, manage subscriptions, respond to support requests, prevent misuse and maintain accounting and audit records.
Venue responsibilities
The venue decides what customer and event information to enter and which staff can access it. Venues must have permission or another appropriate basis to use that information and should enter only what their work requires. Customers seeking changes to a venue booking should first contact that venue.
Service providers and payments
Vercel hosts the application and Supabase provides database and authentication services. These providers process information needed to operate VMS and may process it outside Pakistan.
PayFast is the planned payment provider. It is not currently enabled, and VMS does not currently collect card numbers or wallet PINs. When checkout becomes available, payment details will be entered on the provider-hosted checkout. Payment processing changes will be reflected in this policy before activation.
Cookies
VMS uses essential authentication cookies to maintain signed-in sessions. The current application does not include advertising tracking. Browser and hosting services may maintain their own security and technical records.
Retention and archives
Operational records remain until they are removed through an authorized process. The optional monthly archive workflow exports eligible records and requires backup verification and fresh Authenticator verification before purge. Purge does not remove all customer, audit, security or accounting records, and provider backups or technical logs may persist under provider retention rules.
Downloaded backups are controlled by the venue. Keep them secure and restrict access, including when stored on USB drives.
Access, corrections and removal requests
Owners can manage authorized staff and available venue settings. Contact venuemanagementsystemvms@gmail.com for account information, corrections or removal requests. We verify the requester's authority and explain information that must be retained for security, accounting, disputes or applicable requirements.
Security and updates
VMS uses account verification, Authenticator verification, tenant permissions and device admission controls. No service can promise absolute security. Protect your password and Authenticator, sign out on shared devices and report suspicious access.
We update this page when processing practices change. Material changes will be communicated through an appropriate service or account notice.