Privacy Policy

This Privacy Policy explains how FloorVue (“we,” “us,” or “our”) collects, uses, shares, and protects personal data when you use FloorVue (the “Service”). FloorVue is operated by an independent provider and is available to users worldwide. We handle personal data in line with applicable data-protection laws, including the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). By using the Service, you agree to the practices described here.

1. Who This Applies To

FloorVue serves two kinds of people:

• Organizers — registered users who design floor plans and manage events.
• Attendees & vendors — people who open a public link an organizer shares. They do not need an account to view a layout, but may submit a booth bid that includes their name and email.

2. Information We Collect

Information you provide

• Account data: your name, email address, and a securely hashed password when you register. If you sign in with a third-party provider, we receive basic account identifiers from that provider.
• Event content: event titles, descriptions, dates, venue names and addresses (which may be geocoded to map coordinates), capacity, and the floor-plan elements and layouts you create.
• Booth bids: when a vendor submits a bid, we collect the vendor name, email, bid amount, and any message provided.
• Billing data: when you subscribe to a paid plan, payment is handled by our Merchant of Record (see below). We store the resulting subscription identifiers, plan, and status — not your full card number.
• Support communications: messages you send us by email.

Information collected automatically

• Usage and device data: basic technical information such as IP address and request metadata, used for security, rate limiting, and to keep the Service running.
• Cookies: we use only strictly necessary cookies and similar tokens to keep you signed in and to operate the Service. We do not use advertising or third-party analytics cookies, so no cookie-consent banner is required to browse FloorVue.

3. How We Use Information

• To provide, maintain, and operate the Service and your account;
• To process subscriptions and manage your plan;
• To render the public share links and booth marketplace you choose to publish;
• To send transactional emails such as confirmations, bid notifications, and account notices;
• To secure the Service, prevent abuse, and enforce our Terms; and
• To comply with legal obligations.

We do not sell or share your personal information for cross-context behavioral advertising (as those terms are defined under the California Consumer Privacy Act), and we do not use your event content for advertising. We will not deny you the Service, charge you a different price, or otherwise discriminate against you for exercising your privacy rights.

4. Legal Bases

Where data-protection law applies, we process personal data on the bases of performing our contract with you (providing the Service), our legitimate interests (security and improving the Service), your consent (where requested), and compliance with legal obligations.

5. How We Share Information

We share personal data only with service providers that help us run FloorVue, and only as needed for them to perform their functions:

• Lemon Squeezy — our Merchant of Record, which processes payments, issues receipts, and handles applicable taxes. Your payment details are provided directly to Lemon Squeezy and are governed by its privacy policy.
• Mapping and geocoding providers — to display maps and convert venue addresses into map coordinates.
• Email delivery providers — to send transactional email, such as confirmations and bid notifications, on our behalf.
• AI service providers (where available) — if you use AI-assisted layout features, the prompt text you submit is processed by a third-party AI provider to generate a layout. Neither we nor the provider use your content to train AI models.
• Cloud hosting and infrastructure providers — to store our database and run the caching and rate-limiting needed to operate the Service.

We choose providers that offer appropriate data-protection safeguards, and we can provide the current list of our key processors on request at floorvue@peekingowl.com. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer. Content you publish through a public link is visible to anyone who has that link.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize associated content within a reasonable period, except where we must retain certain records to comply with legal, accounting, or security obligations.

7. Security

We take reasonable technical and organizational measures to protect personal data, including password hashing, encrypted connections, and access controls. No system is completely secure, however, and we cannot guarantee absolute security. If a personal-data breach occurs, we will notify affected users and the relevant authorities where required by, and within the timeframes set by, applicable law.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can update much of your account data directly in the Service, or contact us at floorvue@peekingowl.com to exercise these rights. Vendors who submitted a bid may ask the organizer who collected it, or contact us, to have their details removed.

We aim to respond to verified requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority — for example, your national supervisory authority in the European Economic Area, or the Information Commissioner's Office in the United Kingdom.

9. International Transfers

FloorVue and its service providers may store and process data in countries other than your own, including the United States. Where we transfer personal data across borders, we rely on appropriate safeguards — such as our providers' Standard Contractual Clauses or equivalent data-processing agreements — to keep it protected consistent with this Policy and applicable law.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

12. Contact

For privacy questions or requests, email floorvue@peekingowl.com. See also our Terms of Service.