سياسة الخصوصية

Overview

This Privacy Policy explains what information PubHoliday collects when you visit our site, how we use it, and the choices you have. We aim to be transparent and to collect only what we need to operate and improve the service.

Data controller

This service is operated by 3C studio (trading as PubHoliday). The entity responsible for your personal data (the data controller) is:

• Operator: 3C studio (trading as PubHoliday)
• Registered address: China, Shaanxi, Xi'an, Xianxi Xilu Road No. 29
• Privacy contact: ahmedlzany423@gmail.com

Information we collect

• Account data you provide when signing in with Google (name, email, profile picture).
• Subscription and billing status received from our payment partner, Waffo.
• Usage data such as pages visited and locale preference, collected via privacy-friendly analytics.

How we use information

We use your information to provide the calendar, manage your Pro subscription, respond to support requests, and understand aggregate usage so we can improve the product. We do not sell your personal data.

Third-party sharing and disclosure

We do not sell your personal data. We share information only with the following categories of third parties, under appropriate agreements:

• Payment processor — Waffo Pancake. When you upgrade to Pro, we share your buyer name and email, the subscription plan, and billing status with Waffo so it can process the payment and manage your subscription. Card and payment-instrument data are collected and stored by Waffo, a PCI-DSS compliant Merchant of Record, and are never transmitted to or stored on our servers.
• Authentication — Google. When you sign in with Google, Google provides us with your name, email, and profile picture according to your Google account permissions.
• Analytics provider. Privacy-friendly usage analytics receives anonymized or aggregated interaction data, such as pages visited and locale preference, to help us improve the service.
• Legal and compliance. We may disclose data when required by law, court order, or a lawful request from an authorized authority.

Each third party handles your data under its own privacy policy. We recommend reviewing the Waffo and Google policies for details on their processing.

Data security

We protect your personal data with the following measures:

• Encryption in transit. All traffic between your browser and our servers is protected with TLS (HTTPS).
• Encryption at rest. Your data is stored in a managed PostgreSQL database with encryption enabled. Sensitive credentials are hashed or encrypted; we never store your raw OAuth tokens or payment card numbers.
• Access control. We follow the principle of least privilege. Database and infrastructure access is limited to authorized personnel bound by confidentiality obligations.
• Monitoring. We perform regular security reviews and dependency updates to reduce risk.

In the event of a security incident that affects your personal data, we will notify you and the relevant authorities within 72 hours of becoming aware of it, where required by law. You are responsible for keeping your account credentials confidential and not sharing them.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the email listed in the site footer. We will respond within a reasonable timeframe.

Changes

We may update this policy from time to time. Material changes will be reflected on this page.