Privacy Policy

Last updated: 31 August 2026

BeatFrame is operated by Wynaxa Connect Ltd, a company registered in Ireland. We are the data controller for the personal data described here. This policy explains what we collect, why, how long we keep it, and what you can do about it.

Data we collect

• Account details — your name, email address and role, provided when you sign up.
• Profile information you publish — bio, profile photo, base location and travel radius, equipment, experience, categories and pricing.
• Event and booking data — events you post, applications, offers and counter-offers, bookings, and location changes.
• Messages exchanged through in-app messaging.
• Payment and invoicing data — processed by Stripe. We do not receive or store your card number.
• Reports you make or that are made about you, and the moderation decisions taken on them.

We do not currently run any third-party analytics or advertising trackers, we do not build advertising profiles, and we do not track you across other apps or websites. If that changes, we will update this policy and ask for your consent before any such collection begins.

Why we use it, and our legal basis

• To provide the platform — matching creators to events, running bookings, messaging and payments. Basis: performance of a contract.
• To process payments and issue invoices. Basis: contract, and legal obligation for tax records.
• To send service notifications about applications, offers, bookings and messages. Basis: contract.
• To keep people safe — reviewing reports, moderating content, investigating misuse. Basis: legitimate interests in a safe platform.
• To meet legal obligations, including accounting, tax and responding to lawful requests. Basis: legal obligation.

Who we share it with

We do not sell your personal data. We share it only with the providers needed to run the platform, each under a data processing agreement:

• Supabase (EU) — database, authentication and file storage.
• Stripe — payments, payouts and identity checks for creator accounts.
• Resend — transactional email, including sign-in links.
• Cloudflare — video delivery and DNS.
• Vercel — application hosting.
• Typesense (self-hosted, EU) — search and discovery indexing of published events and creator profiles.
• Mapbox — venue and location search. When you type into a location field, what you type and your IP address go to Mapbox directly from your browser so it can return suggestions.

The other party to a booking necessarily sees your name, profile and messages. Published creator profiles and published events are visible to other signed-in users.

International transfers

We host in the EU wherever possible. Some providers may process data outside the EEA; where they do, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Account and profile data — while your account is open, then removed on deletion except where noted below.
• Messages — archived after 30 days and deleted after 90. Messages linked to a booking are never deleted while the booking is active, in progress, or subject to a dispute; they are deleted only once the booking is complete, the payout is released and no dispute has been filed.
• Invoices, receipts and payout records — retained for the period required by Irish tax and accounting law, currently six years, even after account deletion.
• Reports and moderation records — retained after the reported account is deleted, so that repeat behaviour can be recognised and safety decisions defended.

Your rights

Under GDPR you have the right to access, correct, export, restrict or delete your personal data, to object to processing based on legitimate interests, and to withdraw consent where consent is the basis.

You can delete your account yourself at any time from your account settings. Deletion removes your profile and personal details and anonymises you in records we are required to keep. It cannot complete while you have funds held in escrow or an open dispute, because that money still has to reach the right person.

For anything else, contact privacy@wynaxa.com. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie.

Children

BeatFrame is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, contact privacy@wynaxa.com and we will remove it.

Security

Access to your data is restricted by row-level security in the database, so users can only reach records they are a party to. Payments are handled entirely by Stripe. No system is perfectly secure, but we will notify you and the Data Protection Commission of a breach where the law requires it.

Changes

We will update this policy as the platform develops, and will tell you before any material change takes effect.

Contact

Wynaxa Connect Ltd
Registered in Ireland
Email: privacy@wynaxa.com
See also our Terms of Service and support page.