Privacy Policy

Who we are

Balma is operated by Afterglow Assembly LLC, a Wyoming limited liability company (“Balma,” “we,” “us”). Balma is a marketplace that connects the people planning gatherings with the venues, practitioners, and producers who help bring them to life. This policy explains what we collect, why, and the choices you have. For any privacy question or request, contact us at hello@balma.world.

Information we collect

• Account details — your name, email address, and password when you sign up.
• Business details — information you provide through vendor applications and profiles, such as your venue or practice name, location, services, rates, and imagery.
• Inquiry and booking details — information you share when you plan a gathering, submit an inquiry, or book through the platform.
• Payment information — processed by our payment provider; we do not store full card numbers.
• Usage data — basic technical information such as device, browser, and pages viewed, used to operate and improve the service.

How and why we use it

We use your information to create and manage your account, publish vendor profiles and gatherings, connect producers with venues and practitioners, process bookings and payments, respond to inquiries, keep the platform secure, and comply with our legal obligations. Where we rely on consent (for example, optional communications), you may withdraw it at any time.

Service providers

We share information with third-party processors who perform services on our behalf, under agreements that require them to protect your data:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• Resend — transactional and notification email.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

International transfers

Balma is operated from the United States, and our service providers may process and store information in the United States and other countries. If you access Balma from the European Economic Area, the United Kingdom, or elsewhere, your information may be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your country.

Data retention

We keep personal information for as long as your account is active or as needed to provide the service, and afterwards only as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your information as described below.

Your rights (EU/EEA and UK)

Because Balma offers services to residents of the European Economic Area and the United Kingdom, the GDPR applies to that processing. Subject to its conditions, you have the right to access the personal data we hold about you, to request correction or deletion, to receive your data in a portable format, to object to or restrict certain processing, and to withdraw consent. You may also lodge a complaint with your local supervisory authority.

Your rights (California)

If you are a California resident, the CCPA (as amended by the CPRA) gives you the right to know what personal information we collect and how we use and disclose it, to request access to or deletion of that information, to correct inaccurate information, and to be free from discrimination for exercising these rights. Because we do not sell or share personal information for cross-context behavioral advertising, no opt-out of sale or sharing is required, but you may still exercise your other rights.

How to exercise your rights

To make any privacy request, email us at hello@balma.world. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be communicated where appropriate.