A VERMONT TABLE – PRIVACY POLICY

Last updated: May 17 2025

A. Who We Are

A Vermont Table (“we,” “our,” “us”) provides catering-management software and event-planning tools. Our headquarters: 22 High St. Ste 105, Brattleboro, VT 05301, USA.

Contact privacy@avermonttable.com with any questions.

B. Scope

This policy applies to personal information we collect through:

  • Our web app and integration marketplace

  • Embedded intake forms

  • API endpoints / webhooks

  • Authentication screens and dashboards

C. What We Collect

  1. Account & Authentication Data – name, email, password hash, authentication tokens, IP address.

  2. Event Information – event date, venue, guest counts, dietary restrictions (which may reveal health-related data), vendor contacts.

  3. Payment & Billing Data – invoice recipient details, organization tax IDs, purchase-order references (no card numbers; all card processing handled by Stripe).

  4. Usage & Device Data – log files, browser type, pages viewed, timestamps, error reports, cookies and similar technologies.

  5. Integrations Data – data you choose to sync from third-party platforms (e.g., CRM, Google Places, Typeform responses).

D. How We Use Information

  • Provide and secure our services (authenticate users, prevent fraud).

  • Generate proposals, production schedules, and other event deliverables.

  • Send transactional emails (confirmations, invoices) and product updates.

  • Improve features through aggregated analytics.

  • Comply with legal obligations and enforce our Terms of Service.

E. Legal Bases (GDPR)

We process data under these bases: Contract performance, Legitimate interests, Consent (for optional marketing or sensitive dietary data), and Legal obligation (e.g., tax records).

F. Data Sharing

We never sell personal information. We share it only with:

  • Service providers – cloud hosting, email, payments, analytics.

  • Event-related vendors you explicitly add (e.g., rental companies) so they can fulfil services.

  • Legal authorities if required by law or to protect rights and safety.

  • Corporate transactions – if we merge, sell, or acquire, data may transfer subject to this policy.

G. International Transfers

We store data in the United States. If you access from other regions, your data may be transferred to and processed in the U.S. using Standard Contractual Clauses where required.

H. Data Retention

We keep event data for six years after the event date (for accounting & dispute resolution) unless you request earlier deletion and no legal duty prevents it. Back-ups purge on a 30-day rolling basis.

I. Your Rights

Depending on your jurisdiction, you may:

  • Access, correct, or delete your data

  • Object to or restrict processing

  • Receive a portable copy (data portability)

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

Submit requests via privacy@yourdomain.com. We’ll respond within 30 days.

J. Security

We use industry-standard safeguards. No method is 100 % secure; report vulnerabilities to security@avermonttable.com.

K. Children

Our services are not directed to individuals under 16. We do not knowingly collect their data. Contact us if you believe a minor has provided information.

L. Changes to This Policy

We’ll post updates here and notify account holders by email at least 7 days before material changes take effect.