Privacy policy

Last updated 3 October 2026

This explains what Setlo collects, why, and who can see it. Setlo is a prototype on test networks, and it collects only what it needs to run bookings.

1. What we collect

Your email address, and the payout account (wallet address) created for it when you sign in.

Booking details that agencies enter: package and supplier names, client and supplier emails, amounts, dates and shared terms, along with drafts and invitation links.

Records of transactions Setlo relays for you and of emails it sends (recipient, type and subject), plus basic usage events such as a package being created or funded.

Your IP address, used briefly for rate limiting to prevent abuse.

On the demo page, your browser stores demo keys and progress locally. They are not sent to our database.

2. How we use it

To sign you in, show you the bookings you are part of, relay your signed approvals, send invitations and payout notices by email, prevent abuse, and understand whether the prototype works. We don't sell your data or use it for advertising.

3. Public blockchain data

Bookings are settled on public blockchains. Amounts, quotes, payout addresses and transfers are visible to anyone and cannot be deleted. Emails and names are kept off-chain.

4. Who processes it

Privy (sign-in and payout accounts), Supabase (database), Vercel (hosting), QuickNode (blockchain access) and Google Gmail (sending emails). Each processes data only as needed to provide its service.

5. Retention and your choices

Because this is a test prototype, data may be reset at any time. You can ask us to delete your off-chain data or ask what we hold about you by emailing setlo.app@gmail.com. Onchain records can't be removed.

6. Changes

We may update this policy; the date above shows the latest version.