Privacy Policy — Partners

Joynery — Last updated: 3 October 2026

How we handle Partner personal/business data. Controller: SUPPL FlexCo, Wildgartenallee 19/2, 1120 Vienna.

What we collect

Partner leads and business details: name, email, organisation, website, notes, application status, company name, legal form, address, authorised representatives and team roles.

Contact: email, phone, website.

Financial: bank/Stripe Connect details for payouts.

Listings: experience descriptions, images, pricing, schedules, venue addresses.

Performance: booking volumes, attendance, ratings, reviews.

Messages: Platform communications, Partner Agreement acceptance, team invitations, support and moderation records.

For a booked experience, authorised members of the relevant Business receive the booking reference, internal Participant ID, display name, booking status, seats, booking time and payment category. The internal ID supports messaging and group chat. The roster does not include Participant email addresses or payment records.

Signing in with Google

If you or a member of your team sign up or sign in with Google, Google shares that person’s name, email address, profile picture and a unique Google account ID with us. We get no access to contacts, emails, files or any other Google data, and we never see Google passwords. We use this data only to create the account and sign the person in (Art. 6(1)(b) GDPR).

Supabase stores this data as part of our authentication service, and it is deleted when the account is deleted. We do not sell Google user data, use it for advertising, or share it beyond the processors named in the Participant Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access can be removed at any time at myaccount.google.com/permissions.

Why and how

Same legal bases as the Participant Privacy Policy: contract performance, legal obligations, legitimate interests, and (for marketing) consent.

What’s public

Your business name, experience listings, images, pricing, venue, and ratings are visible on the Platform. We may feature your partnership on our social media using only publicly available information, with prior notice.

Retention, rights, transfers, security

Same framework as the Participant Privacy Policy, with these additions:

Partner data: for the duration of cooperation. Tax, accounting and payout records are kept for 7 years where required. Inactive Partner leads become eligible for minimisation after 24 months, unless a conversion or legal hold is active; automatic minimisation remains off until approved.

Payout records: 7 years from year-end of the transaction.

Your full GDPR rights apply. Contact: hello@joynery.at. Complaints: Austrian DPA, dsb@dsb.gv.at.