Privacy Policy

1. Who We Are

STAGD is a creative economy platform based in Karachi, Pakistan. We connect independent creatives, illustrators, photographers, musicians, muralists, filmmakers, and more, with the people who want to discover, hire, and experience them.

This policy explains what personal information we collect, how we use it, and what rights you have over it. It covers the STAG’D website at stagd.app and the STAG’D mobile app for iOS and Android.

Questions? Email us at info@stagd.app

2. Information We Collect

Account information
When you create an account, we collect your name, email address, and account type (Creative or Patron). If you sign in with Google or Apple, we receive your name and email address, and from Google your profile photo. Your date of birth, which you add in your profile, is used to apply age limits on events and is never shown publicly.

Profile information
Information you choose to add to your profile: bio, city, disciplines, portfolio images, starting rate, social media handles, and availability status. For Creatives who send invoices, we also store bank account details (account title, bank name, account number, and IBAN). This financial information is stored securely and is never displayed publicly.

Commission and booking data
When you use the commissions feature, whether as a client or a creative, we store the content of your brief, proposals, messages, the payment records the creative logs, and project status updates. This data exists to document your agreement and protect both parties. If you send a brief without an account, we keep the email address you verify so the creative can reply.

Messages
Direct messages, message requests, and reactions you send to other users are stored so they can be delivered and shown to you both.

Ticketing data
When you purchase a ticket, we collect your name, email address, and mobile number, and keep a record of your purchase: the ticket ID, tier, amount, and payment status. Payments are made directly with Swich, a payment gateway authorised by the State Bank of Pakistan. STAG’D never sees or stores your card or wallet details. When your ticket is scanned at a venue, the scan time and entry status are logged against your ticket record. At checkout you can also choose to hear from the event’s organiser; we record that choice.

Event organiser data
If you list events on STAGD, we collect your event details, ticket tier configuration, door staff assignments, and the bank details you add so we can send your event payouts.

Event photos
Photos you upload to an event’s photo wall, and comments on them, are stored and shown on that event.

Mobile app data
If you use the STAG’D app and allow notifications, we store a push notification token for your device so we can send you ticket, message and event alerts. You can turn notifications off at any time in your device settings, which stops them being sent.

Usage data
Standard server logs: IP addresses, browser type, pages visited, and timestamps. This data is used for platform security and performance, not for advertising profiles.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Display your public Creative profile to other users
• Facilitate commissions, briefs, and negotiations between creatives and clients
• Process ticket purchases and generate QR codes for event entry
• Manage door verification and entry logging at events
• Send event payouts to organisers by bank transfer
• Send transactional communications: ticket confirmations, commission updates, invoice delivery, and account changes
• Detect and prevent fraud, abuse, and unauthorised access
• Improve the platform based on aggregated, anonymised usage patterns
• Publish industry reports (e.g. our annual Creative Economy Report) using aggregated, non-attributable platform data

We never sell your personal data or share it with anyone for their own use. We do not use your data for advertising. Your data is handled only by the service providers listed in section 5, which run STAG’D for us, and only to provide the service.

4. What Is Public vs. Private

Publicly visible on your Creative profile:
Name, bio, disciplines, city, portfolio images, starting rate (unless you hide it), availability status, social media handles, and follower count. Your public profile is accessible at stagd.app/[username] and is indexed by search engines.

Publicly visible on a Patron profile:
Your name, username, photo, and city. Patron profiles have no portfolio.

Visible only to relevant parties:
Commission messages and proposal details are only visible to the client and creative involved in that thread. Ticket purchase records are visible to the buyer, the event organiser, and any door staff the organiser has assigned to that event. Organisers and door staff see only the name you show on STAG’D and your ticket tier, never your email address, phone number, or payment details. Organisers can also see whether you checked in, whether you have bought from them before, and whether you chose to hear from them. Door staff also see the time you were admitted when your ticket is scanned. Invoice details are shared between the creative and the client for that project.

Never publicly visible:
Bank account details, IBAN, phone number, email address, date of birth, and payment method information.

Messages from organisers:
If you choose to hear from an organiser at checkout, they can send you event news by email and app notification through STAG’D. STAG’D reviews these messages before they are sent, limits how many you receive each week, and never gives the organiser your contact details. You can unsubscribe from any of them. Organisers can also message you about an event you hold a ticket to, for example a change of time or venue.

Tracking links:
Organisers can share links that count how many times they were opened and how many tickets they led to. These counts are anonymous and contain no personal data.

5. Third-Party Services

We use the following services to operate the platform. Each processes only the data necessary for its function.

• Supabase: Database and authentication
• Cloudflare R2: Image and file storage (profile photos, portfolio work, event artwork)
• Cloudflare Turnstile: Bot protection on public forms
• Sentry: Error monitoring, so we can find and fix faults. Captures technical details of a failure, including your IP address
• Vercel Analytics & Speed Insights: Cookieless, aggregate traffic and performance measurement. No cross-site tracking and no advertising profiles
• Google Analytics (via Google Tag Manager): Measures how the website is used, such as pages visited and how people arrive. Uses first-party analytics cookies. Advertising features are switched off: no ad cookies, no cross-site tracking and no advertising profiles
• Expo: Push notification delivery to the mobile app
• Apple: Optional sign-in method
• YouTube and Vimeo: Embedded video on creative portfolios. These load from their own servers and may set their own cookies when a video plays
• Vercel: Web hosting and delivery
• Swich: Ticket payments and refunds, as a payment gateway authorised by the State Bank of Pakistan
• Resend: Transactional email delivery
• Google OAuth: Optional sign-in method
• Google Maps: Directions links on event pages (opens Google Maps)

Each provider is bound by their own privacy terms. We encourage you to review them if you'd like to understand how they handle data.

6. Where Your Data Is Processed

STAG’D is based in Pakistan, but the services we rely on run outside it. Our database and authentication are hosted in South Korea (Supabase, Seoul region). Hosting, file storage, bot protection and error monitoring run on globally distributed infrastructure (Vercel, Cloudflare, Sentry) and may process your data in other countries.

By using STAG’D you agree to your information being transferred to and processed in these locations. Each provider is contractually bound to protect it, and we choose providers that offer recognised data-protection commitments.

7. If There Is a Data Breach

If personal information is exposed in a way that is likely to put you at risk, we will tell you directly by email, and publish a notice on the platform, within 72 hours of establishing what happened. We will say what was affected, what we have done about it, and what you should do.

We will not stay silent about a breach that affects you in order to protect ourselves.

8. Data Retention

We retain your account data for as long as your account remains active. If you delete your account, your profile, portfolio, and personal details are removed straight away. Records you share with other people stay for them with your name shown as “Deleted user”. Commission records, ticket purchase records, and payout logs may be retained for up to 7 years to comply with financial record-keeping obligations and to resolve any disputes that arise.

9. Your Rights

You may at any time:

• Access and update your profile information from your profile settings
• Delete your account from the profile settings page. This removes your public profile and portfolio
• Request a copy of your data by emailing info@stagd.app
• Request deletion of specific data by emailing info@stagd.app, subject to the retention obligations in section 8
• Opt out of marketing communications via the unsubscribe link in any email

We aim to respond to all data requests within 14 days.

10. Cookies and Local Storage

We use session cookies and local storage to keep you signed in and to remember your preferences (such as theme). We do not use advertising cookies, and we do not track you across other websites. Vercel Analytics and Speed Insights are cookieless and aggregate. Google Analytics, loaded through Google Tag Manager on the website, sets first-party analytics cookies to measure how the site is used; its advertising features are switched off. You can block or delete these cookies in your browser settings without affecting how the site works. Embedded videos on creative portfolios are the only third-party cookies: when you play a YouTube or Vimeo video, that provider may set its own cookies under its own policy.

11. Children

STAG’D is not intended for use by anyone under the age of 16, and users under 18 need a parent or guardian’s permission as set out in our Terms of Service. We do not knowingly collect personal information from children under 16. If you believe a child has created an account, please contact us at info@stagd.app and we will remove it.

12. Changes to This Policy

We may update this policy as the platform grows. If we make material changes, we will notify you by email or through an in-app notice before the changes take effect. Continued use of the platform after that point constitutes acceptance of the updated policy.

The version date at the top of this page always reflects when the policy was last updated.

13. Contact

STAGD
SB-16, Block 11, Scheme 36, Gulistan-e-Johar
Karachi, Pakistan
info@stagd.app
+92 349 2596252