Privacy Policy

Kattegat is operated by Hidden Diversion Recreational Services ("Kattegat", "we", "us"), based in Dubai, United Arab Emirates. We run a direct marketplace connecting event and hospitality sellers ("sellers") with clients ("buyers").

This policy covers personal data processed when you browse the website, join the waitlist, create an account, use the mobile apps, communicate with support, or interact with marketplace features such as listings, requirements, chat, payments, referrals, verification, Ask Kayzar AI, job alerts, and the Roster check-in service for talent we book.

We collect information you provide, information generated by using Kattegat, and information from processors that help us deliver the service.

Account & identity

• Account details including date of birth, home country, current country, and current city. Date of birth is kept private and is not displayed on public profiles.
• Name, username, email, phone, business name, avatar, and password (stored via our auth provider).
• Public IDs issued at registration: BID (buyer) and/or SID (seller). Your internal account ID is a UUID; BID/SID are permanent public references.
• Role / dual-identity state (buyer, seller, or both on one account).

Profile, listings & marketplace content

• Seller portfolio media, bios, social links (where your plan allows), and listing fields driven by our category taxonomy.
• Category/subcategory, location/coverage text, pricing structures, and schema-driven listing answers.
• Buyer requirements (title, description, budget, dates, location, attachments) and seller applications / pitches.
• Quotes, invoices, bookings, client CRM notes (seller tools), and related statuses.

Verification & programmes

• Identity or business verification materials submitted for seller checks.
• Founding Member, Kattegat Vetted, referral, and Recommend & Earn application or lead details.
• Waitlist submissions (name, email, Instagram, optional LinkedIn / UAE phone, role).

Communications

• Chat messages, Contact Agent requests, admin/support conversations, and notification preferences.
• Messages sent to a seller on the free Starter plan are stored and delivered, but their text stays locked to that seller until they upgrade. The seller is told a message is waiting; the notification never contains the message itself.
• Reviews and ratings (when the reviews feature is enabled), including text and star ratings.

Payments & commercial records

• Subscription and purchase history, plan entitlements, and payment status metadata. Card numbers are tokenised and processed by Stripe (or a future payment provider); we do not store full PAN data.
• Subscriptions bought in the iOS or Android app are processed by Apple (App Store) or Google (Google Play). We receive the plan, status, renewal and store transaction identifiers through RevenueCat, never your card details. Your Kattegat account ID is used as the subscription's customer ID so your plan follows your account.
• Seller-provided bank details displayed on invoices so buyers can pay sellers directly. Kattegat does not use those details to receive or settle invoice funds.
• Company-funded referral and recommendation reward ledger and payout-request records. Historical invoice ledger records may be retained for reconciliation, refunds, disputes, accounting, and amounts already owed from the retired card-payment flow.

Device, security & usage

• App version, device type, push tokens, session metadata, and coarse analytics / error reports.
• IP address and related security signals used for rate limiting, fraud prevention, and abuse detection.
• City/emirate or coverage text you enter for discovery. not continuous precision GPS tracking.
• When you are signed in and open a seller's profile or listing, we record that view: who viewed (your account), what was viewed, and when (first and most recent visit). See section 5.

Job alerts (Priority sellers)

• The crafts and categories you choose to be alerted about, the areas you want work in, an optional minimum budget, and whether alerts may reach you by push and/or email.

Roster & check-ins (talent booked through Kattegat)

• Your gig schedule, venue, fee, and attendance status (booked, checked in, missed, completed).
• At check-in: a photo you take at the venue and, if you allow location access, your location at that moment (latitude, longitude and accuracy). Location is read once when you check in. not tracked before or after.
• Gig photos and captions posted to the Roster feed, reviews that venues leave about your work, and the monthly invoices generated from your gigs.

Ask Kayzar AI & voice

• Questions you type or say to Ask Kayzar AI, used to answer you and search the marketplace for you. The app sends the recent turns of your conversation with each question so answers stay in context, and the question text is processed by our AI provider. Kattegat does not keep a server-side history of your Ask Kayzar conversations.
• Voice: on supported devices your speech is turned into text on the device itself (by Apple or Google speech recognition). Otherwise a short recording of your question is sent to our server and transcribed by our voice provider, then discarded by us once the text is returned. Spoken replies are generated from the answer text. We only listen while the microphone button is active.

• Operate marketplace features: profiles, search/discovery ranking, listings, requirements, quotes, bookings, invoices, and chat.
• Authenticate users, maintain sessions, and protect accounts.
• Moderate listings, requirements, reviews, and reported content.
• Run Contact Agent / Vetted / Kattegat Vetted workflows and assign operators where needed.
• Process subscriptions and related billing events via webhooks and entitlement sync.
• Send transactional messages (email / push / in-app) such as booking or moderation outcomes; marketing only where allowed.
• Operate referral, Founding Member, and Recommend & Earn programmes.
• Show Priority sellers who viewed their profile and listings, and notify them of new views (section 5).
• Send Priority sellers job and open-gig alerts that match what they do and what they chose (section 6).
• Run the Roster service: schedule gigs, confirm attendance from check-in photos and location, alert our operations team the moment a check-in window closes without a check-in, publish the Roster feed, and prepare talent invoices.
• Answer questions and find matching listings through Ask Kayzar AI, including by voice.
• Detect fraud, self-referral abuse, fake reviews, and policy violations.
• Improve reliability, performance, and product quality.
• Meet UAE legal, tax, accounting, and dispute-resolution obligations.

We do not sell your personal information. We share it only as needed to run Kattegat:

• Other users. public profile and listing content is visible in discovery; chat counterparts see messages; buyers/sellers see information required to negotiate and fulfil engagements. If you view a seller's profile or listing while signed in and that seller is on the Priority plan, they see that you viewed it (section 5).
• Service providers. including database and authentication (Supabase), media hosting/CDN (Cloudinary), payments (Stripe), in-app subscriptions (Apple, Google and RevenueCat), caching (Upstash Redis), email (Resend), push notifications (Apple Push Notification service, Firebase Cloud Messaging and Expo), AI answers for Ask Kayzar (the provider selected by our team, such as DeepSeek, Google Gemini, Anthropic or Groq), voice transcription and speech (ElevenLabs), and error monitoring where configured. They process data only to provide their service to us.
• Kattegat operators. admin/staff accounts with role-based access may view user data to support moderation, Vetted cases, payouts, and safety. Sensitive actions are audit-logged.
• Legal & advisors. where required by law, regulation, court order, or to protect rights, safety, and integrity of the platform.
• Business transfers. in a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

Sellers on the Priority plan can see who viewed their profile and listings. This is part of what they pay for, so please read how it works:

• What is recorded. When you are signed in and open a seller's profile or one of their listings, we record your account, the page, and the time of your first and most recent visit.
• What the Priority seller sees. Your name (your business name or username), your username, profile photo, and the city and country on your account if you added them, plus which of their pages you viewed and when. They never see your email, phone number, date of birth, or account ID.
• Notifications. The Priority seller may receive a push and in-app notification such as "Sara viewed your listing". at most once per viewer, per page, per day.
• How far back. Priority sellers can see views from up to the last 90 days.
• Not recorded. Visits while signed out, a seller viewing their own pages, and accounts that have been deleted. Sellers on other plans do not see who viewed them.
• Your choice. There is no setting to hide your name from a Priority seller while signed in. If you would rather not be shown, browse while signed out; signed-out visits are not linked to you.

Priority sellers can choose to be alerted about new jobs and open Roster gigs. We match each new job or gig against the crafts of your live listings plus the crafts, areas, and minimum budget you picked, and send alerts by push and/or email as you chose (email is limited to 10 alerts a day). You can change or turn these off at any time in Settings → Job alerts. We use the job details buyers post to run this matching; buyers' contact details are not included in alerts.

Search, browse, and Home feeds order listings and sellers using signals such as review volume and ratings first, then plan (Priority, then Pro and Kattegat Vetted, then Starter), along with recency and newcomer boosts. Kattegat may also hide categories it has switched off and feature listings it curates. Weights can be tuned by administrators. This is marketplace ranking, not automated decision-making that creates legal effects outside the platform display order.

We keep personal data while your account is active and as needed to provide the service. You can delete your account in the Kattegat mobile app or by email. Exact in-app steps are documented on Delete Your Account.

On deletion we deactivate the account and remove or clear profile identifiers such as username, phone, and avatar. Certain financial, booking, safety, and dispute records are retained as required under UAE rules and to protect other users. details on the Delete Account page.

Roster check-in photos and locations are kept with the gig record because they support attendance, talent invoices, and disputes. Profile-view records are kept while your account is active; once you delete your account, your past views are no longer shown to anyone. Voice clips sent for transcription are not stored by Kattegat after the text is returned.

• Access and update most profile fields in-app (Profile → Edit profile / Settings).
• Request a copy of your account data by emailing us.
• Request account deletion as described on the Delete Account page.
• Manage notification permissions on your device and in Settings → Notifications.
• Priority sellers: change or switch off job alerts in Settings → Job alerts.
• Turn off location or microphone access for Kattegat in your device settings at any time. Check-in then works without location, and Ask Kayzar AI by typing.
• Browse while signed out if you do not want Priority sellers to see that you viewed them.
• Opt out of marketing emails via unsubscribe links (transactional mail may still be required).

Kattegat is a commercial marketplace and is not directed at children. You must be at least 18 to create an account.

We are based in Dubai, UAE. Some processors may store or process data in other countries. We use providers with appropriate security and contractual safeguards.

We use industry-standard controls including encrypted transport (HTTPS), access-controlled databases, row-level security where applicable, webhook idempotency for payments, and staff role-based access with audit logging. No system is perfectly secure. use a strong unique password and protect your devices.

We use essential cookies and local storage so the site works: session, security, and your cookie preference. These stay on even if you reject marketing cookies.

If you accept, we also load analytics and advertising tags (Google Analytics 4 / Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, and Microsoft Clarity) to measure traffic sources, page views, seller interest, drop-off, and campaign performance. You can reject those tags; browsing still works.

We may update this policy as Kattegat evolves. We will change the "Last updated" date and, for material changes, notify you in-app or by email where practical.

Privacy questions: seller@kattegat.app.

Also see our Terms of Service.