Privacy Policy

Marssan Labs is the legal entity responsible for the Danss platform. Danss is a marketplace for dance events that allows users to discover events, purchase tickets, and connect with the dance community.

The platform is available at wearedanss.com and as a native mobile application on iOS (Apple App Store) and Android (Google Play Store).

Contact: privacy@wearedanss.com

Data you provide directly:

• Account data: name, email address, password (hashed)
• Profile data: city, dance styles, skill level, bio
• Event data: registrations, attendance, ticket purchases
• Payment data: billing information (processed by Stripe — we do not store full card numbers)
• Communications: support messages, feedback, reviews
• Identity data for organizers: business name, tax ID (if applicable)

Data collected automatically:

• Usage data: pages visited, features used, session duration
• Device data: device type, operating system, app version
• Technical data: IP address, browser type, language settings
• Approximate location (from IP) — precise GPS only if you explicitly grant permission
• Analytics data: crash reports, performance metrics
• Cookies and similar technologies: session, preference, analytics, and security cookies — you can manage preferences in your browser or app settings

Data from third parties:

• Google: name and email when you sign in with Google
• Apple: name and email when you sign in with Apple ID
• Stripe: payment confirmation and transaction identifiers

• Provide and maintain the service: manage your account, process registrations, issue tickets
• Process payments securely through Stripe
• Send transactional emails: ticket confirmations, receipts, password resets
• Send optional marketing communications (with your consent — you can unsubscribe at any time)
• Personalize your experience: recommend relevant events
• Improve the platform: analyze usage patterns, fix bugs, develop new features
• Ensure security: detect fraud, abuse, and unauthorized access
• Comply with legal obligations: tax records and regulatory requirements

Legal bases under the GDPR (EU/EEA users):

We share data with the following service providers, strictly for operating the platform:

When you register for an event, your name and email are shared with the event organizer for attendance management purposes only.

We may disclose data to law enforcement or government authorities if required by applicable law.

• All data in transit is encrypted using TLS/HTTPS
• Data at rest is encrypted in our database
• Passwords are hashed using industry-standard algorithms — we never store plaintext passwords
• Access to personal data is restricted to authorized personnel only
• We conduct regular security reviews and updates
• Our payment infrastructure (Stripe) is PCI-DSS Level 1 certified

We retain your personal data for as long as your account is active or as needed to provide our services.

• Account data: deleted within 30 days of account deletion request
• Transaction records: retained for 7 years to comply with tax and accounting regulations
• Analytics data: anonymized after 24 months
• Support communications: retained for 2 years
• Backup copies: purged within 90 days of deletion

You may request deletion of your account and data at any time via Settings → Account → Delete account, or by emailing privacy@wearedanss.com.

Depending on your location, you have the following rights regarding your personal data:

Danss is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at privacy@wearedanss.com and we will delete it promptly.

In the European Union, users must be at least 16 years old to use our service without parental consent, in accordance with the GDPR.

Marssan Labs operates globally from the United States. Your data may be stored and processed in the European Union, the United States, Brazil, or other countries where our service providers operate.

We ensure adequate protection for all transfers through the following mechanisms depending on jurisdiction:

• EU/EEA → US: Standard Contractual Clauses (SCCs) approved by the European Commission
• European Commission adequacy decisions where applicable
• Brazil (LGPD): data transfer agreements compliant with LGPD Art. 33
• Canada (PIPEDA): data protection agreements meeting Canadian standards
• Service providers certified under applicable privacy frameworks

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notification at least 15 days before the changes take effect.

Continued use of Danss after the effective date constitutes your acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, contact us at: