Privacy Policy

Account and organization data: your name, email address, organization name, role, module subscriptions and billing status.

Operational data you enter: events, ticket types, orders and payment metadata (we never see or store your customers' full card numbers — payment data is handled by the payment processor), mas crew lists and costume-share balance accounts, vendor quotes, concierge and transport bookings, entry records and gate logs.

Transport and location data: for each active transport booking, the vehicle and driver details supplied by the organizer, and the GPS position of the booking while it is in progress, to show the pickup point and route status to the organizer and the assigned passengers.

Device and technical data: browser type, device type, IP address, timestamps, error and security logs, collected to operate, protect and diagnose the Service.

On-device data: to work offline, the Service keeps a working copy of your operational data in your browser (IndexedDB and similar local storage). It stays on your device until you clear it or it syncs to our servers.

To provide the Service: host your workspace, sync changes made offline, generate tickets and QR codes, control mas crew payments and display dashboards. This is performance of our contract with you.

To bill and support: manage subscriptions, receipts and responses to your requests. Contract performance and legitimate interest.

To protect the platform: rate limits, abuse prevention, fraud detection, audit logs. Legitimate interest and legal compliance.

To improve the Service: aggregated and de-identified usage statistics (for example, how modules are used) to fix problems and prioritize features. Legitimate interest. We build no advertising profiles and we do not sell personal data — to anyone, ever.

Processors we contract to operate the Service — currently: cloud hosting and edge delivery, managed database, payment processing (card payments through WiPay, whose own privacy policy governs the data you enter in its payment window) and email and communications tooling. Each is bound by contract to process data only on our instructions and with appropriate safeguards.

Legal and security matters: when required by law, a court order or a competent authority, or to protect the rights, property and safety of CarnivalOS, our customers or the public.

Business transfers: if CarnivalOS is merged, acquired or reorganized, customer data may be transferred as part of that transaction in accordance with this Policy, with notice to you.

We do not share your personal data with advertisers or data brokers.

Account and operational data: kept while your subscription is active. Thirty (30) days after your subscription ends (the export window in our Terms), operational data is deleted from production systems, unless we must retain it for legal, accounting, tax or security reasons.

Security and server logs: kept for up to ninety (90) days and then deleted or de-identified. Billing records: kept for as long as tax and accounting rules require.

Device caches remain on the device until you clear them (Settings → Clear local cache) or remove the browser data.

We protect data in transit with TLS encryption. Our API applies strict security headers (content policy, anti-clickjacking, no-sniff), validates every input against strict schemas, rate-limits every endpoint, uses parameterized database access to prevent SQL injection and makes every write idempotent so a replay cannot corrupt data.

Our staff's access to production data is limited to what is necessary to operate, protect and support the Service. No system is perfectly secure; if a personal data breach affects you, we will notify you and the relevant authorities in accordance with applicable law, without undue delay.

Under applicable law, you may request access to, correction, export or deletion of your personal data, and object to certain processing. Organizers can export operational data at any time from Settings (CSV) and clear local device caches.

To exercise a right, write to legal email — to be published shortly from your account email. We respond within thirty (30) days. If you are a customer, attendee, mas crew member or driver of a CarnivalOS organizer, direct your request to the organizer first where possible — they control your data — and we will support them in handling it.

Depending on where you are, you may have additional rights under the Data Protection Act 2011 of Trinidad and Tobago, the Jamaica Data Protection Act 2020 (fully in force since 1 December 2023), or equivalent data protection law in your Caribbean territory; and if you are in the European Economic Area or the United Kingdom — for example as part of the carnival diaspora — the GDPR or the UK GDPR also grants you rights such as access, rectification, erasure, restriction and portability. You may lodge a complaint with the competent data protection authority of your jurisdiction.

CarnivalOS is a business tool for adults. Accounts require users of at least 18 years of age. We do not knowingly collect data directly from children; when an organizer registers minors as part of running their event (for example, family group bookings), the organizer is responsible for having the corresponding consent and legal basis.

The Service is hosted on cloud infrastructure that may be located outside your territory — including the United States and other regions — wherever your season takes you: Trinidad and Tobago, Jamaica, Saint Lucia, Barbados, Grenada, Antigua and Barbuda, or the diaspora carnivals. When data is transferred internationally, we rely on the safeguards offered by our processors, including contractual clauses and encryption in transit, and we keep transfers to the minimum necessary to operate the Service.

We will publish any update to this Policy in the Service and update the last-updated date shown above. Material changes will be announced in advance through the Service or by email.

Privacy contact: legal email — to be published shortly · Zeitgeist Business Solutions — Port of Spain, Trinidad and Tobago.