Privacy Policy

1. Who we are

LightCater (operated by Pxier Inc.) provides web-based banquet and event management software. References to "we," "us," or "LightCater" in this policy mean Pxier Inc. and its affiliates. Our principal contact for privacy matters is privacy@lightcater.com.

2. Information we collect

We collect information you provide directly, information generated by your use of the service, and a limited amount of information collected automatically.

2a. Information you provide

• Account information. Name, email, phone number, business name, role.
• Billing information. Payment method details handled by our payment processor (Stripe). We do not store full card numbers on our servers.
• Customer event data. Information you enter about your own customers and events — names, contact details, event dates, menu selections, dietary requirements, contract terms, invoices, BEOs.
• Communications. Messages you send to our support team or sales team.

2b. Information collected automatically

• Usage data. Pages visited, features used, actions taken, timestamps. Helps us improve the service.
• Device information. IP address, browser type, operating system, device identifiers.
• Cookies and similar technologies. See Section 7.

3. How we use information

We use the information described above to:

• Provide, maintain and improve the LightCater service.
• Process subscription payments and send billing notifications.
• Respond to support requests and provide customer service.
• Send service-related notifications (e.g. security alerts, feature changes, scheduled maintenance).
• Send marketing communications, where you have opted in (you can unsubscribe at any time).
• Detect, investigate and prevent fraudulent activity, abuse and security incidents.
• Comply with applicable legal obligations.

4. Legal bases for processing (EU / UK customers)

If you are in the European Economic Area or United Kingdom, we process your personal data under one or more of the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance — to provide the service you subscribed to.
• Legitimate interests — to improve, secure and grow our business in ways that don't override your rights.
• Consent — where required (e.g. marketing emails, non-essential cookies).
• Legal obligation — where we are required to retain or disclose information by law.

5. How we share information

We do not sell your personal information. We share data only as follows:

• Service providers (processors). Companies that help us operate LightCater — cloud hosting (AWS), payment processing (Stripe), email delivery (Amazon SES), error monitoring, customer-support tooling. They are contractually bound to process data only as we direct.
• Legal compliance. If required by law, court order or government request — we will resist overbroad requests where reasonable.
• Business transfers. If LightCater is acquired or merged, your information may be transferred as part of that transaction. We will notify you in advance.
• Your customers' information stays yours. The customer event data you enter (your end customers' details) is processed by us on your behalf; you are the controller. We don't use that data to market to your customers.

6. Data storage, security and retention

Hosting: LightCater data is stored on Amazon Web Services (AWS) in Canadian and US regions, with appropriate safeguards in place under standard contractual clauses for international transfers.

Security: We use industry-standard practices including encryption in transit (TLS), encryption at rest, access controls, regular backups and security monitoring. No system is completely secure; we cannot guarantee that data will never be accessed without authorisation.

Retention: We retain account data for as long as your account is active. After cancellation, we retain account data for up to 90 days (so you can reactivate) and then delete or anonymize it, except where retention is required by law (e.g. tax records). Your customer event data exported before cancellation belongs to you to keep or delete.

7. Cookies and tracking

We use a small number of cookies and similar technologies:

• Essential cookies for the service to function (authentication, session management).
• Analytics cookies (Google Analytics 4) to understand site usage in aggregate. You can opt out via your browser settings or browser-level Do Not Track.
• Security cookies for fraud and abuse prevention (reCAPTCHA on contact forms).

We do not use cross-site advertising cookies or sell data to ad networks.

8. Your rights

Depending on your jurisdiction (Canada/PIPEDA, EU-UK/GDPR, US states with privacy laws), you have rights including:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your data, subject to legal retention requirements.
• Portability — request your data in a structured, machine-readable format.
• Objection / restriction — object to or restrict certain uses of your data.
• Withdraw consent — where processing is based on consent.
• Complain — to your local data protection authority (e.g. the Office of the Privacy Commissioner of Canada, your national EU supervisory authority).

To exercise any of these rights, email privacy@lightcater.com. We will respond within 30 days.

9. International data transfers

LightCater operates across Canada, the United States, Europe and South Africa. Your data may be processed in any of these jurisdictions. For transfers from the EEA, UK or Canada, we rely on appropriate safeguards including standard contractual clauses and adequacy decisions where applicable.

10. Children

LightCater is a business product not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have collected information from a child, contact privacy@lightcater.com and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email or via a banner on the application. The "Last updated" date at the top reflects the most recent change.

12. Contact us

Questions, requests or complaints about this policy or about how we handle your data:

Email: privacy@lightcater.com
Mail: LightCater (c/o Pxier Inc.), Privacy Office, Montreal, QC, Canada