Privacy Policy

Account and profile information. We collect your email address, name, profile biography, profile photograph, authentication information, and account status.

Dinner information. We collect dinners you create, descriptions, photographs, dates and times, city and neighborhood, exact address, arrival instructions, capacity, visibility, dietary information, and guest questions.

Seat requests. We collect your request status, name, optional social media profile, optional note for hosts, optional mobile number and text-reminder choice, answers to a host’s questions, cancellations, and host decisions. We retain records showing dinners you hosted or requested to join, but Common Hours does not verify or track whether someone physically attended.

Payments. For paid RSVPs, we store the agreed ticket price, consent timestamp, Stripe account and transaction identifiers, payment and refund status, application fees, and related service communications. Card details and host identity, banking, and tax-verification information are collected by Stripe through its hosted pages. Common Hours does not store full card numbers or security codes.

Ratings. We collect star ratings submitted through rating invitations. We do not currently collect written reviews.

Host subscriptions. We collect which hosts you subscribe to so we can show your subscription status and notify you when those hosts publish public dinners.

Technical information. We may collect IP address, browser and device type, timestamps, referring pages, page views, approximate region, session-cookie information, and security or rate-limiting signals.

Communications. We collect information you send when contacting Common Hours or reporting a problem.

• Create accounts, authenticate users, and maintain sessions.
• Create and display dinners and host profiles.
• Process seat requests and let hosts manage them.
• Coordinate scheduled ticket payments and refunds, keep transaction records, and send payment notifications.
• Release private dinner details to eligible accepted guests.
• Send service emails, including new-public-dinner notifications for hosts you subscribe to, and, when requested, text messages about acceptance and dinner reminders.
• Store and display ratings and host-history information.
• Operate, analyze, secure, troubleshoot, and improve Common Hours.
• Prevent abuse, enforce our agreements, respond to safety concerns, and comply with law.
• Market and promote Common Hours using content licensed under our Terms.

Public dinner pages may show the dinner title, description, photograph, date and time, city, neighborhood, food information, capacity, guest questions, host name, host biography, host photograph, completed-host count, and aggregate rating when available.

A host can see the name, request status, optional social media profile, optional note, and guest-question answers of people who request a seat at that host’s dinner. Hosts do not receive a guest’s email address or phone number through the request interface. A selling host can see payment details, including the guest’s billing email and information Stripe provides, in their Stripe Dashboard.

Anyone who can view a dinner page can see how many guests have been accepted and the names of up to two accepted guests. A signed-in guest whose request has been accepted can see the full names and profile photographs of other accepted guests for that upcoming dinner. Pending requests are not shown on the guest list.

The exact address and arrival instructions are not included in public dinner responses. They become available to accepted guests beginning on the calendar day before the dinner in the dinner’s local time zone, provided the dinner and acceptance remain active.

Other users. We share information as described above so hosts and guests can organize a dinner.

Service providers. Providers may process information for database hosting, private image storage, authentication and rate limiting, email and text delivery, hosting, analytics, and security. These currently include providers such as Vercel, Supabase, Upstash, Resend, Twilio, Stripe, and PostHog.

Safety and legal requests. We may disclose information when reasonably necessary to respond to valid legal process, protect a person’s safety, investigate fraud or abuse, enforce our agreements, or protect Common Hours and its users.

Business changes. Information may be transferred as part of a financing, acquisition, merger, reorganization, or sale of Common Hours or its assets.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

Common Hours uses an essential session cookie to keep signed-in users authenticated. Security systems may use temporary identifiers to prevent excessive sign-in and account activity.

We use PostHog to understand product interactions and Vercel Web Analytics to measure page visits when analytics is enabled. PostHog session replay and automatic click or form capture are disabled. URLs are stripped of query strings and identifying record IDs before PostHog capture, and we do not send names, email addresses, dinner descriptions, exact dinner addresses, arrival instructions, dietary responses, guest questions or answers, one-time codes, or individual rating values to analytics.

If our use of analytics or cookies materially changes, we will update this policy and provide choices when required by law.

We use your email address to send sign-in codes and messages about dinner publication, hosts you subscribe to, requests, decisions, changes, cancellations, reminders, ratings, and opportunities to host. Email delivery may be handled by Resend or another service provider.

You can stop new-dinner emails from a particular host by selecting Subscribed on that host’s dinner page.

Delivery is not guaranteed. Keep the email associated with your account accurate and do not forward private dinner information to people who should not receive it.

If you provide a mobile number and select text reminders on a seat request, Common Hours may text that number when the request is accepted and on the day before the dinner. Providing a number and agreeing to texts are optional and are not conditions of requesting a seat.

You may receive up to two messages per dinner request. Message and data rates may apply. Reply STOP to opt out or HELP for help. Text delivery may be handled by Twilio or another service provider and is not guaranteed. Wireless carriers are not liable for delayed or undelivered messages.

We keep information for as long as reasonably necessary to operate Common Hours, show dinner and host history, maintain security, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by the information and why we hold it.

Authentication codes and rate-limit records are temporary. Account, dinner, host-subscription, seat-request, and rating records may be retained for longer because they support the service’s history, integrity, and safety.

We use reasonable technical and organizational safeguards designed to protect personal information. Dinner and profile images are stored in private storage and served through Common Hours. Sensitive dinner details are filtered on the server before a public response is created.

No internet service can guarantee absolute security. Please contact us if you believe an account or private dinner detail has been compromised.

You can edit profile and dinner information, unsubscribe from hosts, and cancel a pending request or accepted seat when the product allows it. Depending on where you live, you may also have rights to request access, correction, deletion, or a copy of certain personal information and to appeal certain privacy decisions.

Email hello@commonhrs.com to make a privacy request. We may need to verify your identity and may retain information when permitted or required for security, legal compliance, dispute resolution, or enforcement.

Common Hours is intended for adults age 21 and older. We do not knowingly permit people under 21 to create accounts. Contact us if you believe a person under 21 has provided personal information through an account.

We may update this Privacy Policy as Common Hours changes. We will revise the date above and provide additional notice when reasonably appropriate or required by law.