Privacy Policy

This Privacy Policy explains how Edan Labs (“Megaphone”, “we”, “us”) handles personal information when you visit megaphone.bio, open a curator’s page or private link, make requests, pay, or use Studio. Effective date: October 29, 2026. Version 2026-10-29.1.

• We collect what we need to run bookings and payments.
• We share your details with the curators you request or book with, so they can serve you.
• We never sell your personal data, and we do not share it for cross-context behavioral advertising.
• Megaphone never contacts a curator’s clients for its own marketing.

When a curator uses Megaphone to manage you as their client, the curator decides how your data is used for that relationship. See “Curators” below.

Depending on how you use Megaphone, we collect:

• Account details: your name, phone number, email address and social handle, and sign-in details if you use Sign in with Apple or Google.
• Requests and preferences: what you ask for, dates, party size, budget, notes and preferences you share with a curator.
• Payment metadata: amounts, status, payment method type, last four digits, invoice references and receipts. The payment processor handles your full card data. Megaphone never stores your full card number.
• Device and session data: IP address, device and browser type, approximate location from IP, and session records. Sessions last about 90 days.
• Consent records: which terms and messages you agreed to, with the version, a hash of the text, a timestamp, IP address, device, method and locale.
• Check-ins: when you are admitted at a door, and the QR pass used.
• Messages: messages between you, your curator and Megaphone about your requests, and delivery records for texts and emails.
• Files you upload: receipts for off-platform payments and, for curators, official flyers and media.
• Information from others: for example, a friend or host who adds you to a split or a guest list gives us your name and contact details.

• To create your account, verify your phone and keep your private link secure.
• To pass requests, options and approvals between you and your curator.
• To process payments, issue receipts and passes, and run splits.
• To send transactional texts and emails about your requests, options, payments, passes and bookings.
• To send marketing texts and emails, only if you opted in, on behalf of Megaphone and the curators you book with.
• To prevent fraud, abuse and unauthorized access, and to enforce our terms.
• To keep records that help resolve disputes, such as approvals, check-ins and messages.
• To fix bugs, monitor performance, and improve the Service.
• To comply with law and respond to lawful requests.

Megaphone uses an AI model (Anthropic) to read official event flyers that curators upload, so event details can be filled in. It does not generate images, and it is not used to make decisions about you.

We share personal information only in these ways:

• With curators you request or book with. When you agree, we share your name, phone, email and social handle with those curators so they can serve you. We do not share your data with other curators.
• With venues, only what the door list requires, usually your name and party size. We send it through the curator.
• With service providers that run the Service for us, under contract (see below).
• For legal reasons: to comply with law, court orders or lawful requests, to protect rights, safety and property, and to investigate fraud or abuse.
• In a business transfer, such as a merger or sale, with notice to you if your data is affected.
• With your direction or consent, for example when an assistant you authorize pays for you.

We do not share, sell or rent your mobile number or SMS opt-in consent with third parties or affiliates for their marketing purposes.

Megaphone does not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use advertising trackers on the Service. Because of that, there is no “Do Not Sell or Share” toggle to switch on, and nothing to opt out of. You can still ask us to confirm this at privacy@megaphone.bio.

We use these providers to run the Service. They process data only for us and under contract.

Curators are independent businesses. When you request or book with a curator, they receive your details and decide how to use them to serve you. They are responsible for their own use of your data and must follow our Acceptable Use Policy and data processing terms.

Your data is walled off per curator. One curator cannot see your requests or details with another curator. Megaphone never contacts a curator’s clients for its own marketing. We send messages to you on a curator’s behalf only about your own requests and bookings, or for marketing if you opted in.

To ask a curator to stop contacting you or to delete your data, tell them or write to us and we will pass it on.

We send transactional texts and emails about your requests and bookings. If you opt in, we also send marketing texts and emails on behalf of Megaphone and the curators you book with. Consent is not required to book. You can reply STOP to any text to cancel or use the unsubscribe link in any email. See our SMS Terms at /sms-terms.

We do not share, sell or rent your mobile number or SMS opt-in consent with third parties or affiliates for their marketing purposes.

We keep personal information as long as your account is active and as needed to run the Service, resolve disputes, prevent fraud and meet legal, tax and accounting duties. Payment and booking records are generally kept for several years for those reasons.

• Sessions expire after about 90 days.
• Consent records are kept as proof of what you agreed to.
• When you ask us to delete your data, we delete or de-identify it unless we must keep it by law or to resolve a dispute.

You can ask us to:

• Give you access to the personal information we hold about you.
• Export it in a portable format.
• Correct anything that is wrong.
• Delete your data and account.
• Stop marketing texts or emails (reply STOP or unsubscribe).
• Limit or object to certain uses, where the law gives you that right.

Email privacy@megaphone.bio. We may verify your identity first, for example with a code to your phone. You can also have an authorized agent make a request for you. We will respond within the time the law requires, usually 45 days. We will not discriminate against you for using your rights.

California and other US states. If you live in California or another state with a privacy law, you have the rights above, including to know what we collect and to opt out of sale, sharing and targeted advertising. We do not sell or share personal information for cross-context behavioral advertising. If we decline your request, you can appeal by replying to our decision.

EU, UK and EEA visitors. Where GDPR applies, we process your data to perform our contract with you, for our legitimate interests (security, fraud prevention, improving the Service), to meet legal duties, and with your consent where required. You can also object to processing, withdraw consent at any time, and complain to your local data protection authority.

We protect your information with measures that fit its sensitivity, including:

• Row-level security in our database, so data is walled off per curator.
• Encryption in transit.
• Multi-factor authentication for Megaphone staff.
• Audit logs of access to sensitive data.
• Tokenized payments handled by the processor, not stored by us.
• Rate limiting and bot protection.

No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

Megaphone is not for anyone under 18, and we do not knowingly collect information from children. Nightlife bookings require you to be 21 or older. If you think a child has given us information, write to privacy@megaphone.bio and we will delete it.

Megaphone is based in the United States and our providers may process data in the United States and other countries. If you are in the EU, UK or EEA, we use appropriate safeguards for transfers, such as Standard Contractual Clauses, where required.

We may update this policy. When a change is material, we will tell you in the Service or by email or text before it takes effect, and we will update the version and date above.