Privacy Policy

Our Privacy Philosophy

We don't treat your data as a product. DimsumX makes money through ticketing and platform fees — not by selling or monetizing your personal information. We collect what we need to run the platform, and nothing more.

A few things we're committed to by design:

• We do not sell your personal data. Ever.
• We don't subscribe you to marketing lists when you sign up
• We don't share your contact info with other guests or the public by default
• We share only the minimum necessary with restaurants (first name, last initial, dish)
• We give you real controls — you can request deletion, opt out, and correct your info

1. Who We Are

DimsumX is a marketplace platform that connects hosts and guests for curated dining experiences. We are registered in Maryland, USA. For privacy inquiries, contact: community@dimsumx.com

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

When you use the platform, we automatically collect:

• IP address and device identifiers
• Browser type, operating system, language preferences
• Pages visited, time spent, features used
• Referring URLs and navigation paths
• Crash reports and error logs

This data is used for platform security, fraud prevention, and improving the user experience. It does not identify you by name.

We may use cookies and similar technologies. You can disable cookies in your browser settings, though some features may not function properly.

2.3 Information From Other Users

Other users may provide limited information about you — for example, if a host imports a guest list. Anyone importing contact data into DimsumX represents that they have the explicit consent of those individuals to receive platform communications.

2.4 Inferences

We may derive insights from your platform activity (e.g., event preferences, dietary patterns) to improve matching and personalization. These inferences are used solely to improve your DimsumX experience.

3. How We Use Your Information

We use your personal data to:

• Create and manage your account
• Process RSVPs, ticket purchases, and payments via Stripe
• Coordinate event logistics with hosts and restaurants
• Send event confirmations, reminders, and updates
• Respond to your support requests and inquiries
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Improve the platform through analytics and research
• Power future AI-driven matching and experience personalization (with appropriate notice when this goes live)

We do not use your data to:

• Sell targeted advertising
• Build profiles for third-party marketing
• Train third-party AI foundation models without your knowledge

4. How We Share Your Information

4.1 With Hosts

Hosts receive guest information (name, RSVP status, dietary restrictions) for their specific event only. Hosts may not use this data for any purpose outside of their DimsumX event, and may not store, share, or market to guests independently.

4.2 With Restaurants

We share only:

• First name
• Last name initial (e.g., "J.")
• Dish selection

We do not share email, phone, payment info, LinkedIn, or any other identifying information with restaurants.

4.3 With Stripe

Payment processing is handled by Stripe. When you make a payment, Stripe collects and processes your payment information under Stripe's Privacy Policy. DimsumX does not store your full card number or sensitive payment credentials.

4.4 With Service Providers

We may share data with trusted vendors who help us operate the platform (e.g., email delivery, cloud hosting, analytics). These vendors are contractually prohibited from using your data for any purpose other than providing services to DimsumX.

4.5 AI Subprocessors

If we use third-party AI providers (e.g., for matching or analytics), those providers operate under enterprise-tier privacy agreements. To our knowledge, they do not use your data to train their public foundation models. We will update this policy if our practices change.

4.6 Corporate Transactions

If DimsumX is acquired, merged, or undergoes a significant asset transfer, your data may be transferred as part of that transaction. We will notify you via email or prominent platform notice if your data becomes subject to a materially different privacy policy as a result.

4.7 Legal Disclosures

We may disclose your information if required to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from government authorities
• Protect the safety of any person from death or serious harm
• Prevent fraud or protect DimsumX's rights, property, or security

4.8 We Do Not Sell Your Data

DimsumX does not sell, rent, trade, or share your personal information for cross-context behavioral advertising or for any third party's independent commercial use.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) and at rest (AES-256 or equivalent)
• Access controls limiting data access to authorized personnel only
• Payment data handled exclusively by PCI-DSS compliant processors

No system is 100% secure. We cannot guarantee that unauthorized parties will never circumvent our measures. Use the platform at your own discretion with this in mind.

If you believe your account has been compromised, contact community@dimsumx.com immediately.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services and meet legal obligations. Specific retention periods:

• Account data: Retained while your account is active, plus up to 3 years after closure for legal and dispute purposes
• Payment records: Retained as required by financial and tax regulations
• Event data: Retained for up to 2 years after the event date
• Deleted accounts: Processed within 30 days of a verified deletion request, subject to legal retention requirements

7. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze platform usage and performance
• Support security and fraud detection

We may also use session replay technologies that record interactions (clicks, scrolls, navigation) to identify usability issues. These replays are reviewed internally only and do not capture payment information.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

8. Your Rights

Depending on your location, you may have the following rights:

To exercise any of these rights, contact: community@dimsumx.com

We will respond to verified requests within 30 days. We may need to verify your identity before processing a request.

California Residents (CCPA/CPRA)

California residents have the right to:

• Know what categories of personal information we collect and how we use it
• Request deletion of personal information
• Opt out of the sale or sharing of personal information (we do not sell data)
• Non-discrimination for exercising any of these rights

Categories of personal information we collect (per CCPA):

• Identifiers (name, email, phone, IP address)
• Commercial information (tickets purchased, event history)
• Internet/network activity (platform usage, device data)
• Dietary and preference data (if provided)
• Inferences drawn from the above

Virginia, Colorado, Connecticut Residents

Residents of these states may have additional rights under applicable state privacy laws. Contact us at community@dimsumx.com to exercise your rights.

9. SMS Communications

By providing your phone number, you consent to receive text messages from DimsumX related to your account, RSVPs, event reminders, and platform updates.

• Message frequency varies based on your activity
• Reply STOP to opt out at any time
• Reply HELP for assistance
• Standard message and data rates may apply
• Information submitted via our SMS program will not be shared with third parties for marketing purposes

10. Children's Privacy

DimsumX is not intended for users under 18. We do not knowingly collect personal information from minors. If we learn we have collected data from a minor, we will delete it promptly. If you believe a minor has created an account, contact community@dimsumx.com.

11. Do Not Track

Some browsers transmit "Do Not Track" signals. We do not currently respond to Do Not Track signals, but we do not sell your data regardless of this setting.

12. Third-Party Links

The platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy at any time. For material changes, we will notify you at least 30 days in advance via email or prominent platform notice. Continued use after changes take effect constitutes acceptance.

14. Contact

For privacy questions, data requests, or concerns:

Also read our Terms & Conditions.