Privacy Policy

When a venue signs up, Nextcore Technology is the controller of that venue's account data.

When a customer books a slot, the venue is the controller of that booking — they decide what to do with it. We process it on their behalf as their software provider. Requests about a booking are best sent to the venue first; contact us and we will help either way.

Venue accounts. Name, email address, and a password we store only as a bcrypt hash — never in readable form. Plus what you enter about your venue: its name, description, address, phone, opening hours, prices, amenities, photos, and payment instructions.

Bookings. The customer's name, email address, optional phone number, party size, any note they add, and the booking itself. Where a venue takes payment by bank or e-wallet transfer, we also store the proof image or reference number the customer uploads.

Waitlist and passes. If a customer joins a waitlist, we store the same contact details plus their preferred date and time. If a venue issues a prepaid pass, we store the holder's name, contact details and remaining credits.

The owner mobile app. Signing in stores an authentication token on your device. If you allow notifications, we store a push token so we can alert you to new bookings. The app collects nothing else — no location, no contacts, no advertising identifiers.

Automatically. Standard server logs, and the cookies described below.

To run the booking itself — showing availability, confirming reservations, and emailing both sides. To let venue staff manage and verify payments. To send service email you would expect: confirmations, reminders, cancellations, and waitlist alerts. To keep the service secure, including rate limiting and abuse prevention. And to bill venues for their subscription.

We do not sell personal data, and we do not use customer booking details to advertise to them.

We use a small number of providers to run the service:

• Vercel — hosting and image storage for uploaded photos.
• Neon — the database, hosted in Singapore.
• Azure Communication Services (or Resend, as a fallback) — sending email.
• Google Firebase Cloud Messaging — delivering push notifications to the owner app.
• Paddle — subscription billing for venues. Paddle is the merchant of record and handles card details; we never see them.
• PayMongo or Stripe — only where a venue connects their own account to take online payment. Card and e-wallet details go directly to that provider.
• Meta — a marketing pixel on our public marketing pages only. It is not present on venue booking pages or in the app.

NextReserve never holds anyone's money. Customer payments go directly to the venue — either through the venue's own payment gateway, or by a transfer the customer makes themselves and evidences with a screenshot. Refunds are issued by the venue from their own account.

We use two cookies, both strictly functional. A session cookie keeps venue staff signed in; it is httpOnly and cannot be read by scripts. An optional remembered-details cookie saves a customer's name, email and phone so they do not retype them on their next booking — a customer can clear it themselves from their booking page.

Our marketing pages additionally load the Meta pixel described above. Venue booking pages do not.

Bookings are kept for as long as the venue's account is open, since venues need their own history. A venue that signs up but never confirms its email address is deleted automatically after seven days, along with everything in it.

When a venue closes its account, its data — including its bookings — is deleted. Email delivery records and anything we must keep for tax or accounting are retained as required by law.

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Customers can also use the “forget me” control on a venue's booking page to clear their remembered details immediately.

Email sales@nextcoretechnology.com and we will respond within 30 days. If a request concerns a booking, we may need to pass it to the venue, since the booking is theirs.

NextReserve is intended for businesses and their adult customers. We do not knowingly collect data from children. If you believe a child's data has been submitted, contact us and we will remove it.

If we change this policy we will update the date at the top, and tell venue owners by email where the change is significant.

Nextcore Technology, Philippines — sales@nextcoretechnology.com