Privacy Policy

1. Who We Are

StandUpHaha is operated by Myrenget AS, a company registered in Norway. When we refer to "we", "us", or "StandUpHaha" in this policy, we mean Myrenget AS. We are the data controller for personal data collected through standuphaha.com.

Contact: privacy@standuphaha.com

2. What Data We Collect

We collect the following categories of personal data:

• Account information — name, email address, and profile information provided when you sign up via Clerk.
• Usage data — pages visited, search queries, and interaction patterns collected automatically when you use our service.
• Venue and comedian profile data — information you voluntarily submit when listing a venue or claiming a comedian profile.
• Payment data — if you purchase tickets through StandUpHaha, payment processing is handled by Vipps. We do not store full card numbers or payment credentials.

3. How We Use Your Data

• To provide and improve the StandUpHaha service
• To authenticate you when you log in
• To process venue listings and comedian profile claims
• To send transactional emails (booking confirmations, account notices)
• To analyse how the service is used and fix issues

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

4. Legal Basis (GDPR)

For users in the European Economic Area (EEA), we process personal data on the following legal bases:

• Contract performance — to provide the services you requested.
• Legitimate interests — to improve our platform and prevent abuse.
• Consent — for optional communications such as newsletters.

5. Third-Party Services

We use the following third-party services that may process your data:

• Clerk — authentication and account management. See clerk.com/privacy.
• Supabase — database and backend infrastructure. Data is hosted on servers in the EU (AWS eu-west-1) unless otherwise configured. See supabase.com/privacy.
• Vercel — hosting and edge delivery. See vercel.com/legal/privacy-policy.
• Resend — transactional email delivery. See resend.com/privacy.
• Vipps — payment processing for Norwegian transactions. See vipps.no/vilkar/personvern/.
• Ticketmaster / Eventbrite — external event data displayed on our site. If you click through to purchase tickets, you are subject to their privacy policies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it (e.g. financial records for accounting purposes, retained for up to 5 years under Norwegian accounting law).

7. Your Rights

Under GDPR and applicable Norwegian privacy law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no

To exercise any of these rights, contact us at privacy@standuphaha.com.

8. Cookies

We use strictly necessary cookies for authentication (session management via Clerk). We do not use tracking or advertising cookies. If we add analytics or other optional cookies in the future, we will update this policy and request your consent where required.

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be notified via email or a prominent notice on the site. Continued use of StandUpHaha after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries, contact us at privacy@standuphaha.com. Response time: within 30 days.