PakVenue by Musa Systems

Owner-review draft: Review this policy before publication. Hosting, retention, subscription terms and legal obligations require owner confirmation.

Privacy Policy

Last updated: October 9, 2026

PakVenue — Venue Business Solutions is a cloud-based venue business management service provided by Musa Systems for wedding marquees, banquet halls, event venues, and catering businesses in Pakistan. This policy explains how we handle information when you use PakVenue at pakvenue.com.

Information we collect

Google sign-in and Google user data

If you choose Continue with Google, Google shares the basic account information authorized during sign-in, which can include your Google account identifier, email address, name, and profile picture. Supabase processes this information to authenticate you and maintain your PakVenue account and session.

We use Google account information to sign you in, identify your account, and connect you to the appropriate venue access. PakVenue does not receive your Google account password. Google sign-in does not request access to your Gmail messages, Google Drive files, contacts, or calendar.

We do not sell Google user data or use it for advertising. We share it only as needed to provide the service through our providers, protect accounts, comply with applicable legal obligations, or with your consent. PakVenue's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

How we use information

We use information to provide and improve venue management features, authenticate accounts, enforce team permissions, save and retrieve records, manage subscriptions, respond to support requests, and investigate errors, fraud, or unauthorized access. Troubleshooting may involve reviewing relevant technical information or records you authorize us to inspect.

Authentication, organization isolation, and access

Supabase Auth manages sign-in and authentication sessions. Session tokens help identify signed-in users; they are different from your Google password. Organization membership and assigned roles determine which venue records and features an account may access.

PakVenue is designed to keep organization records separate through organization-scoped access checks and role-based permissions. Membership in one organization does not by itself authorize access to another organization's records. Venue owners and authorized administrators manage employee access and are responsible for reviewing permissions. These measures reduce access risks but are not a guarantee that unauthorized access can never occur.

Storage and sharing

PakVenue uses Supabase Auth for authentication, Supabase PostgreSQL for database storage, Supabase file storage where enabled, and Netlify for hosting. These providers process information needed to operate the service and may process it in countries other than Pakistan. Processing locations depend on the provider and project configuration; this policy does not promise that all information stays in Pakistan.

When the sign-in security check is enabled, Cloudflare Turnstile processes browser and network signals to help prevent automated abuse. See Cloudflare's Privacy Policy for its data practices.

Authorized members of your venue can access records according to their assigned permissions. Musa Systems personnel may access information as needed for authorized support, service operation, security investigations, or legal obligations. We may disclose information when required by applicable law or when you direct us to do so.

Third-party services have their own privacy practices. You can review the policies of Supabase, Netlify, and Google. Their policies do not replace PakVenue's responsibilities for information handled through our service.

Cookies and essential browser storage

The application and its providers may use essential cookies or equivalent browser storage to maintain authentication and protect sessions. PakVenue uses local storage and session storage to remember interface preferences and save local drafts of forms. Local drafts can contain business information and may remain on the device until cleared. Use a trusted device, sign out after using shared devices, and clear site data when appropriate. Blocking essential storage may prevent sign-in or draft recovery. Clearing browser storage can remove unsaved drafts and require you to sign in again.

Optional public-site analytics

When configured by the site owner, optional Google Analytics is loaded only after you allow analytics. You can decline or disable it through the public-site preference controls. Our integration sends predefined registration and demo interaction events without customer details, organization records or financial data. Public page URL and title values are used instead of private application URLs. Google may process device, network and cookie information according to its privacy policy. Analytics preferences are stored in your browser.

Email notifications and communications

We and our authentication providers use your email address for account verification, password recovery, and other account-related messages. We may also respond to support requests and communicate important service, security, or subscription updates. This does not authorize unrelated promotional use of Google account information.

Retention and security

We retain information as needed to provide the service and meet operational or legal obligations. Deletion may not immediately remove copies in backups or records that must be retained for security, accounting, or legal reasons. We use authentication and access permissions to restrict access; no system can guarantee complete security.

Account and organization deletion

Account closure, removal of a team member, and deletion of organization data are different actions. Removing an account or its access does not automatically erase shared business records. An authorized organization owner can request organization deletion or use available data-reset features, subject to their displayed warnings and confirmations. A business-data reset does not necessarily delete the organization or its users.

Deletion requests may require identity and ownership verification. We may retain information where needed for legitimate operational or legal purposes. Deleted or reset records may not be recoverable, and we do not promise a recovery window. The exact scope of a deletion will be explained when the request is handled.

Your choices and requests

You can update information through available account and venue settings. For access, correction, export, or deletion requests, contact your venue owner or email systemsmusa@gmail.com. We may need to verify your identity and authority before changing or deleting venue records. If your information was entered by a venue as its customer or employee, that venue is responsible for its own collection and business use of your information; we can help direct your request to the appropriate organization.

You can revoke PakVenue's access in your Google Account connections settings. Revoking Google access does not by itself delete records already stored in PakVenue; request deletion separately.

Children

PakVenue is intended for adult business users and is not directed to children. Do not create an account unless you have legal capacity and authority to use the service. If you believe a child has provided personal information through an account, contact us so we can review and address it.

Changes and contact

We will update this page when this policy changes and revise the date above. If we materially change how we use Google user data, we will provide notice and obtain any required consent before that new use.

For privacy questions or data requests, contact Musa Systems at systemsmusa@gmail.com. Website: pakvenue.com.