Privacy Policy

Who we are

Mahjie is a SaaS platform that lets independent organizers run paid American Mahjong tournaments and events. This policy explains what we collect, why, and how we use it.

What we collect

Account info: name, email, phone number, role (player or organizer).
Event info: events you register for, payment receipts, seating, results.
Communications: SMS opt-in/out events, message delivery status.
Usage: basic analytics (page views, feature usage) for product improvement.

Mobile numbers & SMS

We do not share or sell your phone number with third parties for their marketing purposes. Mobile numbers are used solely to deliver transactional SMS related to events you registered for: signup confirmation, payment receipt, reminders, schedule or venue changes, waitlist alerts, and seating assignments.

Message frequency varies per event — typically 2-6 messages per event you register for. Message and data rates may apply. Reply STOP to any message to opt out of further SMS from that organizer, or HELP for help.

We share mobile numbers only with Twilio (our SMS infrastructure provider) for the sole purpose of message delivery. See Twilio's privacy policy for their handling. Full SMS consent terms live at /sms-terms.

How we use your data

Authenticate you and connect you with organizers.
Deliver event-related transactional messages and email receipts.
Process payments through Stripe (we never store card data).
Improve the product and prevent fraud.

Who we share data with

Event organizers you register with — they see your name, email, phone, and registration details for their event.
Service providers (Stripe for payments, Twilio for SMS, Vercel for hosting, Supabase for our database) — strictly for service delivery.
Law enforcement only when legally required.

We never sell your personal data, and we never share mobile numbers with third parties for marketing.

Data retention

We retain account and event data while your account is active. After account deletion, we retain payment and tax records as required by law (typically 7 years for US tax purposes), and anonymize the rest.

Your rights

Access, correct, or delete your data at any time.
Withdraw SMS consent by replying STOP.
Export your data in machine-readable form.
Lodge a complaint with your local data-protection authority.

Security

Data is encrypted in transit (TLS) and at rest. Access is role-restricted; we use Row-Level Security on our database.

Contact

Questions, requests, or complaints: support@mahjie.com.