Privacy Policy
Effective date: July 22, 2026 · Last updated: July 22, 2026
This Privacy Policy explains how Techne Arete ("Techne Arete," "we," "us," or "our") collects, uses, and shares information in connection with BespokeVM — the web application and website at bespokevm.com (the "Service"). BespokeVM is an operations platform used by hospitality operators and the vendors who serve them.
The Service is provided to business customers (for example, hotel management companies) and used by their staff and vendors ("Users," "you"). If you use BespokeVM through your employer or a property you work with, that organization administers your account, and its own privacy practices may also apply.
Contents
- Information we collect
- How we use information
- SMS / text messaging
- How we share information
- Service providers & subprocessors
- Data retention
- Your California privacy rights
- Security
- Children's privacy
- Changes to this policy
- Contact us
1. Information we collect
Information you or your organization provide
| Category | Examples |
|---|---|
| Account & identity | Name, work email address, role/title, and the organization or property you belong to. If you sign in with Google or Microsoft, we receive basic profile information from that provider. |
| Contact information | Mobile phone number, where you provide it to receive text-message links and notifications. |
| Content you submit | Messages and conversation threads, task and audit responses, notes, and photos or files you upload. |
| Operational records | Property, vendor, and audit information you enter or that is created as you use the Service. |
Information collected automatically
When you use the Service we automatically collect limited technical data, including IP address, device and browser type, and log data about how you interact with the Service. We use essential cookies and similar technologies to keep you signed in and to operate the Service.
Billing information
Payments for paid plans are processed by our payment processor, Stripe. We do not collect or store full payment-card numbers ourselves; Stripe handles that information under its own privacy practices.
2. How we use information
We use the information above to:
- Provide, operate, secure, and improve the Service;
- Authenticate users and manage accounts;
- Send transactional messages and notifications, including magic sign-in links and task or audit reminders;
- Provide customer support and respond to requests;
- Monitor for fraud, abuse, and security issues; and
- Comply with legal obligations.
We do not use your information for third-party advertising, and we do not sell your information.
3. SMS / text messaging
Consent. If you provide your mobile number, you agree to receive service-related text messages from BespokeVM, such as secure sign-in ("magic") links and task or audit notifications. Consent to receive texts is not a condition of any purchase.
Message frequency & rates. Message frequency varies based on your activity. Message and data rates may apply.
Opt out. Reply STOP to any message to stop receiving texts. Reply HELP for help. You can also contact us at the address below.
No sharing for marketing. Mobile phone numbers and text-messaging consent are used only to deliver the Service. We do not share mobile opt-in information, phone numbers, or SMS consent with third parties or affiliates for their marketing or promotional purposes.
4. How we share information
We share information only as needed to run the Service:
- Within your organization. Content you create is visible to other authorized users in your organization and to vendors or properties you are collaborating with, according to the Service's access controls.
- Service providers. With the vendors listed below, who process data on our behalf to operate the Service.
- Legal & safety. When required by law, to enforce our Terms, or to protect the rights, property, or safety of our users or others.
- Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.
5. Service providers & subprocessors
We rely on the following key providers to deliver the Service. Each processes data only as needed to perform its function.
| Provider | Purpose |
|---|---|
| Vercel | Application hosting and delivery |
| Supabase | Database, storage, and authentication infrastructure |
| Twilio | SMS / text-message delivery |
| Stripe | Payment processing (paid plans) |
| Google & Microsoft | Single sign-on / authentication (when you choose to sign in with them) |
We may update this list as the Service evolves. The current list is maintained here and material changes will be reflected in this policy.
6. Data retention
We keep personal information for as long as your account is active and as needed to provide the Service. When an account or a property relationship ends, we retain the associated data for a limited wind-down period so it can be exported if needed, after which it is deleted or de-identified — typically within 90 days — unless a longer period is required to meet legal, security, or recordkeeping obligations. Business customers may request export or deletion of their data as described in our Terms of Service.
7. Your California privacy rights
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights regarding your personal information:
- Know / access — request the categories and specific pieces of personal information we have collected about you.
- Delete — request that we delete personal information we collected from you, subject to legal exceptions.
- Correct — request that we correct inaccurate personal information.
- Opt out of sale/sharing — we do not sell or share personal information, so there is nothing to opt out of, but you retain this right.
- Non-discrimination — we will not discriminate against you for exercising any of these rights.
To exercise a right, contact us at the email address below. We will verify your request using information associated with your account before responding. You may use an authorized agent to submit a request on your behalf.
Categories of personal information we collect map to the following CCPA categories: identifiers; internet or network activity; geolocation (approximate, via IP); professional or employment-related information; and audio/visual information (photos you upload). We collect these from you, your organization, and automatically as you use the Service, for the business purposes described above.
8. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit, access controls, and role-based permissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Children's privacy
BespokeVM is a workplace tool intended for business use. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised policy.
11. Contact us
Questions or privacy requests can be directed to:
Techne Arete
Attn: Privacy
1144 Pine St, San Francisco, CA 94109
Email: privacy@bespokevm.com
BespokeVM is operated by Techne Arete. This document is provided for the BespokeVM Service and does not create any relationship beyond that described in our Terms of Service.