Privacy
policy.

When you apply through /quiz, we collect:

• ·Your name, age, neighborhood, and WhatsApp number — required.
• ·Email — optional. We use it for receipts only.
• ·Your quiz responses and the five-dimension persona score they produce.
• ·Referral source (if you came in through a friend's link).

When you attend a dinner, we collect your RSVP responses, attendance status, post-event ratings, and which members you'd like to see again. No photos or recordings of you are taken at events unless you've explicitly opted in.

When you subscribe, our payment partner collects payment metadata (card-level details remain with the payment partner, never with us — see Section 4).

• ·Matching — your quiz score is the input to our algorithm.
• ·Verification — government ID confirms you're 18+ and that you're a real, accountable person.
• ·Communication — WhatsApp is the only channel we use to send invitations.
• ·Refunds, support, dispute resolution — your contact info.
• ·Improving matching over time — your post-event feedback feeds future tables.

• ·Quiz responses, persona scores, attendance, and feedback — for as long as you are an active member, plus 24 months after you cancel (for re-onboarding if you return).
• ·Payment records — 7 years, per statutory record-keeping requirements.
• ·Backups — daily, kept for 14 days, then overwritten.

• ·Our payment partner — handles all card payments. They see your contact info + amount. Card details never touch our servers.
• ·Gupshup — sends our WhatsApp messages. They see your phone number + the message content (which is non-sensitive).
• ·Our venue partners — see only your first name + your party of six's headcount. Never your contact info, age, or ID.
• ·Our matching team (3 people) — see your full member record to curate tables.
• ·Other members at your table — see only your first name and neighborhood on the night.

We do not sell your data. We do not share it with advertisers, brokers, or third parties for marketing.

All member data is stored on our own private servers, encrypted at rest, outside Singapore. We do not use any US-based or EU-based managed databases. Backups are encrypted and kept on the same private servers.

Government ID files are kept outside any web-accessible directory and are not served by any public URL. Retrieval requires SSH access, restricted to two named admins.

Your data is protected to a standard comparable to Singapore’s Personal Data Protection Act wherever it is stored. We do not collect NRIC numbers, NRIC copies or any other government ID.

Singapore’s Personal Data Protection Act 2012 gives you the right to:

• ·Access — request a copy of everything we hold on you.
• ·Correction — fix anything inaccurate.
• ·Erasure — ask us to delete your record (we'll honour this except for transactions we're legally required to retain).
• ·Withdraw consent — at any time. Your subscription auto-cancels and your record is deleted within 7 days.
• ·Grievance — write to our DPO at the address below. We respond within 30 days.

To exercise any of these rights, email privacy@oddtables.com.

We use one strictly-necessary cookie to keep you logged into your dashboard (the magic-link token). Our public pages use the Meta (Facebook) pixel to measure which of our ads bring members, and when you pay we send Meta your email and phone number in hashed form so the payment can be matched to the ad (Meta Conversions API). We do not use Google Analytics. Page-view counts are aggregated server-side from web-server logs without personal identifiers.

oddtables is strictly 18+. We verify age via government ID at signup. If we receive an application from a minor, we delete the record immediately.

We'll update this page if our practices change. The "last updated" date in the sidebar reflects the most recent change. Material changes will be notified to active members via WhatsApp at least 14 days in advance.

General enquiries: hello@oddtables.com
Data Protection Officer / privacy queries: privacy@oddtables.com
Postal address on request.