Six souls, one table — and your trust.

1. Who we are

House of Stewards is a curated Christian community for young professionals across Hong Kong, Singapore, the United Kingdom, Australia, and Indonesia. We host small-group dinner meetups, curated 1:1 introductions, and member events. This Privacy Policy explains what information we collect, why we collect it, who we share it with, and how you stay in control.

When this policy says we, us, or House of Stewards, it means the entity operating the platform you reached at houseofstewards.com and any associated subdomains. When it says you, it means the person whose information we’re processing.

2. The information we collect

From you, directly

• Application details — your name, email, phone (with country code), city, country, gender, age range, profession and industry, languages, MBTI (if you choose to share), faith status and journey stage, current life season, relationship status, what you’re looking for in House of Stewards, and the free-text reason that sparked your interest.
• Profile additions — bio, social links (LinkedIn, Instagram), avatar photo (we resize and store this in Supabase Storage), church background, denomination, values, food restrictions, and event preferences.
• Account credentials — email, hashed password (or your linked Google / Apple account if you signed in via OAuth).
• Event and table data — the events you register for, who you connected with after a meetup, your post-event reviews, and any messages you send through our admin team.
• Payment information — billing region, plan, renewal status. We do not store your card number; that lives only with our payment processor (see §4).

Automatically, when you use the service

• Authentication metadata — login timestamps, session cookies, and the OAuth provider you used (if any).
• Operational logs — minimal request logs for security and reliability (timestamps, IP, route). These first-party operational logs stay on our infrastructure. Separately, we use Meta Pixel and the Meta Conversions API to measure how visitors find us through Meta ads and to power retargeting — see §9 below for the full disclosure.
• Messaging metadata — when we send you a WhatsApp or email (event reminder, weekly intro, payment update), we log the template, status, and any error so we can reach you reliably.

3. Why we use your information

• To curate tables and intros. Your profile powers our pairing engine — we use age, season, faith stage, languages, MBTI, and shared interests to seat you with people you’d enjoy meeting.
• To run events. We share your first name, dietary needs, and table number with the venue or host where required.
• To bill you. If you become a member, we hand billing details to Stripe and reflect your subscription status in our database.
• To message you. Application updates, event reminders, weekly intros, and post-event Connect notifications go out via WhatsApp and email. Marketing messages, if any, are opt-in.
• To keep the community safe. Internal notes, admin actions, and message history help us address issues, enforce our Terms, and protect members.

4. Who we share it with

We rely on a small set of trusted processors:

• Supabase — database, authentication, and avatar storage. Data lives in their managed PostgreSQL.
• Stripe — subscription billing and payment processing. Card data never touches our servers; we receive webhook events and a customer / subscription identifier.
• Resend — transactional email delivery (application status, event confirmations, billing notices).
• WhatsApp (via Baileys) — community messaging. We connect to WhatsApp Web from a managed service hosted on Railway with a persistent encrypted session.
• Vercel — application hosting.

With tablemates: when you opt into post-event Connect and another guest at your table picks you back, we share that person’s WhatsApp number with you and yours with them. That’s the whole point of Connect, and it only happens with both sides’ explicit consent.

With 1:1 intro partners: when our weekly matching engine pairs you, we share your first name, profession, city, and the “why you two” explanation. We do not share phone numbers until both members confirm.

We never sell your data. We don’t serve ads. We don’t share your information with anyone else unless you ask us to or we’re legally required.

5. Where your information is processed

Our processors operate globally. In particular, Supabase, Stripe, Resend, and Vercel may process data in the United States and the European Union. By using House of Stewards you consent to your information being transferred to and processed in these regions under safeguards equivalent to those required under Hong Kong PDPO, Singapore PDPA, and the UK GDPR.

6. How long we keep it

• Active members — for as long as your account exists.
• Lapsed or cancelled accounts — your profile is retained so we can reinstate you cleanly if you return; you may ask us to delete it at any time.
• Billing records — kept for at least seven years to meet tax and accounting obligations.
• Message logs — kept for up to two years to help us debug delivery issues and resolve disputes.

7. Your rights

You can review and edit most of your data yourself from the member portal. For everything else, write to us (see §12) and we’ll honour these rights wherever the law gives them to you:

• access a copy of your data
• correct anything that’s wrong or out of date
• delete your account and associated profile
• port your data to another service in a structured format
• object to specific uses or withdraw consent

We’ll respond within 30 days, usually faster.

8. Cookies

We use only the cookies needed to keep you signed in and to verify requests, plus Meta Pixel cookies (_fbp and _fbc) when you accept the cookie banner. You can withdraw consent at any time via the Cookie preferences link in the footer (or by re-opening the cookie banner that appears when consent is missing).

9. Third-party services — Meta Pixel and Conversions API

We share a limited set of data with Meta (Facebook) for advertising measurement and audience targeting, but only after you grant consent via the cookie banner:

• Cookies — _fbp (Meta browser identifier) and _fbc (Meta click identifier, derived from the fbclid URL parameter when you arrive from a Meta ad). Retention: up to 90 days.
• Network metadata — your IP address and user-agent string, captured server-side on conversion events.
• Hashed identifiers on conversions — on conversion events (application submission, account approval, paid subscription) we additionally send your email address and phone number to Meta, hashed via SHA-256 before transmission. Meta uses these hashes to match you to your Meta account without seeing the raw values.
• What Meta does with this — described in the Meta Business Tools terms (facebook.com/legal/terms/businesstools). We deliberately do NOT push subscriber lists to Meta via the Custom Audiences API; the cookie + hashed-PII flow above is the only third-party transfer.

To withdraw consent, click Cookie preferences in the footer at any time (or re-open the cookie banner that appears when consent is missing). Withdrawing consent stops future sharing; data already shared with Meta is governed by Meta’s data-deletion request flow.

First-party operational analytics — page-view counts, click-through rates, funnel completion — stay on our own infrastructure and are NOT subject to the cookie banner. We treat these as strictly necessary for running the service (GDPR Recital 30 / PDPO operational purpose).

If we add another third-party measurement or advertising service in the future (e.g. Google Ads, TikTok Pixel), we will update this section before that integration goes live.

10. Children

House of Stewards is built for working adults. Our application form is open to people aged 18 and over and we don’t knowingly collect data from minors. If you believe a minor has signed up, please tell us and we’ll remove the account.

11. Changes to this policy

We’ll post a new effective date at the top of this page when we revise it. If a change is material — for example, a new processor that handles your data — we’ll also email or WhatsApp active members.

12. Contact us

Questions, requests, or concerns about this policy or your data? Email hello@houseofstewards.com. We read every message.