الانتقال إلى المحتوى

Privacy Policy

Last updated: 8 October 2026 · FirstBali (firstbali.com)

1. Who we are

FirstBali ("we") operates firstbali.com, a concierge and booking platform for venues, events, villas and transport in Bali, Indonesia. Contact: [email protected].

2. Data we collect

  • Account data: name, email, phone/WhatsApp number, language preference.
  • Booking data: venue, date, party size, payment status (payments are processed by Xendit — we never store card numbers).
  • Messages you send us on WhatsApp, Instagram, Telegram or our web chat, to operate our concierge service (including automated AI-assisted replies with human oversight).
  • Guestlist and promoter-table applications: name, Instagram handle, an optional photo, and an over-21 confirmation.
  • Technical data: IP address and basic device information, for security and rate limiting.

3. How we use it

To confirm and manage your bookings (including QR entry passes), send booking confirmations and reminders (WhatsApp/e-mail), answer your requests 24/7, moderate applications, prevent fraud and improve our service. We do not sell personal data.

4. Sharing

Booking details are shared with the venue you book. Service providers we rely on: Xendit (payments), Meta/WhatsApp, Telegram (messaging), Resend (e-mail), Cloudflare (network), Google (maps), Anthropic (AI assistance for chat replies), PostHog (site analytics, hosted in the United States). Each receives only what is necessary.

5. Retention

Bookings are kept for accounting and dispute purposes. Declined promoter applications lose their photo immediately and are deleted within 30 days. You may request deletion of your account and data at any time.

6. Your rights

You can request access, correction, deletion or a copy of your data by writing to [email protected]. If you message us on WhatsApp, Instagram or Telegram, those platforms' own privacy policies also apply.

7. Cookies

We use essential cookies (session/authentication) and analytics cookies set by PostHog, which measure how the site is used: pages visited, approximate location, device type, errors and recordings of browsing sessions, in which what you type into forms is masked. When you are signed in, these are linked to your account. We use no advertising trackers and share none of this with advertisers.