Privacy Policy

EventFlow ("we", "our", "us") is an event management platform that helps organisations create, manage, and run events of all kinds.

• Account data: Name, email, and password when you sign up.
• Organisation data: Organisation name, type, and settings you configure.
• Event data: Events you create — names, dates, venues, descriptions.
• Registration data: Attendee info submitted through your event forms.
• Usage data: Pages visited, features used (via analytics cookies).
• Payment data: Billing info processed by our payment providers (we don't store card numbers).

• To provide and improve the EventFlow platform
• To send transactional emails (confirmations, invites, receipts)
• To send product updates — unsubscribe any time
• To process payments and manage subscriptions
• To provide customer support
• To comply with legal obligations

We do not sell your personal data. We may share data with:

• Service providers: Email, payments, hosting — all under data processing agreements.
• Legal requirements: When required by law or to protect rights and safety.

We retain your data while your account is active. When you delete your account, all associated data is removed within 30 days (except financial records required by law).

If you are in the EEA/UK, you have the right to:

• Access: Download all your data from Dashboard → Settings → Export Data.
• Rectification: Update your info in Account Settings.
• Erasure: Delete your account from Dashboard → Settings → Delete Account.
• Portability: Export data in JSON format.
• Object: Opt out of marketing emails at any time.

We use essential cookies for authentication and preferences. We also use analytics cookies to improve the product — you can decline these via the cookie banner on your first visit.

We use TLS encryption in transit, bcrypt password hashing, and regular security reviews. No system is 100% secure — please use a strong, unique password.

Privacy questions? privacy@eventflow.app