Privacy Policy

Event Foundry ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, and business information when you create an account
• Profile Information: Company name, role, preferences, and other details you add to your profile
• Content: Moodboards, designs, images, and other content you create or upload
• Communications: Messages, feedback, and correspondence when you contact us
• Payment Information: Billing address and payment details (processed securely by third-party payment processors)

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type, and unique device identifiers
• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies: Information collected through cookies, pixel tags, and similar technologies (see Section 7)

1.3 Information from Third Parties

We may receive information about you from third-party services you connect to Event Foundry, including:

• Canva: Design metadata, thumbnails, user profile information (display name, profile image) when you connect your Canva account
• Pinterest: Pin data and images when you import from Pinterest
• Authentication Providers: Basic profile information if you sign in using third-party authentication

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Provide and Maintain the Service

• Create and manage your account
• Enable you to create, save, and share moodboards and designs
• Process transactions and send related information
• Provide customer support and respond to inquiries

2.2 Improve and Develop the Service

• Analyze usage patterns to improve functionality and user experience
• Develop new features, products, and services
• Conduct research and analytics
• Test and troubleshoot new features

2.3 Communicate with You

• Send service-related notices and updates
• Respond to your comments, questions, and requests
• Send promotional communications (with your consent)
• Provide information about new features or changes to the Service

2.4 Ensure Security and Compliance

• Detect, prevent, and address fraud, abuse, and security issues
• Enforce our Terms of Service and other policies
• Comply with legal obligations
• Protect the rights, property, and safety of Event Foundry and our users

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Your Consent

We may share information when you direct us to do so or give us explicit consent.

3.2 With Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Cloud hosting and infrastructure (e.g., Vercel, Supabase)
• Payment processing
• Analytics and monitoring
• Customer support tools
• Email delivery services

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

3.3 With Business Partners

If you access the Service through an event rental company (Tenant), we may share relevant information with that Tenant to enable them to provide services to you.

3.4 For Legal Reasons

We may disclose information if we believe disclosure is necessary to:

• Comply with applicable law, regulation, or legal process
• Protect the rights, property, and safety of Event Foundry, our users, or others
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service

3.5 Business Transfers

If Event Foundry is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

4.1 Retention Periods

• Account Data: Retained while your account is active and for 30 days after deletion to allow for recovery
• Content: Retained while your account is active; deleted upon account termination
• Usage Data: Aggregated and anonymized data may be retained indefinitely for analytics
• Transaction Records: Retained for 7 years for tax and legal compliance
• Communication Records: Retained for 2 years after the last interaction

4.2 Deletion

When you delete your account or request data deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law or legitimate business purposes.

5. Your Rights and Choices

5.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of your data in a portable format.

5.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

5.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions required by law.

5.4 Restriction and Objection

You have the right to restrict or object to certain processing of your personal information.

5.5 Withdraw Consent

Where we rely on consent for processing, you have the right to withdraw consent at any time.

5.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at hello@eventfoundry.co. We will respond to your request within 30 days.

6. Regional Privacy Rights

6.1 European Economic Area (GDPR)

If you are in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful Basis: We process your data based on consent, contractual necessity, and legitimate interests
• Contact: For GDPR inquiries, email hello@eventfoundry.co
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
• International Transfers: We use Standard Contractual Clauses for transfers outside the EEA

6.2 California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide an opt-out mechanism
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Authorized Agent: You may designate an authorized agent to make requests on your behalf

To exercise your California privacy rights, contact us at hello@eventfoundry.co or call us at the number provided on our website.

6.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your rights under your local laws, please contact us.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security, preferences)
• Analytics Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

7.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals, as there is no industry standard for this feature.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls and employee training
• Incident response procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Third-Party Services

Our Service may contain links to or integrations with third-party services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you access through our Service.

9.1 Third-Party Integrations

When you connect third-party services (such as Canva or Pinterest) to Event Foundry:

• We access only the data necessary to provide the integration features
• We do not store your third-party credentials
• You can disconnect integrations at any time through your account settings
• Disconnecting an integration will revoke our access to that service

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Binding corporate rules for intra-group transfers

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for material changes)

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Event Foundry
Email: hello@eventfoundry.co
Website: eventfoundry.co

We will respond to your inquiry within 30 days.