Privacy Policy
Effective Date: [Insert date]
This Privacy Policy explains how eventanew ("we," "us," "our") collects, uses, and shares information when you use eventanew (the "Service").
1. Information We Collect
| Type | Examples | Purpose |
|---|---|---|
| Account Data | Name, email, hashed password | To create and manage accounts |
| Event Data | Event name, settings, access URL, QR code | To generate and manage events |
| Media Uploads | Photos/videos (with EXIF data) | To store and display event media |
| Technical Data | IP address, browser, device type, usage logs, cookies | To secure and operate the Service |
| Storage | File metadata and storage keys | To upload or retrieve event media |
2. How We Use Information
- To provide and maintain the Service.
- To host, store, and manage event media.
- To authenticate users and secure accounts.
- To communicate about your account or events.
- To improve performance, troubleshoot, and analyze usage.
- To comply with legal obligations.
3. Event Access and Sharing
- Events are accessible only via unique, unlisted URLs and QR codes that are not publicly indexed.
- Access is limited to individuals who possess the event link or QR code.
- Event owners control distribution of these links and are responsible for who can access their event.
- We do not make events searchable or visible to the public.
4. Children's Privacy (COPPA Compliance)
- Our Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13.
- If we learn that a child's personal data (including identifiable images) has been uploaded without proper authorization, we will delete it promptly.
- Event owners are responsible for obtaining parental or guardian consent when uploading content that includes minors.
5. Cookies and Local Storage
We use cookies and local storage to:
- Maintain session and login state,
- Cache photos and preferences, and
- Improve performance.
You may disable cookies in your browser, but some features may not function properly.
6. Data Storage and Security
- Media is stored securely in AWS S3 cloud storage.
- Data is encrypted in transit (TLS/HTTPS) and at rest where applicable.
- Passwords are hashed using strong algorithms (e.g., bcrypt or Argon2).
- We limit employee access and regularly review security practices.
7. Data Retention
- We retain user accounts and media as long as necessary to provide the Service.
- Event owners may delete events or media at any time.
- Deleted data is removed from active storage within 30 days.
8. Your Rights
Depending on your region, you may have rights to:
- Access, correct, or delete personal data.
- Withdraw consent or object to processing.
- Request data portability.
To exercise these rights, contact us at [email protected]
9. Sharing of Data
We may share data with:
- Cloud providers (AWS) for hosting and storage,
- Analytics or support vendors, and
- Legal authorities when required by law.
We do not sell or rent personal data.
10. International Transfers
Your data may be processed in countries where we or our service providers operate. We implement appropriate safeguards for such transfers.
11. Changes
We may update this Privacy Policy periodically. The latest version will always be available at eventanew.com/privacy.
12. Contact
Questions?
📧 [email protected]