Privacy policy

This policy explains how Event70 handles the information you give us when you use the app and this website. We have written it in plain language. If anything is unclear, email us and we will explain.

This is a general summary of our practices and is not legal advice. We will update it as the product evolves.

Account information you provide, such as your name and email address when you sign up.

Event data you create in the app, such as your run of show, checklist, guest list, budget and vendor details.

Guest details that event organisers add or that guests submit on a public RSVP page, such as name, contact details and RSVP answers.

Usage information from Google Analytics (GA4) on our website and in the app, including page views and product events such as signing up, creating an event and starting checkout. Analytics events carry a hashed user reference (a SHA-256 hash of your account id, truncated) and your plan (free or paid), not your name or email address. Google Analytics runs only where we have configured its measurement ID, and may set its own cookies.

Error and diagnostic information sent to Sentry when something breaks. Before it leaves the app, we remove secrets, email addresses, phone numbers, tokens and query strings, and we do not send request bodies, headers or user ids by default.

Feedback you send with the Send feedback control. It is delivered through Sentry's feedback form, and that form uses the email address on your account.

Billing details handled by Stripe when you subscribe to Pro. We do not store your full card number.

Event brief text you enter into AI assist. This is sent to a third-party model provider through OpenRouter to draft a run of show or checklist. Do not include sensitive personal data in the brief.

To provide the service: storing your events and showing them back to you and the people you share them with.

To operate, secure and improve the product, to fix errors, and to respond when you contact support.

To send service messages such as account, billing and security notices, sent through our transactional email provider. We do not sell your personal information.

We rely on these providers to run Event70. Each receives only the information it needs for its function.

Supabase: authentication and the Postgres database that stores your account and event data.

Stripe: payment processing and subscription billing.

OpenHelm Mail: transactional email, such as sign-in and service messages.

Sentry: error reporting, logs and feedback, as described above.

Google Analytics (GA4): website and product analytics, where configured.

OpenRouter: routes AI assist requests to a model provider, only when you use AI assist.

We share information only with the service providers listed above, under agreements that limit their use of it, and only as far as they need it to run the product.

We may disclose information if required by law. Guest and event data is visible to the people you choose to share an event with.

We keep your data for as long as your account is active. If you delete an event or your account, we remove the associated data, subject to reasonable backup and legal retention periods.

You can access and update your account information in the app, and you can delete events or your account at any time.

If you want a copy of your data or want it removed, email us and we will help.

We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure, so we encourage strong, unique passwords for your account.

We will update this policy as the product changes and will note the effective date when we do. Continued use of the service means you accept the current version.