Privacy Policy

This Privacy Policy explains how Eventringo collects, uses, stores, shares, and protects personal data when you use our website, web application, event pages, shared galleries, interactive event modules, event passes, and related services.

The Service is provided by:

Filip Lněnička

Address: Trávníčkova 3, Brno, 61400, Czech Republic

Email: support@eventringo.com

IČO: 22028081

Podnikatel zapsaný v živnostenském rejstříku.

Website: https://eventringo.com

In this Privacy Policy, "Eventringo", "we", "us", and "our" refer to the provider of the Service. "You" refers to any person using the Service, including event organizers, guests, participants, account holders, and visitors.

By using Eventringo, you acknowledge that your personal data will be processed as described in this Privacy Policy.

Eventringo is an online platform that allows event organizers to create interactive event experiences.

The Service may include features such as:

• event invite pages;
• private event links, QR codes, or join codes;
• guest photo uploads;
• shared event galleries;
• photo bingo;
• photo contests or voting features;
• guest questions or anonymous question features;
• quiz prompts or other interactive prompts;
• live screen or big-screen mode;
• moderation tools;
• gallery exports or downloads;
• branding features;
• event setup and management tools;
• free events and paid one-time event passes;
• beta, preview, or experimental modules.

Eventringo is commonly used for weddings, birthdays, parties, corporate events, festivals, fairs, balls, and other social or professional events.

For personal data processed for the operation of Eventringo, the data controller is:

Filip Lněnička

Address: Trávníčkova 3, Brno, 61400, Czech Republic

Email: support@eventringo.com

IČO: 22028081

Podnikatel zapsaný v živnostenském rejstříku.

Website: https://eventringo.com

We are the data controller for personal data related to:

• organizer accounts;
• free events and paid event passes;
• billing, payment, refund, and purchase records;
• support communication;
• platform administration;
• security;
• service operation and performance;
• transactional communication;
• optional marketing consent records;
• legal compliance.

For certain event-related data, the event organizer may also act as an independent data controller, especially where the organizer decides:

• who is invited to the event;
• what event content is created;
• what photos or other content are collected;
• what prompts, games, contests, or questions are used;
• whether the event or gallery is accessible by link, code, or restricted access;
• whether uploaded content is moderated before display;
• how event photos or other event content are exported or used after the event.

In those cases, Eventringo provides the technical platform, while the organizer is responsible for the lawful setup and use of their event.

We collect different types of personal data depending on how you use the Service.

3.1 Organizer Account Data

When you create or use an organizer account, we may collect:

• email address;
• name or display name, if provided;
• login credentials or authentication identifiers;
• account settings;
• event ownership information;
• free event or paid event pass information;
• event limits, storage limits, and selected package information;
• purchase, refund, and billing status;
• support requests;
• communication preferences;
• marketing consent preference, if you choose to provide it.

If you sign in using a third-party provider, such as Google or another authentication provider, we may receive basic account information from that provider, such as your email address and account identifier.

3.2 Participant / Guest Data

When you join an event, we may collect:

• display name or nickname;
• event membership or participation record;
• uploaded photos or media;
• bingo progress or submissions;
• photo contest votes or submissions;
• guest questions or anonymous question submissions;
• quiz answers or prompt responses;
• event interactions;
• timestamps of activity;
• technical data related to your session.

Depending on the event settings, participants may join without a permanent account, or the organizer may require authentication.

If a feature is described as anonymous in the event experience, this usually means that your name or identity may not be shown to other participants in that feature. We may still process technical data, timestamps, event identifiers, or security-related information as necessary to operate, secure, moderate, or troubleshoot the Service.

3.3 Event Data

When an organizer creates or manages an event, we may process:

• event name;
• event description;
• event date, start date, end date, and timing settings;
• event invite page content;
• private join code, event link, or QR code;
• gallery visibility settings;
• moderation settings;
• custom branding;
• bingo prompts;
• quiz questions or prompts;
• guest question settings;
• photo contest settings;
• uploaded event media;
• event activity and engagement statistics;
• guest limits, storage limits, and package limits;
• event access period and expiration date.

Some of this information may be visible to event participants or anyone with access to the event link or code, depending on the organizer’s settings.

3.4 Uploaded Photos and Media

Eventringo allows participants and organizers to upload photos or other supported media.

Uploaded photos may contain personal data if individuals are identifiable in them.

Photos may include:

• faces;
• location-related context;
• event context;
• metadata, if not removed or minimized;
• other identifiable information visible in the image.

We may process uploaded photos to:

• store them;
• display them in galleries;
• generate thumbnails;
• compress or resize them;
• moderate content;
• enable exports or downloads;
• improve loading performance;
• provide technical support;
• detect abuse or security issues.

3.5 Payment, Billing, and Refund Data

If you purchase a paid event pass, payments are processed by third-party payment providers such as Stripe.

We may process:

• payment status;
• selected event pass or package;
• purchase date;
• billing period or access period;
• purchase history;
• invoice or receipt information;
• customer identifier from the payment provider;
• refund request status;
• refund eligibility status;
• refund history;
• payment dispute or chargeback information.

We do not directly store full payment card numbers.

Payment providers process payment data under their own terms and privacy policies.

3.6 Refund Eligibility and Event Usage Signals

To provide refund-related features, we may process basic event usage signals, such as:

• purchase date;
• whether a refund was requested;
• whether photos or media have been uploaded;
• whether guest activity occurred;
• whether the gallery was exported or downloaded;
• whether live screen or big-screen mode was used;
• whether bingo, contests, questions, quizzes, prompts, or other interactive modules received activity;
• whether the event appears to have been actively used.

We use this data to determine whether an event may be shown as eligible for an automatic refund, to prevent abuse, to resolve disputes, and to comply with applicable legal obligations.

3.7 Technical and Usage Data

When you use the Service, we may collect technical data such as:

• IP address;
• browser type;
• device type;
• operating system;
• pages visited;
• time and date of access;
• referral source;
• error logs;
• performance data;
• security logs;
• approximate location derived from IP address;
• device or session identifiers;
• upload, download, and request metadata.

We use this data to operate, secure, debug, and improve the Service.

3.8 Support and Communication Data

If you contact us, we may process:

• your email address;
• message content;
• attachments you provide;
• account or event identifiers;
• purchase or refund identifiers;
• support history;
• metadata related to the communication.

We use this data to respond to your request and provide support.

We use personal data for the following purposes.

4.1 To Provide the Service

We use data to:

• create and manage accounts;
• create and manage events;
• allow participants to join events;
• enable photo uploads;
• display shared galleries;
• run photo bingo, photo contests, guest questions, quizzes, prompts, and other event modules;
• provide live screen or big-screen mode;
• moderate event content;
• generate exports or downloads;
• store event data;
• enforce event pass limits;
• calculate event expiration dates;
• delete expired event data according to the applicable retention rules.

4.2 To Process Payments and Refunds

We use payment and refund-related data to:

• process purchases;
• issue invoices or receipts;
• manage paid event pass access;
• detect failed payments;
• process eligible refunds;
• evaluate refund requests;
• prevent fraud and chargeback abuse;
• manage access to paid features;
• comply with accounting, tax, and consumer protection obligations.

4.3 To Communicate With You

We may send:

• account-related emails;
• login or authentication emails;
• payment and refund emails;
• event-related notifications;
• security alerts;
• support replies;
• service updates;
• transactional messages.

We do not use transactional service emails as marketing emails.

4.4 To Improve and Secure the Service

We may use data to:

• monitor performance;
• fix bugs;
• prevent abuse;
• detect suspicious activity;
• improve user experience;
• improve event flows;
• protect the Service from unauthorized access;
• ensure platform reliability;
• enforce our Terms of Service.

4.5 Marketing Communication

If you choose to opt in to marketing emails or product updates, we may store your consent preference and use your email address to send Eventringo-related marketing, product updates, offers, or similar communications in the future.

You may withdraw your marketing consent or unsubscribe at any time.

At the time this Privacy Policy is published, we may not yet actively use a dedicated marketing email platform. If we introduce one, we may use a third-party email or marketing provider to manage mailing lists, consent records, and unsubscribe requests.

4.6 To Comply With Legal Obligations

We may process data when necessary to:

• comply with laws;
• maintain accounting and tax records;
• respond to lawful requests;
• enforce our Terms of Service;
• protect rights, safety, and security;
• resolve disputes;
• handle consumer rights requests.

Where GDPR applies, we process personal data based on one or more of the following legal bases.

5.1 Performance of a Contract

We process data where necessary to provide the Service you requested, including:

• account creation;
• event management;
• event participation;
• photo uploads;
• gallery access;
• event pass access;
• payment processing;
• refund processing;
• exports or downloads;
• support related to your account, purchase, or event.

5.2 Consent

We may rely on consent for:

• optional marketing communication;
• optional analytics or marketing cookies, if introduced in the future;
• optional features where consent is required;
• certain participant confirmations, where applicable.

You may withdraw consent at any time.

Withdrawal of consent does not affect processing that occurred before withdrawal.

5.3 Legitimate Interests

We may process data based on legitimate interests, including:

• securing the Service;
• preventing abuse;
• detecting fraud;
• preventing refund or chargeback abuse;
• maintaining logs;
• improving performance;
• responding to support requests;
• protecting our rights;
• ensuring platform reliability.

We use legitimate interests only where they are not overridden by your rights and freedoms.

5.4 Legal Obligation

We may process data to comply with legal obligations, such as:

• tax records;
• accounting;
• consumer protection requirements;
• responding to lawful requests.

5.5 Organizer Responsibility

For event content and participant data, the organizer may determine certain purposes and settings, such as:

• who is invited;
• what content is requested;
• whether guests may upload photos;
• whether a gallery is accessible by link or restricted;
• whether content requires moderation;
• how event photos or other event content are exported or used.

Organizers are responsible for ensuring that their event setup and use of participant content comply with applicable laws.

Some events or galleries may be accessible through a private but shareable link, QR code, or event code.

If an event or gallery is accessible by link or code:

• anyone with the link or code may be able to access it;
• the link or code may be shared by guests or organizers;
• the event may not be publicly indexed, but it is not fully private;
• we cannot guarantee that only intended guests will access it.

Organizers are responsible for choosing appropriate access settings and sharing event links and codes carefully.

Where available, organizers may enable restricted access, authentication requirements, moderation, or other controls.

If an event includes minors, private family situations, schools, or sensitive content, we strongly recommend using restricted access and careful moderation.

If you upload photos or media, you are responsible for ensuring that:

• you have the right to upload them;
• the upload does not violate anyone’s privacy;
• identifiable people in the photos have been photographed appropriately;
• the content is suitable for the event context;
• the content does not violate our Terms of Service.

Participants should not upload photos or media that are humiliating, invasive, illegal, explicit, harassing, or otherwise harmful.

Organizers are responsible for moderating event content and responding to removal requests related to their event.

Depending on the event settings chosen by the organizer, uploaded photos may either appear in the shared gallery immediately after upload or may require organizer approval before becoming visible to other participants, live screens, contests, or other event views.

If approval is required, uploaded photos may first be visible only to the organizer or event administrators for review.

Participants may be able to remove photos they uploaded directly through the Service, depending on event status and technical availability.

Removing a photo may remove it from the event gallery and future exports, but copies may remain temporarily in backups, logs, cached systems, or previously downloaded exports where applicable.

The Service is intended for users aged 15 and older.

If an event includes minors or is likely to include minors, organizers must take special care.

Organizers should:

• use restricted access settings where available;
• avoid public-by-link galleries for sensitive events;
• moderate uploads carefully;
• avoid inappropriate prompts, games, contests, or challenges;
• obtain parental or guardian consent where required;
• avoid using photos of minors outside the event context without appropriate permission.

We do not knowingly allow users under 15 to use the Service.

If we become aware that personal data of a person under 15 has been collected without appropriate authorization, we may delete it or restrict access.

We may remove content or restrict events if we believe they pose risks to minors.

We currently use cookies and similar technologies that are necessary for the operation of the Service.

These may be used for:

• authentication;
• session management;
• security;
• account access;
• payment flow;
• remembering essential settings;
• maintaining event sessions;
• preventing abuse.

These cookies are required for the Service to function.

We do not currently use marketing cookies, advertising cookies, or third-party tracking pixels.

We may introduce analytics or marketing cookies in the future to understand how the Service is used and to improve our product and marketing.

If we introduce non-essential analytics, advertising, or marketing cookies, we will update this Privacy Policy and, where required by law, request your consent before using them.

We use trusted third-party providers to operate the Service.

These may include:

Supabase

Used for database, authentication, backend functionality, event data, account data, and related infrastructure.

Cloudflare and Cloudflare R2

Used for DNS, security, content delivery, and storage of uploaded photos and media.

Vercel

Used for hosting and deployment of the web application.

Stripe

Used for payment processing, paid event passes, invoices, receipts, refunds, and billing-related data.

Resend or Other Email Providers

Used for transactional emails such as account, login, event, payment, refund, support, or system notifications.

MailerLite or Similar Email Tools

May be used for product communication, marketing emails, or email list management if enabled in the future.

Analytics or Monitoring Providers

May be used for product analytics, performance monitoring, error tracking, or usage insights if enabled in the future.

We may update our providers over time.

Service providers process personal data only as needed to provide their services to us and are subject to contractual obligations or their own legal responsibilities.

Some service providers may process data outside the European Economic Area.

Where personal data is transferred internationally, we rely on appropriate safeguards where required, such as:

• adequacy decisions;
• standard contractual clauses;
• data processing agreements;
• other lawful transfer mechanisms.

We store personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required by law.

Retention depends on the type of data and the applicable event access period, legal requirement, or operational need.

12.1 Account Data

Organizer account data is generally retained while the account is active.

If you request deletion of your account, we will delete or anonymize account data unless we need to retain certain information for legal, billing, tax, security, fraud-prevention, consumer-rights, or dispute-resolution purposes.

12.2 Event Data and Photos

Event data and photos are retained according to the access period of the applicable free event, paid event pass, or custom package.

Unless otherwise stated in the product, checkout flow, dashboard, or a written agreement:

• free events remain active for one year from the date they are created, claimed, or made available in the organizer account;
• paid event passes remain active for one year from the date of purchase;
• custom packages may have different retention periods if agreed separately.

Event start dates, end dates, or similar event timing settings do not extend the access period of the free event or paid event pass.

After the applicable access period expires, event data and uploaded photos are scheduled for deletion or permanent removal.

Event data may include:

• event page data;
• uploaded photos and media;
• shared gallery data;
• bingo data;
• quiz or prompt data;
• guest questions;
• photo contest data;
• participant records;
• exports;
• event settings;
• activity logs related to the event.

We may provide warnings before deletion, but we are not required to do so.

Users and organizers are responsible for exporting or saving event content before the access period expires.

Deleted data may not be recoverable.

Deletion may not occur immediately at the exact moment the access period ends, and some limited copies may temporarily remain in backups, logs, caches, or systems used for security, legal, billing, fraud-prevention, or dispute-resolution purposes.

12.3 Payment, Refund, and Billing Records

Payment, invoice, receipt, refund, and billing records may be retained as required for tax, accounting, legal, consumer protection, chargeback, fraud-prevention, or dispute-resolution purposes.

12.4 Marketing Consent Records

If you opt in to marketing emails or product updates, we may retain your consent record and communication preference until you withdraw consent, unsubscribe, or request deletion, unless we need to retain a limited record to prove compliance with legal obligations.

12.5 Support Communication

Support messages may be retained as long as necessary to resolve your request, maintain records of communication, prevent abuse, handle refunds or disputes, or protect legal rights.

12.6 Technical Logs

Technical logs may be retained for a limited period for security, debugging, performance, abuse-prevention, fraud-prevention, and service reliability purposes.

Some logs may be retained longer if required for investigation, fraud prevention, legal compliance, or dispute resolution.

You may request deletion of your personal data by contacting us at:

support@eventringo.com

Depending on the request, we may delete or anonymize:

• your account;
• your event data;
• participant records;
• uploaded photos;
• support communication where applicable;
• marketing consent records where applicable.

Some data may be retained if required for:

• legal obligations;
• accounting;
• tax records;
• fraud prevention;
• payment disputes or chargebacks;
• consumer rights handling;
• dispute resolution;
• security;
• enforcement of our Terms of Service.

If your data is part of an event created by an organizer, we may need to coordinate with the organizer or evaluate the request based on the role of each party.

If you appear in a photo uploaded to an event and want it removed, you may:

• contact the event organizer; or
• contact us at support@eventringo.com.

Please include enough information to identify the event and the photo.

We may ask for additional information to verify your request.

Where appropriate, we may remove, restrict, or ask the organizer to review the content.

Removing a photo from Eventringo does not guarantee removal from copies already downloaded, exported, screenshotted, cached, or saved by other users.

If GDPR applies to you, you may have the following rights:

• right to access your personal data;
• right to correct inaccurate data;
• right to request deletion;
• right to restrict processing;
• right to object to processing;
• right to data portability;
• right to withdraw consent;
• right to lodge a complaint with a supervisory authority.

You can exercise your rights by contacting:

support@eventringo.com

We may need to verify your identity before fulfilling certain requests.

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

If you are in the Czech Republic, the relevant supervisory authority is the Office for Personal Data Protection.

We use reasonable technical and organizational measures to protect personal data.

These measures may include:

• access controls;
• authentication systems;
• secure infrastructure providers;
• HTTPS encryption;
• storage access restrictions;
• logging and monitoring;
• backups where appropriate;
• moderation tools;
• security practices for cloud infrastructure.

However, no online service is completely secure.

You are responsible for:

• keeping your account secure;
• not sharing login credentials;
• sharing event links and codes carefully;
• selecting appropriate event privacy settings;
• reporting suspected security issues.

If you believe your account or event has been compromised, contact us at:

support@eventringo.com

The Service is intended for users aged 15 and older.

We do not knowingly collect personal data from users under 15 without appropriate authorization.

If we learn that we have collected data from a person under 15 without appropriate authorization, we may delete the data or restrict access.

Organizers are responsible for ensuring that events involving minors are appropriate and legally compliant.

We may send transactional and service-related emails that are necessary to provide the Service, such as:

• account emails;
• login or authentication emails;
• payment and refund emails;
• event-related notifications;
• security alerts;
• support replies;
• service updates.

Transactional and service-related emails are not marketing emails.

If you opt in to marketing emails or product updates, we may send marketing communications in the future. You may withdraw your consent or unsubscribe at any time.

We do not use personal data for automated decision-making that produces legal or similarly significant effects on users.

We may use automated systems to help detect abuse, spam, security risks, refund eligibility, fraud, or policy violations.

Automatic refund eligibility may be assessed using event usage signals, such as purchase date, upload activity, guest activity, export activity, or use of event features. If an event is not shown as eligible for an automatic refund, you may contact us for manual review where appropriate.

For some event-related data, especially participant data and uploaded event content, the organizer may determine the purposes of processing.

In such cases:

• the organizer is responsible for informing participants where required;
• the organizer is responsible for choosing appropriate privacy settings;
• the organizer is responsible for moderating event content where appropriate;
• the organizer is responsible for lawful reuse or publication of event photos;
• Eventringo provides the technical platform and processes data as necessary to operate the Service.

For business, school, organization, agency, or enterprise customers, a separate Data Processing Agreement may be made available where required.

We may update this Privacy Policy from time to time.

When we update it, we will change the "Last updated" date above.

If changes are significant, we may notify users by email, in-app notice, website notice, or another reasonable method.

Your continued use of the Service after an updated Privacy Policy becomes effective means that you acknowledge the updated policy.

If you have questions, requests, complaints, refund-related privacy questions, or concerns about this Privacy Policy or our processing of personal data, contact us at:

Eventringo Filip Lněnička

Address: Trávníčkova 3, Brno, 61400, Czech Republic

Email: support@eventringo.com

IČO: 22028081

Podnikatel zapsaný v živnostenském rejstříku.

Website: https://eventringo.com

We may ask you to verify your identity before responding to certain privacy-related requests.