Privacy Policy

1. Introduction

Eventi ("we", "our", or "us") provides a digital guestbook and photo-sharing platform for events. This policy explains what personal data we collect, why we collect it, and what rights you have. It applies both to event hosts with an account and to guests who upload content to an event. Eventi is the data controller for the processing described in this policy. You can reach us at info@eventiguestbook.app.

2. Information We Collect

We collect the following information:

• Account information: your name and email address when you purchase an event or sign in.
• Event information: the name, date, type, and settings of the events you create.
• Guest contributions: photos, videos, voice messages, and guestbook messages uploaded to an event, along with the name a guest chooses to provide.
• Payment information: purchases are handled by our payment provider; we receive order details but never your full card details.
• Technical data: IP address, browser and device information, and usage data — used for security (such as rate limiting), troubleshooting, and analytics.
• Communications: messages you send us, for example support requests.

3. How We Use Your Information

We use this information to:

• Provide the Service: create your event, process uploads, display your gallery, and prepare downloads
• Send service emails, such as sign-in links, receipts, and download notifications
• Keep the Service secure and prevent abuse
• Understand how the Service is used so we can improve it
• Measure the effectiveness of our marketing
• Comply with legal obligations

4. Legal Bases for Processing (GDPR)

We process personal data on the following legal bases:

• Performance of a contract — to provide the Service you or the event host purchased
• Legitimate interests — to secure and improve the Service and market our own products
• Consent — where required, for example for certain cookies and marketing technologies
• Legal obligation — for example bookkeeping requirements

5. Cookies and Analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. We use PostHog for product analytics, hosted in the EU. On our marketing pages we also use advertising pixels (such as Meta, Pinterest, and Reddit) to measure the effectiveness of our advertising. You can control or delete cookies through your browser settings.

6. How We Share Your Information

We never sell your personal data. Content uploaded to an event is visible to the event host and to anyone with access to that event's gallery, according to the host's settings.

We share data with service providers who help us operate Eventi, under data processing agreements:

• Hosting and infrastructure (Vercel)
• Database and authentication (Supabase)
• File storage for photos, videos, and audio (Amazon Web Services)
• Payment processing (Polar)
• Email delivery
• Error monitoring (Sentry)
• Product analytics (PostHog, EU-hosted)

7. International Transfers

Your content is primarily stored within the EU/EEA. Some of our service providers may process data in other countries, including the United States. Where that happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

8. Data Retention

Event galleries and uploaded content are retained for 12 months from the event date, after which they are permanently deleted. Account information is kept for as long as you have an account with us. We may retain certain information for longer where the law requires it (for example bookkeeping records). You can request earlier deletion at any time.

9. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted ("right to be forgotten")
• Restrict or object to our processing of your data
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise your rights, contact us at info@eventiguestbook.app. You also have the right to lodge a complaint with your data protection authority — in Sweden, the Swedish Authority for Privacy Protection (IMY).

10. Guests and People Appearing in Uploads

Guests do not need an account to upload content. If you appear in a photo, video, or voice message uploaded to an event and want it removed, contact the event host or email us and we will help. Event hosts are responsible for informing their guests that content uploaded to the event is shared in the event gallery.

11. Security

We protect your data using encryption in transit and at rest, access controls, and time-limited signed links for media access. No method of transmission or storage is 100% secure, but we work continuously to safeguard your information.

12. Children

The Service is not directed at children, and we do not knowingly collect personal data directly from children. Photos from events may include children; the event host and the uploading guest are responsible for having the necessary consent.

13. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date. If a change is significant, we will notify you more prominently, for example by email.

14. Contact Us

If you have questions about this policy or how we handle your data, contact us at info@eventiguestbook.app.