Privacy Policy
Version 1 · Proposed effective date:
Scope and contact
This policy describes eventanew accounts, guest participation, event media and support. eventanew is for ages 13 and up. We do not knowingly support under-13 accounts or contributions. Contact support@eventanew.com for privacy requests or suspected underage use.
Data we collect and why
- Account name, email, optional profile image, authentication identifiers and terms acceptance: to operate host accounts and associate uploads.
- Event details, photos, videos, file metadata, reactions, access requests and reports: to deliver galleries, process uploads, provide downloads and moderate content. Original media may contain embedded metadata.
- Guest device and session identifiers, and a display name or verified email when required by the event: to verify access and associate your uploads. Guest contact is excluded from public gallery and attendee responses; there is no attendee contact-sharing feature.
- Payment references, plan and billing status: to apply purchased entitlements. Stripe handles payment details; eventanew does not store full card numbers.
- Network and security signals, including hashed IPs, limited device information, access failures, audit records and scrubbed error diagnostics: to prevent abuse, investigate incidents and operate the service. Infrastructure providers necessarily receive network connection information.
- Support messages and identity-verification information: to answer requests without disclosing another person’s account data.
Guest verification is not marketing consent. Product emails are limited to verification codes, destructive lifecycle warnings, payment or quota jeopardy and account-deletion notices. Clerk sends authentication mail; Stripe sends receipts and billing notices. We do not send marketing mail or share attendee contacts for marketing.
Who can see content
OPEN events are unlisted public-read. Anyone who receives the link can view published media; a private-looking URL does not make it confidential. Hosts choose access controls and moderate content. Authorized viewers may save copies. Guest identities are resolved within an event; cross-event association is limited to abuse prevention, your request or another disclosed privacy use.
We share information with service providers as needed to operate eventanew and may disclose information to meet legal obligations or address abuse. We do not sell personal data or share it for cross-context behavioral advertising.
Service providers
- Clerk — registered-account authentication and recovery.
- Convex — database, backend functions, realtime updates and scheduling.
- Vercel — website hosting and application delivery.
- Cloudflare R2, CDN, Images, Stream and Workers — media storage, image processing, video playback and delivery.
- Cloudflare Turnstile — challenges when suspicious activity requires verification.
- Stripe — checkout, billing, receipts and payment disputes.
- Resend — guest verification and the transactional email categories above.
- Sentry — scrubbed error reporting. Session metrics, performance analytics and session replay are disabled.
No analytics vendor is enabled today. Optional analytics require your consent. Provider processing locations, contractual safeguards and international transfer arrangements must be confirmed before publication.
Retention
| Data | Retention |
|---|---|
| Active or archived events and media | Until host deletion, free-event reset or account wipe; archive retains content. |
| Removed media | 7-day grace after removal, then storage cleanup. |
| Abandoned uploads and multipart parts | 24 hours. |
| ZIP exports | Streamed without a stored archive; download tokens expire after 5 minutes. |
| Deleted accounts | 14-day cool-off, then content and personal details are removed; a de-identified tombstone, free-grant eligibility record, legally required billing artifacts, and lifecycle-notice records described below may remain. |
| Lifecycle notices and delivery records | Retained until 365 days after the scheduled deletion or reset time, including the encrypted recipient address and stored email body. These records can remain after an account is deleted and are removed by the retention sweep after expiry. |
| Verification challenges | Deleted within 24 hours after expiry or use. |
| Expired guest contact information | Erased within 30 days after session expiry. De-identified attribution and merged-identity records may remain through event retention. |
| Webhook records, failed access attempts, operator fault notices and application logs | 30 days. |
| Security, billing and moderation audits | 1 year; successful unlock records 90 days, failed unlock records 30 days, support-access audits 2 years. |
| Rate-limit state | For the applicable rate-limit window or token-bucket operation. |
| Platform billing catalog | Indefinite; this is platform product data. |
Storage cleanup is retried on failure, so deletion is not instantaneous. Required legal preservation can extend retention. Backup retention and erasure handling must be confirmed with the backup rollout before publication.
Your choices and requests
Use Cookie settings in the footer to reject optional analytics or change your choice. Essential cookies continue to support access and safety. See the Cookie Policy.
Contact support to request access, correction, export or deletion of your personal information, or exercise applicable privacy rights. We verify identity before discussing account facts and exclude other people’s private information from exports. Hosts can export media through ZIP downloads. Applicable rights, response periods, lawful bases and supervisory-authority contacts depend on jurisdiction and require counsel confirmation before launch.
For copyright-related privacy concerns, use support@eventanew.com. Please identify the event or item without sending secrets or sensitive media attachments.