ClickOn GmbH operates the website located at https://eventor.app, the Guest List App mobile application and any Event landing pages derived or based upon technology (collectively, the “Service”). This Privacy Policy explains how the information you provide to us through the Services is used and shared.
By browsing, accessing or using the Service, you agree to the terms of this Privacy Policy.
Information We Collect
While using our Service, we may ask you to provide us with certain personal data that can be used to contact or identify you (in particular names, contact details or addresses) relating to an identified or identifiable natural person or company such as you, your clients, your employees and in particular your guests and/or your subscribers.
Personal data may include, but is not limited to: email address, name, phone number, postal address, other information (“Personal Information”).
Processing of Personal Data
You hereby instruct ClickOn GmbH to Process Personal Data for the purpose of providing the Service. ClickOn GmbH will not Process Personal Data for any other purpose. The Processing of Personal Data is carried out on your behalf. You (our Customer) are and remain the Data controller. Therefore, you shall be responsible for the compliance with applicable data protection or information privacy laws, particularly as regards the lawful transfer of Personal Data to ClickOn GmbH and/or its partners and the lawful Processing of Personal Data in general.
ClickOn GmbH commits to take and implement all appropriate technical and organisational security measures to permanently protect the confidentiality, integrity, availability and capacity of personal data and respective processing systems and services.
ClickOn GmbH commits to respond in a timely manner to requests to access, correct, return, or delete personal data also
report security breaches impacting personal data within the corresponding timeframes.
You hereby confirm that you will immediately and fully inform ClickOn GmbH if you detect any breaches, errors or discrepancies as regards the Processing of Personal Data or as regards applicable data protection or information privacy laws.
Permission
You hereby confirm and guarantee that all Personal Data you upload, import, store, access and otherwise make available to ClickOn GmbH and/or our authorised Partners for the provision of the Service is exclusively data that you have obtained with valid and effectual permission as required by applicable law (e.g. explicit and informed consent) from the Data Subjects for the Processing of such Personal Data by you, ClickOn GmbH and/or our authorised Partners for the purpose of the Service.
Log Data
We collect information that your browser sends whenever you visit our Service (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.
We do not use Google Analytics and we do not run advertising or remarketing of any kind. The processors that receive technical and usage data are named under “Service providers we use” below.
When you access the Service by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, your location information and other statistics.
Cookies
Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and transferred to your device. We use cookies to collect information in order to improve our services for you.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.
Do Not Track Disclosure
We do not support Do Not Track (“DNT”). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.
You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
How We Use and Share Your Information
You authorize us to use Personal Information, Log Data and information collected from Cookies (collectively, the “Information”) for the purpose of providing the Service, identifying and communicating with you, responding to your requests/inquiries, servicing your purchase orders, informing you about our services, soliciting your feedback and improving our services.
We do not sell your data, we do not share it for advertising, and we do not share it with anyone for their own purposes. We do rely on a small number of named service providers to run Eventor at all — hosting, payments, email delivery, support and error diagnostics. They process data only on our instructions and only to deliver the Service. They are listed below by name, so that you can check the list rather than take a promise on trust.
Apart from those providers, we disclose personal data only where the law requires it, or where it is necessary to establish or defend a legal claim.
Service providers we use
Each of these processes personal data on our behalf, under contract, only to deliver the Service. We keep this list current; if we add a processor that handles personal data, we update it here.
| Provider | What it does | What it sees |
|---|---|---|
| Google Cloud / Firebase (Google LLC) | Hosting, database, file storage, sign-in | All data you and your guests put into Eventor |
| Stripe, Inc. | Subscription payments | Your billing details. Card numbers go straight to Stripe and never reach our systems |
| Resend (Plus Five Five, Inc.) | Sending transactional email — invitations, confirmations, receipts | Recipient name and email address, and the content of that email |
| Intercom, Inc. | Customer support messaging in the app and on the website | Your name, email address and the conversations you have with us |
| LogRocket, Inc. | Diagnosing faults in the web app | Technical session data from the web app. Guest names and email addresses are masked before they leave your browser |
| Sentry (Functional Software, Inc.) | Error and crash reporting | Technical error data, including which account the error happened in |
| Cloudflare, Inc. | Website delivery and protection against attack | Technical request data for eventor.app, including IP address |
Where your data is stored
Eventor runs on Google Cloud in the United States — the database in the nam5 multi-region, files in US Cloud Storage, and the application servers in us-central. Our other providers are also US companies and may process data in the United States and elsewhere.
If you are in the EU, the UK or Switzerland, that is a transfer out of your country, and we rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents) with these providers. If you are in Australia, it is a disclosure of personal information to an overseas recipient within the meaning of Australian Privacy Principle 8.
How long we keep data
- An event you delete is erased permanently, with its guest list, check-in history, notes and photos, within 24 hours. An event still in the future is given 48 hours, because deleting next week’s event by mistake is the expensive mistake and the extra time gives you a chance to notice.
- An account you delete is erased within 30 days of the request, along with the events, guests and files belonging to it.
- Backups exist so that we can recover from a failure: point-in-time recovery covering the last 7 days, and encrypted database exports kept for 30 days. Data you have deleted can survive in a backup until it ages out.
- Support conversations are kept while you are a customer and for 2 years afterwards.
- Invoices and payment records are kept for 10 years, because Swiss accounting law requires it.
Your rights
You can ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict or object to how we use it, and tell us to stop sending you marketing. Write to support@eventor.app and we will answer within 30 days.
Much of this you can do yourself: your profile page holds your own details, deleting an event erases its guest data on the timetable above, and you can delete your whole account from the app.
If you are a guest whose details were put into Eventor by an event organiser, that organiser decides what happens to your data, not us — we hold it on their behalf. Please contact them first. If you cannot reach them, write to us and we will help you make contact.
You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or in the EU, the UK or Australia your national regulator.
Communications
We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.
Data That Does Not Identify You
In an ongoing effort to better understand our users and our Services, we may analyze Information in aggregate form in order to operate, maintain, manage, and improve the Service. This aggregate information does not identify you personally. We may share this aggregate data with our affiliates, agents, and business partners. We may also disclose aggregated user statistics in order to describe our products and services to current and prospective business partners and to other third parties for other lawful purposes.
When you use our Services, we collect statistical information about the usage of a group and/or an event in an anonymized form. This information does not identify you personally, We may share this information with you as well as with our affiliates, agents, and business partners.
Business Transaction
If ClickOn GmbH is involved in a merger, acquisition or asset sale, your Personal Information may be transferred as a business asset. In such cases, we will provide notice before your Personal Information is transferred and/or becomes subject to a different Privacy Policy. We may share some or all of your Information with any of our parent companies, subsidiaries, joint ventures, or other companies under common control with us.
Security
The security of your Personal Information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure.
However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal Information we have collected from you. In particular, e-mail sent to or from the Service may not be secure, and you should, therefore, take special care in deciding what information you send to us via e-mail.
Links To Other Sites
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Children’s Privacy
Only persons age 18 or older have permission to access our Service. Our Service is not directed to anyone under the age of 13 (“Children”).
We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you learn that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from children under age 13 without verification of parental consent, we take steps to remove that information from our servers.
Changes To This Privacy Policy
This Privacy Policy is effective as of the date stated at the top of this Privacy Policy.
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. Please be aware that, to the extent permitted by applicable law, our use of the Information is governed by the Privacy Policy in effect at the time we collect the Information.
If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us or by placing a prominent notice on our website.
Contact Us
If you have any questions about this Privacy Policy or our treatment of the information you provide us, please write to us by email support@eventor.app.
