Privacy Policy

1. Introduction

Eventtree, Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at eventtr.ee ("the Platform"). By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

Information You Provide

• Account information: Name, email address, password, and username when you create an account
• Profile information: Profile photo, bio, and business name (for Hosts)
• Event information: Event details, descriptions, images, and venue information uploaded by Hosts
• Payment information: Billing details processed through Stripe (we do not store full credit card numbers)
• Communications: Messages sent through the Platform and customer support inquiries

Information Collected Automatically

• Usage data: Pages visited, features used, and actions taken on the Platform
• Device information: Browser type, operating system, and device identifiers
• Log data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Platform
• Process ticket purchases and payments
• Send order confirmations and ticket delivery emails
• Facilitate payouts to event Hosts
• Communicate with you about your account, events, and updates
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Generate anonymized analytics to improve our services

4. How We Share Your Information

We may share your information with:

• Event Hosts: When you purchase tickets, Hosts receive your name and email address for attendee management and check-in purposes.
• Payment processors: Stripe processes all payments. Your payment information is handled according to Stripe's privacy policy and PCI DSS standards.
• Service providers: We use Resend for email delivery. These providers process data on our behalf and are contractually obligated to protect your information.
• Legal requirements: We may disclose information when required by law, court order, or to protect the rights, property, or safety of Eventtree, our users, or others.

We do not sell your personal information to third parties for advertising or marketing purposes.

5. Payment Security

All payment processing is handled by Stripe, a PCI Level 1 certified payment processor. We never store, process, or have access to your full credit card numbers. Payment data is encrypted in transit and at rest by Stripe. For more information, see Stripe's Privacy Policy.

6. Cookies and Tracking

We use essential cookies to maintain your login session and remember your preferences. These cookies are necessary for the Platform to function and cannot be disabled. We do not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

We retain your account information for as long as your account is active. Transaction records (orders, tickets, payouts) are retained for 7 years for legal and tax compliance. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a machine-readable copy of your data
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@eventtr.ee.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information is being collected, request deletion of your personal information, opt out of the sale of personal information (note: we do not sell personal information), and not be discriminated against for exercising your privacy rights. To make a CCPA request, email privacy@eventtr.ee.

10. Data Security

We implement industry-standard security measures to protect your information, including HTTPS encryption for all data in transit, secure password hashing (bcrypt), role-based access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Platform, you consent to the transfer of your information to the United States and other countries where we and our service providers operate.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or sending you an email. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: