Privacy Policy
This Privacy Policy explains how Eventscue, operated as a sole proprietorship ("Eventscue", "we", "us"), collects, uses, shares, and protects personal data when you use the Eventscue website and application (the "Service"). Eventscue is a business-to-business account- and event-intelligence tool intended for use by professionals; it is not directed to children and we do not knowingly collect data from anyone under the age of 16.
1. Who we are
The data controller is Eventscue, operated as a sole proprietorship. For any privacy question, or to exercise your rights, contact us at hello@eventscue.com; a postal address is available on request.
2. Data we collect
a. Account & usage data (data you give us)
- Account details: your name, email address, workspace name, and password (stored hashed by our authentication provider). We store a consent timestamp when you accept this Policy and the Terms at sign-up.
- Ideal-customer profile (ICP): the industries, regions, buyer titles, company sizes, competitors, and notes you enter to run research.
- Usage & diagnostic data: logs, timestamps, and error data generated as you use the Service, used to operate and secure it.
b. Research data about third parties (data we process on your behalf)
To do its job, the Service builds an event catalog containing limited professional information about people connected to public B2B events, namely a person's name, job title, employer, employer domain, the way they participate in an event (e.g. speaker, sponsor), and the public source URL and text snippet that evidenced it. This information is gathered only from surfaces that are already public: an event's own speaker / agenda / sponsor pages, and public search-engine results. We deliberately do not collect email addresses, phone numbers, or home/private addresses, and we never fetch LinkedIn pages. Where a search-result snippet references LinkedIn, the search engine is the source, not LinkedIn.
Our lawful basis for processing this professional data is our and our customers' legitimate interest (GDPR Art. 6(1)(f)) in B2B event prospecting, balanced against the rights of the people concerned. Our internal Legitimate Interest Assessment is available on request. The catalog is shared across customer workspaces, but each customer can only see catalog people for events on their own radar.
3. How we use data
- To provide the Service: research your ICP into ranked accounts, map events, and surface likely event participants for your review.
- To operate, secure, debug, and improve the Service.
- To communicate with you about your account and service-related matters.
- To comply with legal obligations.
We do not sell personal data. Outputs are provided to you for a human reviewer to act on; the Service does not send outreach on your behalf and performs no automated decision-making with legal or similarly significant effects.
4. How we share data
- Service providers (processors): providers that help operate the Service, under contract and only as needed. Currently: Supabase (authentication, database, and hosting), OpenAI (LLM processing), Serper and Google (search), and Hostinger (server hosting).
- Legal: where required by law or to protect rights, safety, and security.
- Business transfers: in connection with a merger, acquisition, or asset sale.
5. International transfers
Data may be processed in the United States. Where data leaves your region, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. Retention
- Account & ICP data: kept for the life of your account and deleted or anonymised within 30 days of account closure (immediately for data you delete yourself, with residual backups purged within 30 days), subject to legal retention needs.
- Cached search results: expired on a rolling basis (currently a 7-day window).
- Event-catalog people: retained while the associated event remains relevant; a bounded retention window (target: 18 months from the latest event edition) is being implemented. See "Your rights" for removal.
7. Your rights
Depending on your location (e.g. GDPR/UK GDPR, CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to processing based on legitimate interest. This applies both to account holders and to people included in the event catalog.
You can delete your account and all associated workspace data yourself at any time from Settings → Account → Delete account; this removes your login and workspace data immediately. Removal of a specific person from the shared event catalog remains a manual request to hello@eventscue.com.
To exercise any other right, email hello@eventscue.com: we will confirm what data we hold, and on request delete or suppress it. We aim to acknowledge within 1 business day and complete within 7 business days. You also have the right to lodge a complaint with your supervisory authority.
8. Security
We protect data with tenant isolation (row-level security), encrypted transport, scoped access tokens, and least-privilege service credentials. No system is perfectly secure, but we work to protect your data and to notify you and regulators of qualifying breaches as required by law.
9. Cookies & local storage
The application uses strictly necessary storage to keep you signed in (authentication session tokens). We do not use third-party advertising or cross-site tracking cookies, and we do not use third-party analytics.
10. Changes
We may update this Policy; we will revise the "Last updated" date and, for material changes, provide additional notice. Continued use after changes take effect constitutes acceptance.
11. Contact
Questions or requests: hello@eventscue.com (a postal address is available on request).