Privacy Policy

We collect the following categories of personal data:

• Account data: your email address and password (stored securely via Supabase Auth) when you register.
• Event data: event names, dates, locations, and descriptions you create.
• Guest data: names, email addresses, phone numbers, and dietary restrictions of guests you add to your events. You are responsible for having a lawful basis to process your guests' data.
• Payment data: billing information is handled entirely by Stripe. We do not store card numbers or payment details on our servers.
• Usage data: basic analytics such as pages visited and actions taken, used to improve the service.

• To provide and operate the EventsDock service.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (RSVP confirmations, invitation links) via Resend.
• To respond to support requests.
• To improve the platform based on usage patterns.

We do not sell your data to third parties. We do not use your data for advertising purposes.

We process your personal data under the following legal bases:

• Contract: processing necessary to provide the service you signed up for.
• Legitimate interests: improving the platform and preventing abuse.
• Legal obligation: where required by applicable law.

For guest data you upload, you act as the data controller and we act as a data processor on your behalf. You are responsible for ensuring you have a lawful basis to process your guests' personal information.

We share data with the following service providers only to the extent necessary to operate EventsDock:

• Supabase — database and authentication hosting (EU region).
• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Resend — transactional email delivery.
• Vercel — application hosting and deployment.

All providers are bound by data processing agreements and are GDPR-compliant.

We retain your account and event data for as long as your account is active. If you delete your account, all associated data including events and guest lists is permanently deleted within 30 days.

Stripe retains billing records as required by financial regulations, independently of your EventsDock account.

If you are based in the European Economic Area, you have the following rights:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data.
• Portability: receive your data in a machine-readable format.
• Objection: object to certain types of processing.
• Restriction: request that we limit processing in certain circumstances.

To exercise any of these rights, email us at eventsdock2026@gmail.com. We will respond within 30 days.

We use essential cookies for authentication (keeping you logged in) and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, row-level security on our database, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

EventsDock is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of EventsDock after changes constitutes acceptance of the updated policy.

For privacy questions or to exercise your rights, contact us at eventsdock2026@gmail.com.