Privacy Policy

1. Introduction

At Eventzy (operated by Eventzy, Inc.), we respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our Eventzy website and tell you about your privacy rights and how the law protects you.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: first name, last name, username or similar identifier.
• Contact Data: billing address, delivery address, email address and telephone numbers.
• Technical Data: internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data: username and password, purchases or orders, your interests, preferences, feedback and survey responses.
• Usage Data: information about how you use our website, products and services.

3. Special Category Data

To personalize your event planning, we collect data that constitutes “special category personal data” under GDPR Article 9 and equivalent “sensitive personal information” categories under U.S. state privacy laws (CCPA/CPRA, VCDPA, CTDPA, and others). The categories we collect are:

• Dietary restrictions, allergies, and food preferences: collected to coordinate menu options with caterers and to flag allergy considerations on guest lists.
• Accessibility needs: collected to filter venue options, configure floor plans, and brief vendors so the event accommodates every guest.
• Cultural background, religious traditions, and ceremonial practices: collected to recommend culturally appropriate vendors, ceremony structures, attire, and music.

Legal basis. We process this data on the basis of your explicit consent (GDPR Art. 9(2)(a)) given when you create your Eventzy account and accept our Terms of Service, combined with the necessity to perform our planning service for you (GDPR Art. 6(1)(b)). For U.S. state privacy laws, this constitutes notice-and-consent for the processing of sensitive personal information.

Limitations on processing. We do not sell or share special category data with third parties for advertising or unrelated purposes. We do not use it to infer additional sensitive attributes (e.g., health conditions, political views). We share it with vendors only to the extent needed to fulfill the planning request (e.g., we share dietary restrictions with the caterer you book, accessibility needs with the venue you book).

Withdrawing consent. You may withdraw your consent at any time by removing the relevant fields from your event profile, by contacting privacy@eventzy.ai, or by deleting your account. Withdrawal does not affect processing carried out before consent was withdrawn, and may limit certain personalization features.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (GDPR Art. 6(1)(b)).
• Where you have given us your explicit consent, in particular for the special category data described in Section 3 (GDPR Art. 6(1)(a) and Art. 9(2)(a)).
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (GDPR Art. 6(1)(f)).
• Where we need to comply with a legal obligation (GDPR Art. 6(1)(c)).

5. Categories of Recipients

To deliver our services, we share your data with our partners: carefully selected third parties that act on our behalf under appropriate data-processing agreements. We list the categories of partners (in line with GDPR Art. 13(1)(e) and U.S. state privacy-law disclosure standards) rather than specific company names, both to keep this policy stable as our infrastructure evolves and to protect commercially sensitive partnership terms. The categories of partners we work with include:

• Hosting, authentication, and storage partners: store your account, event, planning, and uploaded image data.
• AI partners: process conversation messages to generate planning suggestions. Personal identifiers are redacted server-side before transmission where possible.
• Payment partners: handle subscriptions, vendor payments. We never store credit card numbers; payment cards are tokenized by the payment partner.
• Communication partners: deliver email, SMS, and voice messages on your behalf (account notifications, invitations, and vendor outreach). These partners process the message and destination solely to deliver it for us; we do not share your mobile number or SMS opt-in consent with them, or anyone, for their own marketing (see Section 6).
• Image-generation partners: create design visualizations from anonymized style preferences.
• Operations partners: provide error tracking, observability, bot protection, and caching infrastructure to keep the service reliable and secure.
• Discovery and mapping partners: help discover vendor listings and sync calendar events when you use those features.
• Vendors you book: receive the planning data they need to deliver their service (e.g., guest counts; dietary restrictions if relevant to a caterer; accessibility needs if relevant to a venue).

You may request a list of the specific companies we use in any of these categories by emailing privacy@eventzy.ai. We will respond within 30 days.

We do not transfer your special category data (Section 3) to advertising networks, analytics providers, or any partner outside the categories above. Special category data shared with vendors is limited to the data needed to fulfill the planning request you initiated.

6. SMS & Mobile Messaging

Eventzy offers optional SMS (text message) programs you may choose to join. Joining is never required to use Eventzy, and your consent to receive texts is not a condition of any purchase.

• Planning & account texts: if you opt in (an unchecked box at sign-up or in your account settings, then a one-time code to verify the number is yours), you receive texts tied to your own active wedding plan: booking and appointment confirmations, planning reminders, RSVP updates, and replies from your AI planning assistant when you text it.
• Waitlist early-access texts: if you tick the optional box on the waitlist survey, you receive a small number of texts about early access.

For every program: message frequency varies; message and data rates may apply. Reply STOP (or UNSUBSCRIBE/CANCEL/END/QUIT) to opt out at any time, START to opt back in, and HELP for help (or email support@eventzy.ai). We record the date, time, and IP address of your opt-in as consent evidence.

We do not share, sell, or rent your mobile phone number or your SMS opt-in consent to any third party or affiliate for their marketing or promotional purposes. Mobile information is used only to operate the messaging programs you opted into; the messaging carriers that deliver the texts receive only what is needed to deliver your message and may not use it for their own marketing. No mobile opt-in data is shared with third parties for any purpose other than delivering your messages.

7. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this policy, unless a longer retention period is required by law:

• Account data: retained while your account is active and for 30 days after account deletion to allow recovery.
• Event planning data: retained while your account is active and deleted upon account deletion request, subject to legal retention obligations.
• Financial records (transactions, commissions, invoices): retained for 7 years as required by tax and accounting regulations.
• Dispute records: retained for 2 years after resolution for legal compliance.
• Analytics data: aggregated and anonymized within 90 days; raw session data deleted after 90 days.
• AI conversation logs: retained for service improvement for 12 months, then anonymized or deleted.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

9. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

10. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Email: privacy@eventzy.ai