Privacy Policy

Our privacy commitment

Your privacy matters to us. We design EventRight to collect only what we need to run the service, protect it responsibly, and be transparent about our practices.

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

We use personal information to provide EventRight, keep accounts secure, process purchases you choose to make, and comply with law — not to monetize your data.

Information we collect

Depending on how you use EventRight, we may collect:

• Account information: name, email address, and a securely hashed password when you create an organizer account.
• Event and guest information: event details, guest names, phone numbers, email addresses, RSVP responses, notes, and page customization settings you provide as an organizer.
• Payment-related information: purchases are handled by third-party payment processors. We receive confirmation of payment, plan selections, and a customer reference — not your full card number.
• Communications data: records needed to send invitations and service messages you or organizers initiate, including delivery status where available.
• Technical and usage information: cookies, session tokens, device and browser type, IP address, and logs used to operate, secure, and troubleshoot the service.

How we use your information

We use personal information to:

• Provide event planning, guest lists, RSVP pages, invitations, and related features
• Authenticate users and protect accounts from fraud and abuse
• Process one-time event plan purchases and enforce plan limits
• Send service-related communications, including optional push notifications in our mobile app
• Improve reliability, investigate issues, and comply with legal obligations

We do not use guest phone numbers or email addresses for unrelated marketing on behalf of EventRight.

How we share information

We do not sell personal information. We share information only in the limited circumstances below:

• Service providers: trusted companies that help us operate EventRight — such as payment processors, messaging providers, email delivery services, cloud hosting, and security vendors — under contracts that limit their use of your data to providing services to us.
• At your direction: when you publish an event page, send invitations, or otherwise choose to share information with guests or organizers.
• Legal and safety: when required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the service.
• Business transfers: if we are involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction, subject to notice where required by law.

Third-party service providers maintain their own privacy practices. We select providers that meet our security and privacy standards, but their handling of data is also governed by their policies.

Data security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and secure password storage. No method of transmission or storage is completely secure; we work continuously to reduce risk and respond to incidents.

Cookies

We use essential cookies to keep you signed in and remember your cookie consent choice. With your consent, we may use optional analytics cookies to understand how the product is used. You can accept essential cookies only or accept all cookies through the banner shown on your first visit.

SMS & text messaging

If you provide a phone number as an organizer or guest, EventRight may send event-related text messages — such as invitations, RSVP links, and updates — through our messaging providers.

Organizers are responsible for obtaining consent before adding a guest's phone number or sending SMS through EventRight. You should only contact people who expect to hear from you about your event.

Recipients can reply STOP to opt out of future texts or START to opt back in. Opted-out numbers are stored so we do not message them again. Message and data rates may apply.

For complete SMS terms, including consent requirements and help options, see our SMS Terms of Use.

Data retention

We retain account and event data while your account is active and as needed to provide the service. Guest data for expired event pages may be deleted automatically after the event page's active period ends. If you delete your account or request deletion, we remove or anonymize personal information within a reasonable period, except where retention is required by law or for legitimate purposes such as billing records, security logs, or dispute resolution.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. You may also have the right to appeal a decision we make in response to a privacy request.

To exercise these rights, email privacy@eventright.com. We may need to verify your identity before fulfilling a request. Authorized agents may submit requests on your behalf where permitted by law.

California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights regarding your personal information.

• Right to know: request details about the categories of personal information we collect, the sources, purposes, and categories of third parties with whom we share it.
• Right to delete: request deletion of personal information we hold about you, subject to certain exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: EventRight does not sell personal information and does not share personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information: we use sensitive personal information only as permitted by law and as needed to provide the service.
• Non-discrimination: we will not discriminate against you for exercising your privacy rights.

Do Not Sell or Share My Personal Information

We do not sell or share personal information as those terms are defined under California law. No further action is required to opt out. If our practices change, we will update this policy and provide a clear opt-out mechanism before any sale or sharing occurs.

To submit a California privacy request, email privacy@eventright.com with the subject line "California Privacy Request." We will respond within the timeframes required by law.

Other U.S. state privacy rights

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and obtain a copy of personal information, and to opt out of certain processing such as targeted advertising, profiling, or the sale of personal data.

EventRight does not sell personal information. If you are in a state that provides an appeal right and you disagree with our response to a privacy request, contact privacy@eventright.com to appeal.

Children

EventRight is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Continued use of EventRight after changes become effective constitutes acceptance of the revised policy.

Contact us

Questions about this Privacy Policy? Email privacy@eventright.com. See also our Terms of Service and SMS Terms of Use.