Eventrows
Legal

Privacy Policy

Last updated 20 July 2026

This Privacy Policy explains how Eventrows ("Eventrows", "we", "us", or "our") collects, uses, shares, and protects information when you use our website and web application (the "Service"). It applies to event planners and businesses who sign up as tenants ("you", "your account"), and, where relevant, to the clients and guests whose information your account holders may enter into the Service on their behalf.

1. Information we collect

Account information: name, email address, phone number, company name, country, and password, collected when you sign up.

Content you create: quotes, invoices, contracts, event details, floor plans, guest and client contact information, and files or images you upload while using the Service.

Payment information: when you subscribe to a paid plan, payment is handled by our payment processors (such as Paystack). We receive confirmation of payment and a reference, but we don't store your full card number or banking credentials.

Usage and device data: log data, browser type, IP address, and how you interact with the Service, collected automatically to help us maintain and improve it.

Cookies: small files used to keep you signed in, remember preferences, and understand aggregate usage of the Service.

2. How we use this information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including generating quotes, invoices, and contracts on your behalf;
  • Process subscription payments and manage billing;
  • Communicate with you about your account, service updates, and support requests;
  • Send password reset, invoice, and other transactional emails;
  • Detect, prevent, and address fraud, abuse, or security issues;
  • Improve and develop new features, based on aggregated, largely de-identified usage patterns.

We don't sell your personal information, or your clients' personal information, to third parties.

3. Your legal basis for processing (POPIA / GDPR)

Where South Africa's Protection of Personal Information Act (POPIA), the EU/UK GDPR, or similar data protection law applies, we process personal information on the basis of: performing our contract with you (providing the Service), your consent (where required, such as for marketing emails), our legitimate business interests (such as improving and securing the Service), and compliance with legal obligations.

If you enter client or guest information into Eventrows, you (the account holder) act as the data controller/responsible party for that information, and Eventrows acts as the data processor/operator acting on your instructions.

4. Who we share information with

We share information with the following categories of service providers, solely to operate the Service:

  • Infrastructure and hosting: Google Firebase (database, authentication, file storage, and hosting).
  • Payment processing: Paystack, Stripe, and similar payment providers, for subscription billing and any client-facing payment features you enable.
  • Email delivery: transactional email providers, to send account, invoice, and password-related emails.
  • Messaging: WhatsApp, where you choose to share quotes, invoices, or contracts with clients via WhatsApp.

These providers only process information as needed to deliver their service to us, under their own security and confidentiality obligations. We may also disclose information if required by law, or to protect the rights, property, or safety of Eventrows, our users, or others.

5. Data storage and security

Your data is stored on Google Firebase infrastructure with industry-standard access controls and encryption in transit. We restrict internal access to personal information to what's needed to operate and support the Service. No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we work to protect your information using reasonable technical and organisational measures.

6. Data retention

We retain account and content data for as long as your account is active, and for a reasonable period afterward to allow you to export your data, comply with legal or accounting obligations, and resolve disputes. You can request deletion of your account and associated data at any time by contacting us, subject to any legal retention requirements (for example, financial records we're required to keep).

7. Your rights

Depending on where you're located, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Request deletion of your personal information;
  • Object to or restrict certain processing;
  • Request a copy of your data in a portable format;
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, email support@eventrows.com. We'll respond within a reasonable time and in line with applicable law.

8. Cookies

We use essential cookies to keep you logged in and remember basic preferences, and may use limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings, though disabling essential cookies may affect the Service's functionality.

9. Children's privacy

The Service is intended for business use by adults and isn't directed at children. We don't knowingly collect personal information from children under 18.

10. International transfers

Because we use global infrastructure and payment providers, your information may be processed in countries outside South Africa, which may have different data protection laws. Where this happens, we rely on our providers' own safeguards and contractual protections to keep your information secure.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact us

Questions about this Privacy Policy or how we handle your data? Reach us at support@eventrows.com or via our contact page.