Your data, handled carefully

EventNexus is an AI-enabled event management platform for individuals and organizations. This policy explains what personal data we process when you use the website and app, and the choices you have. Questions? Contact us.

We collect only what we need to run the service:

• Account data — name, email, password hash (or Google sign-in identifier), and role.
• Event & ticket data — events you create or register for, ticket and check-in records.
• Organization data — organization name and team membership, for organizers.
• Payment metadata — for paid events, transaction status and references from Stripe or eSewa. We never store full card numbers.
• Usage & device data — basic logs (IP, timestamps, actions) used for security, auditing, and debugging.
• Location — only if you grant it, to sort nearby events. You can decline.

• To provide the service: authentication, event registration, tickets, notifications.
• To generate recommendations and attendance forecasts from your activity.
• To keep the platform secure — rate limiting, abuse detection, and audit trails.
• To send transactional email (confirmations, reminders, receipts). We do not sell your data or send marketing without consent.

We share personal data only with:

• Event organizers — your name and registration details for events you register for.
• Processors we rely on — payment providers (Stripe, eSewa), email delivery, cloud hosting (AWS), and the AI inference service, each acting on our instructions.
• Authorities — where required by law.

We keep account and event data for as long as your account is active. When you close your account we delete or anonymize your personal data within a reasonable period, except records we must retain for legal, tax, or dispute-resolution purposes.

You can access, correct, export, or delete your personal data. Most of this is available in your account settings; for the rest, email us from the Contact page and we will action verified requests promptly.

We use local storage to keep you signed in and remember lightweight preferences (such as a selected filter or tab). We do not use third-party advertising or cross-site tracking cookies.

Traffic is encrypted in transit (HTTPS). Access is role-based and enforced on the server for every route; passwords are hashed; sensitive actions are logged. No system is perfectly secure, but we work to keep the risk low and will notify affected users of any material breach.

We may update this policy as the product evolves. Material changes will be surfaced in the app or by email. The “last updated” date above always reflects the current version.

For any privacy question or request, reach us via the Contact page or at privacy@eventnexus.app.