Privacy Policy

Last updated 23 August 2026

EventUsAll is in development and not yet open to the public. This describes what the service does today and will be updated as it grows.

What we collect

If you have an account

• Your name and email address
• The events you take part in, your role in each, and what you put in them — timelines, notes, quotes, event details
• A record of significant actions: who changed what, when, and from what IP address

If you are a guest

Guests join an event by link and are not required to create an account. We store what you submit — an RSVP, for example — and associate it with that event.

Vendor business information

We keep a directory of event vendors: business name, category, service area, and publicly listed contact details. This is collected from the vendor’s own website, and every record stores the page it came from. It is business contact information, not personal information about a private individual.

How we use it

We use what we collect to:

• Run the service — show you your events and sign you in
• Send you transactional email, such as sign-in links
• Keep a record of changes, so that when an event goes wrong it is possible to establish what happened
• Diagnose faults and keep the service secure

We do not sell your information. We do not use it for advertising, and we do not share it with advertisers or data brokers.

Cookies

We set one cookie, and only after you sign in. It identifies your session so you do not have to sign in on every page. It is marked HttpOnly, so scripts cannot read it, and Secure, so it is only ever sent over an encrypted connection. It expires when your session does.

We do not use advertising or tracking cookies.

Who else processes it

We use a small number of service providers to run EventUsAll. They process information on our instructions only:

• Amazon Web Services — hosting, database, and email delivery. Data is stored in the United States (us-east-1)
• Anthropic — used to read a vendor’s public website and prefill a directory entry. Personal information about our users is not sent
• Vercel — serves this public website. It has no access to event data

Where your information lives

Your event data is stored in a database that is not reachable from the internet. It sits inside a private network with no route in or out, and can only be reached by the application itself or by a named administrator through a logged, brokered session. Storage is encrypted, and backups are taken daily.

How long we keep it

• Account and event information — while your account is open, and for a reasonable period afterwards
• The change record — kept after an account closes. It is append-only and cannot be edited or deleted, including by us, which is what makes it worth having
• Financial records — seven years, where the law requires it

What you can ask for

You can ask us to:

• Tell you what we hold about you
• Correct anything that is wrong
• Delete your account and the personal information attached to it
• Send you a copy of what you have put into the service

Email us and we will action it. Deletion does not extend to the append-only change record, or to records we are legally required to keep — and we will tell you plainly which is which rather than quietly keeping things.

Children

EventUsAll is not directed at children under 13, and we do not knowingly collect their personal information. Guests may attend an event of any age; we do not ask a guest for date of birth.

Security, honestly

We take security seriously and build it into the structure of the system rather than relying on people to remember rules. No service can promise it will never be breached. If yours is affected, we will tell you.

Changes

We will update this page as the service changes, and change the date at the top when we do. If a change materially affects you, we will tell you directly.

Contact

Privacy questions, or any request above: dallas@eventusall.com