Privacy Policy
Last updated: June 2025
1. Information we collect
When you create an account on Evvy, we collect your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your name and email from Google. We also collect information about the events you create (title, dates, location, description) and statistics about interactions with your public event pages (page views and calendar link clicks).
2. How we use your information
We use the information we collect to provide, maintain, and improve Evvy. This includes creating and managing your events, generating shareable links, tracking statistics at your request, and enabling RSVP functionality. We do not sell or share your personal data with third parties for advertising purposes.
3. Cookies
Evvy uses essential cookies to keep you signed in and remember your preferences (such as language). We also use a cookie-based deduplication system to count unique calendar link clicks (30-day cookie per event and service). These cookies contain no personally identifiable information.
4. Data retention
Your account data and events are stored as long as you maintain an active account. You can delete individual events at any time. To request deletion of your entire account and associated data, please contact us using the form on our Contact page.
5. Your rights (GDPR)
If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data, object to or restrict processing, and data portability. To exercise any of these rights, please contact us via the Contact page.
6. Security
We take reasonable measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Passwords are hashed using bcrypt before storage. Authentication sessions use secure, httpOnly cookies.
7. Contact
If you have questions about this Privacy Policy or wish to exercise your rights, please use the contact form.