Privacy Policy

Effective: September 23, 2026

This Privacy Policy describes how EventSculpt LLC ("EventSculpt," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website and services (the "Services"). This policy applies to all users of the Services, including Clients, Vendors, and Venues.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

---

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, password, and role (Client, Vendor, or Venue).
• Profile Information: Business name, address, photos, descriptions, service offerings, and other details you add to your profile.
• Transaction Data: Booking details, payment information (processed by our payment processor, Stripe), invoices, payout details, and related correspondence. Depending on the services in your Booking, your payment may be processed through EventSculpt's payment account and/or directly through a Provider's payment account. When a direct charge is processed for Regulated Service Categories (e.g., bar and alcohol services), your name, contact information, and payment details are provided to the Provider via Stripe to process the transaction. In all cases, payment card data is handled by Stripe and is not stored on EventSculpt's servers.
• Communications: Messages you send to us or exchange with other users through the Services, support requests, and feedback.
• Identity Verification: Information provided for identity or business verification purposes, if applicable.

1.2 Information Collected Automatically

• Device and Browser Information: Device type, operating system, browser type and version, unique device identifiers.
• Usage Data: Pages visited, features used, clicks, search queries, referring URLs, and interaction patterns.
• Log Data: IP address, access times, error logs, and server logs.
• Location Data: General location inferred from IP address (we do not collect precise geolocation without your consent).

1.3 Information from Third Parties

• Payment Processors: Transaction status and limited payment information from Stripe or other payment providers.
• Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive basic profile information from that service.
• Connected Calendars: If you connect a calendar, we receive information about selected calendars and their events, including event titles and times, to synchronize availability.

---

2. How We Use Information

We use the information we collect to:

• Provide the Services: Create and manage accounts, facilitate bookings, process payments and payouts, and enable communication between users.
• Improve and Develop: Analyze usage patterns, troubleshoot issues, conduct research, and develop new features.
• Communicate: Send transactional emails (booking confirmations, receipts), service updates, security alerts, and respond to your inquiries.
• Marketing: Send promotional communications about EventSculpt (you can opt out at any time). We may also use photos and other content you make public on the Platform, such as listing photos and reviews, to promote the Services.
• Safety and Security: Detect and prevent fraud, abuse, spam, and violations of our Terms of Service.
• Legal Compliance: Comply with applicable laws, respond to legal process, and enforce our agreements.
• Machine Learning and AI: We may use public Platform Data and User Content, including public listing photos, and information that has been aggregated or de-identified, to develop and improve AI-powered features and train the models that support them. We do not use private messages, payment card data, identity verification materials, signed booking agreements, non-public event addresses, or photos and other files exchanged privately between users for model training in identifiable form without separate permission.
• Analytics and Insights: Create aggregated, anonymized datasets, industry benchmarks, market research, and statistical analyses.
• New Products and Services: Develop new products, features, and services based on usage patterns and user needs.

---

3. How We Share Information

We do not sell your personal information for money. When you allow advertising technologies, we may share online activity and device information with advertising partners for campaign measurement and cross-context behavioral advertising. You can withdraw that permission at any time through the Privacy choices link in the site footer or Settings → Privacy. We may also share information in the following circumstances:

3.1 With Other Users

• When you make or receive a booking, relevant information (such as name, contact details, and booking specifics) is shared between the Client and Provider to facilitate the transaction.
• Providers who receive Client personal information in connection with direct charges for Regulated Services are required to use that information solely for purposes of fulfilling the Booking and must handle it in accordance with applicable privacy laws. Providers may not use Client personal information received through the Platform for marketing, profiling, or any purpose unrelated to the transaction.

3.2 With Service Providers

We disclose information to service providers and advertising partners, including:

• Payment Processing: Stripe processes payments and is subject to the Stripe Privacy Policy. When you provide personal data in connection with payment services, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy.
• Cloud Infrastructure: Hosting and data storage providers.
• Performance and Analytics: Service providers help us measure site performance and understand how the Services are used (see Section 4).
• Advertising Measurement: Advertising partners receive limited online activity and device information when you allow advertising technologies (see Section 4).
• Communications: Email delivery and customer support tools.

Service providers process information to support our Services. Advertising partners may process information under their own privacy terms as described below.

3.3 For Legal and Safety Reasons

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, or legal process;
• Protect the rights, property, or safety of EventSculpt, our users, or the public;
• Detect, prevent, or address fraud, security issues, or technical problems;
• Enforce our Terms of Service or other agreements.

3.4 Business Transfers

In connection with a merger, acquisition, bankruptcy, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy and notice to you of any material changes.

---

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services, measure performance, and understand usage. Site-performance and usage analytics are on by default; you may turn off usage analytics. Advertising measurement runs only when you allow it.

4.1 Types of Technologies We Use

• Essential: Security, authentication, and core site functions.
• Functional: Preferences and settings.
• Site Performance: Grouped visits and technical performance, even when usage analytics are off.
• Usage Analytics: Site visits and interactions, which you may turn off.
• Advertising: Campaign measurement only when you allow it.

4.2 Site Performance and Usage Analytics

We measure aggregated site performance even when you turn off usage analytics. This may include grouped page visits, browser and device information, approximate location, and technical performance. We also use usage analytics to understand site visits and interactions. Usage analytics may use cookies and collect related browser and device information. You can turn off usage analytics at any time.

We use error diagnostics to investigate technical problems. When an error occurs, these tools may capture a masked replay of activity around the error. Error diagnostics operate independently of your usage analytics choice.

4.3 Advertising Measurement

When you allow advertising technologies, advertising partners may collect page and referral information, browser and device information, IP address, identifiers, and information about your interactions with public acquisition and marketplace pages. They may use this information to measure our campaigns and provide advertising services under their own privacy terms. We do not intentionally include payment card data, private messages, or form contents in advertising events.

4.4 Your Choices

Usage analytics are on by default, and advertising measurement is off until you allow it. You can turn off usage analytics, allow or decline advertising measurement, and change these choices at any time through the Privacy choices link in the site footer or Settings → Privacy. Site-performance measurement continues when you turn off usage analytics. Withdrawing a choice stops future collection for that category in this browser and removes accessible EventSculpt analytics or advertising cookies, but it does not delete information already received by a service provider.

Most browsers also allow you to block or delete cookies. Blocking essential cookies may prevent parts of the Services from working.

4.5 Global Privacy Control and Do Not Track

We treat a supported Global Privacy Control (GPC) browser signal as a request to disable advertising tracking for that browser. Some browsers also offer a "Do Not Track" (DNT) setting. Because there is no industry standard for DNT, we do not currently respond to DNT signals.

---

5. Aggregated and Derived Data

We create aggregated, anonymized, and derived data from information collected through the Services. This includes:

• Aggregated Statistics: Combined data from multiple users that does not identify any individual (e.g., "average venue booking price in San Francisco").
• Industry Benchmarks: Comparative data about pricing, availability, response times, and market trends.
• Derived Insights: Analytics, patterns, and insights derived from user behavior and Platform activity.
• Training Data: Public, aggregated, or de-identified information used to develop and improve AI systems, and any other information used for that purpose with separate permission.

We may use, license, commercialize, and distribute aggregated or de-identified data that does not reasonably identify you, including derived insights, for business purposes without compensation to you, subject to applicable law. Information that can reasonably identify you remains subject to the rights described in this policy.

---

6. Data Retention

We retain personal information for as long as necessary to:

• Provide the Services and maintain your account;
• Comply with legal obligations (e.g., tax records retained for 7 years);
• Resolve disputes and enforce our agreements;
• Support legitimate business purposes.

You may schedule account deletion with a 14-day period during which you can cancel the request. After that period, we will delete or de-identify personal information associated with your account within 90 days, except where we need to retain information for legal obligations, unresolved transactions or disputes, or other purposes permitted by law. We may retain information that no longer reasonably identifies you, subject to applicable law.

---

7. Data Security

We implement reasonable technical and organizational measures to protect personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest;
• Access controls and authentication requirements;
• Regular security assessments;
• Employee training on data protection.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

---

8. Your Rights and Choices

8.1 Account Settings

You can access, update, or correct your account information at any time through your account settings or by contacting us.

8.2 Communication Preferences

• Marketing Emails: You can opt out by clicking "unsubscribe" in any marketing email or updating your notification settings.
• Transactional Emails: We will continue to send essential communications related to your account and bookings.

8.3 Account Deletion

You may schedule account deletion in Settings → Account or contact us at privacy@eventsculpt.com. See Section 6 for the deletion period and retention exceptions. Content you shared with other users may remain visible where retention is permitted by law.

---

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

9.1 Your California Rights

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, ongoing transactions).
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information for money. You may opt out of sharing for cross-context behavioral advertising by rejecting advertising technologies, changing your selection through the Privacy choices link, enabling Global Privacy Control, or emailing us.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

9.2 Categories of Personal Information

In the preceding 12 months, we have collected the following categories of personal information:

9.3 How to Submit a Request

To exercise your California privacy rights, you may:

• Email: privacy@eventsculpt.com with subject line "California Privacy Request"
• Include: Your name, account email, and specific request

We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

We will respond to verifiable requests within 45 days. If we need additional time (up to 45 more days), we will notify you.

9.4 Shine the Light

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. Our optional sharing with Meta for EventSculpt advertising measurement is described in Section 4.

---

10. Children's Privacy

The Services are intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at privacy@eventsculpt.com, and we will take appropriate steps to delete such information.

---

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting the updated policy on the Services with a new effective date;
• Sending an email to your registered address (for material changes);
• Displaying a notice on the Services.

Your continued use of the Services after changes become effective constitutes acceptance of the revised policy.

---

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

EventSculpt LLC Email: privacy@eventsculpt.com

For general support inquiries, contact: support@eventsculpt.com