Privacy policy

event67 is a conference experience platform operated by Event67 ("we", "us"). This policy explains what data we collect, how we use it, who we share it with, and the choices you have. It applies to our mobile event app, our organizer (admin) web console, and event67.com, including all subpages.

What we collect

• Contact & account info — your name and email address, and (for organizers) a password. Provided when an event organizer invites you, when you create an organizer account, or when you sign in with Google or Apple.
• Profile content you choose to share — title, company, short bio, interests, social links, and a profile photo. All optional, all editable from the Me tab.
• Event activity — sessions you favorite or RSVP to, connection requests you send or accept (and the resulting connections), photos you upload to event albums, questions you ask in Q&A and votes you cast, polls you respond to, reactions you send, and feedback, suggestions, ratings or reviews you submit. Used to power the in-app features you see and to give organizers aggregate insight into their event.
• Messages — if you are an organizer, the direct and group messages you send to other organizers in your organization's admin chat. Attendees do not have chat.
• Identifiers & device data — a Firebase user ID, a device push token (if you enable notifications), and standard technical data such as IP address, device model, and operating system version.
• Usage & interaction analytics — how you use the app and our websites (see Analytics & tracking below).
• Server logs — our API records standard request logs, including an IP address and a user agent, so we can operate the service and investigate faults. There is no crash-reporting service in the mobile app today.

Analytics & tracking

We measure how our products are used so we can improve them and give organizers insight into their events. We use the following, and we are transparent about all of them:

• Our own event telemetry — the app and web console record usage metadata: screens and pages you view, features and buttons you tap, QR scans, connections, content and photo views, and how far you scroll, linked to your account. This is stored on our own servers and made available in aggregate to your event's organizers. We record the fact and type of an action, never the text inside it.
• Google Analytics 4 (Google Analytics for Firebase) — used in the mobile app and the organizer web console to understand engagement, sessions, and feature adoption.
• Mixpanel — used for product analytics in the app and on our websites. When you sign in to the mobile app we identify you to Mixpanel and send your name and email address with it. On our websites (event67.com and its subpages) Mixpanel also performs autocapture and session recording: it records your interactions with the page — clicks, navigation, form interactions, mouse movement and scrolling — so we can see how the site is used. These recordings can capture content shown on our own pages; they do not capture your activity on other websites.
• Email analytics — when we send you email (invitations, verifications, reports, notifications), we record whether it was delivered, opened, and which links you clicked. This is done by Amazon Simple Email Service, which rewrites links through track.event67.com and reports delivery, opens, clicks, bounces and complaints back to us.

On the web, these tools set cookies and use local storage. You can limit them through your browser settings, and you can opt out of Google Analytics with Google's opt-out browser add-on.

What we do not do

• We do not sell your personal data or share it for cross-context behavioral advertising.
• We do not share your data with advertisers or ad networks.
• We do not track you across unaffiliated apps or websites.
• We do not use the content of your messages, Q&A questions, chat, or search terms for analytics. Our own event telemetry records action metadata only, never the text you type.

Push notifications

With your permission, we send push notifications about your event (announcements, reminders) via Firebase Cloud Messaging. You can turn these off at any time in your device settings.

Who sees what

• Other attendees of your event see your display name, title, company, bio, and profile photo — only if you have not turned off "Visible in attendee list" in Edit profile.
• Event organizers can see attendee rosters they have invited (including your email), the content you post inside their event (Q&A, photos, poll answers, feedback), and aggregate engagement analytics for their event.
• Event67 staff can access data only when needed to operate the service, provide support, investigate abuse, or as required by law.

Service providers

We share data with a small set of processors who act on our behalf under contract:

• Google / Firebase — authentication, database, file storage, push notifications, and analytics.
• Mixpanel — product analytics and website session analytics.
• Google Cloud (Cloud Run, Cloud Storage, Secret Manager) — application hosting, file storage, and secrets.
• Neon — our managed PostgreSQL database.
• Amazon Web Services — email delivery and email engagement tracking (Amazon SES and SNS). AWS is not used for application hosting or for our database.
• Stripe — payment processing for organizer billing. Attendees are never billed, and card details never reach our servers.

These providers process data primarily in the United States. If you access the service from outside the U.S., your data is transferred to and processed there.

How long we keep your data

We keep your profile and event participation data until you ask us to delete it. There is no scheduled purge today, so nothing ages out on its own. Our own usage telemetry and our email-engagement records (delivered, opened, clicked) are stored as one row per person rather than only as totals, and they are kept on the same basis. Server logs are kept for as long as our hosting provider retains them. To have your data removed, see Delete your account.

Your rights & choices

You can edit or clear your profile at any time from the Me tab in the mobile app, and turn off your visibility in the attendee list there. To delete your account and associated data, see Delete your account. You can disable push notifications in your device settings and limit web analytics in your browser. To request access to, export of, or deletion of your data — or to exercise rights you may have under laws such as the GDPR or the CCPA/CPRA (including the right to opt out of any "sale" or "sharing", which we do not do) — email us at the address below. We respond within 30 days.

Children

Our service is intended for attendees age 13 and over. We do not knowingly collect data from anyone younger.

Contact

Questions, deletion requests, or privacy concerns: privacy@event67.com.

Changes

We update this policy as the product evolves. Material changes will be announced in the app and reflected in the "Last updated" date above.