Privacy Policy

EventSplit ("we," "us," or "our") operates the event coordination platform at eventsplit.ca. We are the data controller for personal information collected through the platform.

Questions about this policy can be directed to: privacy@eventsplit.ca

Information you provide directly:

• Account information: Name, email address, password (managed by Clerk), profile photo, city, bio, company or brand name, skills, and industry
• Event data: Event names, dates, locations, budgets, expense records, revenue projections, and uploaded documents
• Agreement data: Agreements you create, send, or sign through the platform, including the names and email addresses of recipients
• Communications: Messages you send to our support team

Information collected automatically:

• Usage data: Pages visited, features used, actions taken within the platform, and session duration
• Device and browser data: IP address, browser type and version, operating system, and device identifiers
• Cookies and similar technologies: See Section 9 for details

Information from third parties:

• Clerk (authentication): We use Clerk to manage sign-in and account security. Clerk may share your name, email, and account metadata with us.
• Stripe (payments): Stripe processes payments on our behalf. We receive a customer ID and basic transaction details but never your full card number.
• Supabase (database): Your profile and event data is stored in Supabase-hosted databases in secure cloud infrastructure.

We use the information we collect to:

• Create and manage your account and profile
• Provide the platform's core features: event projects, budgeting, agreements, and payout reports
• Process payments and manage your subscription or plan
• Calculate and display Trust Scores based on your verified platform activity
• Send transactional emails (account confirmation, agreement notifications, payout receipts)
• Respond to support requests and troubleshoot issues
• Detect and prevent fraud, abuse, and security threats
• Comply with applicable laws and regulations
• Improve the platform based on aggregated, anonymized usage patterns

We do not use your data for advertising profiling or sell it to third parties.

We share your information only in the following circumstances:

• With collaborators and sponsors you invite: When you share an event project, the collaborators or sponsors you invite can see your name, event details, offer terms, and the agreement you send them.
• With service providers: We use Clerk (auth), Stripe (payments), Supabase (database), and Resend (email) to operate the platform. These providers are contractually required to protect your data and may only use it to provide services to us.
• For legal compliance: We may disclose information if required by law, court order, or to protect the rights, property, or safety of EventSplit, our users, or the public.
• In a business transfer: If EventSplit is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you beforehand.
• With your consent: For any other purpose, we will ask for your explicit consent first.

We do not sell, rent, or trade your personal information to third parties.

All payment processing is handled by Stripe, Inc. When you make a purchase on EventSplit, you are providing your payment details directly to Stripe through their secure, PCI-compliant infrastructure. EventSplit never sees or stores your full credit card number, CVV, or banking details.

Stripe may collect additional information about you in connection with payment processing. Their use of your data is governed by Stripe's Privacy Policy.

We store only your Stripe customer ID and basic transaction records (plan purchased, amount, date) in our database for billing and support purposes.

We retain your personal data for as long as your account is active or as needed to provide you with the platform's services.

• Account data: Retained until you request deletion or your account is terminated
• Event and financial records: Retained for a minimum of 7 years after the event date to comply with financial recordkeeping requirements, even if your account is closed
• Signed agreements: Retained for the duration required by applicable law, typically 7 years
• Usage logs: Retained for up to 90 days and then deleted or anonymized

When data is no longer needed, we securely delete or anonymize it.

We take reasonable technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted data storage via Supabase
• Authentication managed through Clerk with support for multi-factor authentication
• Access controls limiting which team members can access user data
• Regular security reviews of our infrastructure and dependencies

No system is completely secure. If you believe your account has been compromised, contact us immediately at privacy@eventsplit.ca.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of processing, such as marketing communications
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@eventsplit.ca. We will respond within 30 days. Note that some rights may be limited where we have legal obligations to retain data.

Canadian residents are protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

We use cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled without breaking the service.
• Analytics cookies: Help us understand how users navigate the platform so we can improve it. Data is aggregated and anonymized where possible.

We do not use advertising cookies or cross-site tracking.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using the platform.

EventSplit is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@eventsplit.ca and we will delete it promptly.

Our platform and infrastructure providers (Clerk, Supabase, Stripe, Resend) may store and process your data in the United States or other countries outside Canada. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or the data processing agreements of our service providers.

By using EventSplit, you acknowledge that your data may be transferred to and processed in countries other than your own.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and notify you by email or in-app notice.

We encourage you to review this policy periodically. Continued use of the platform after changes take effect constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy inquiries within 30 days.