Privacy Policy

1. Scope and Acceptance

By accessing or using the Service you agree to the terms of this Privacy Policy. This Privacy Policy applies to personal data collected through the Service, via social logins (including Meta/Facebook, Google and LinkedIn), and through forms and other interactions (contact forms, registration forms, event sign-ups, surveys, feedback forms).

2. Company Details

Company: Turquoise Technologies (dba Eventegration)

Address: PO Box 222, PC 100, Muscat, Sultanate of Oman

Contact email: info@eventegration.com

3. Definitions

• Personal Data — any information relating to an identified or identifiable individual.
• Processing — any operation performed on Personal Data (collection, storage, use, disclosure, erasure, etc.).
• Service Providers / Subprocessors — third parties who process data on our behalf.
• User Content — content you post, upload, or submit through the Service.

4. Personal Data We Collect

We collect and process Personal Data in order to provide the Service and for related business purposes. Categories of Personal Data collected include:

• Identifiers & Account Data: name, username, email address, phone number, postal address, profile picture, user ID assigned by social providers.
• Authentication Data: password hashes, social login tokens or identifiers, OAuth IDs.
• Form Data: any information you submit in site forms (contact forms, registration, surveys, RSVPs, event bookings) which may include name, email, phone number, organization, job title and message content.
• Payment & Billing Data: payment tokens, billing address, receipts (note: we do not store full card numbers — payment processing uses third-party payment processors).
• Usage & Technical Data: IP address, device identifiers, browser type/version, operating system, pages visited, referrer, timestamps, click and scroll information, log data, and other diagnostic data.
• User Content: files, media, messages, notes or other content you upload or generate while using the Service.
• Marketing & Preference Data: subscription preferences, campaign tracking identifiers, and engagement data.

5. Social Login — Meta (Facebook), Google, LinkedIn and Other Providers

When you register or sign in using a social provider (for example Meta/Facebook, Google, LinkedIn), we receive information from that provider according to the permissions (scopes) you authorize. Typical information we may receive includes your name, email address, profile picture URL, unique provider identifier, and any additional profile fields you permit.

5.1 What data we typically request

• Meta / Facebook: public_profile (name, profile picture), email, and any additional scopes you authorize. We will request only those scopes necessary for account creation and authentication (for example email and public_profile).
• Google: profile and email information (name, email address, profile picture), and any additional scopes you authorize.
• LinkedIn: basic profile fields (name, headline, profile picture), email address, and any additional scopes you grant.

5.2 Purposes for Social Login Data

We use social login data to:

• Create or pre-fill your Account and profile.
• Authenticate you and allow single-sign-on (SSO).
• Personalize your experience and display your profile picture/name.
• Contact you for service-related notifications where permitted.

5.3 How to revoke social login access

You can disconnect social providers from your Account by visiting Account Settings > Connected Accounts in the Service. You may also revoke the app's access directly from your social provider's settings:

• Meta / Facebook: Settings > Apps and Websites
• Google: Security > Third-party apps with account access
• LinkedIn: Settings > Data privacy > Permitted services

Revoking access may limit your ability to sign in using that provider.

6. Cookies, Tracking Technologies, Analytics & Pixels

We use cookies, web beacons, pixels (including Meta Pixel) and similar technologies to operate and analyze the Service, remember preferences, secure the Service, and for advertising and measurement where applicable.

6.1 Categories of cookies

• Essential cookies: required for authentication, security and core functionality.
• Functional cookies: remember language and user interface preferences.
• Analytics cookies: used to measure and improve site performance (e.g., Google Analytics).
• Advertising/Targeting cookies: used to show relevant ads and measure ad performance (e.g., Meta Pixel).

6.2 Third-party analytics and advertising

Third-party services we may use include Google Analytics, Meta Pixel, Google Tag Manager, and advertising/measurement partners. These providers may set cookies and collect information about your usage of the Service and other websites. Please consult their privacy policies for details and opt-out mechanisms.

6.3 Managing cookies

You can control cookie preferences via the cookie banner, browser settings, or opt-out tools provided by third-party vendors. Blocking cookies may impact the functionality of the Service.

7. How We Use Personal Data

We use Personal Data for the following purposes:

• To provide, maintain and improve the Service.
• To create, manage and secure user Accounts and to authenticate users.
• To process transactions, send receipts, and prevent fraud.
• To respond to inquiries, provide customer support, and communicate about your Account and service changes.
• To personalize content and recommendations.
• To send marketing communications where you have consented or where permitted by law.
• To comply with legal obligations and to protect rights and property.

8. Legal Bases for Processing (where applicable)

Where applicable (for example for residents of the EEA or UK), we rely on one or more of the following legal bases to process Personal Data:

• Performance of a contract: processing necessary to provide services you've requested.
• Consent: where you have given your consent (for example for marketing emails or non-essential cookies).
• Legitimate interests: to operate and improve the Service, to secure the Service, and to prevent fraud, balanced against your privacy rights.
• Compliance with law: to meet legal and regulatory obligations.

9. Sharing and Disclosure of Personal Data

We may share Personal Data in the following limited circumstances:

• Service Providers: hosting, email, payment processors, analytics, CRM, security, and other vendors. We use contracts and appropriate safeguards when sharing data with subprocessors.
• Affiliates: for internal operations under confidentiality obligations.
• Business transactions: in connection with a merger, sale, reorganization, or asset transfer; we will notify users if their data will be transferred to a new owner.
• Legal obligations: when required by law, regulation, or legal process, or to protect rights, property, safety or to investigate fraud or security incidents.
• With your consent: where you permit us to share your information.

We do not sell Personal Data for money. If this policy changes, we will notify users and provide opt-out mechanisms as required by law.

10. International Transfers

Personal Data may be processed and stored in countries other than your country of residence (including outside the European Economic Area). When we transfer data internationally, we implement safeguards such as standard contractual clauses, Data Processing Agreements (DPAs) with subprocessors, or rely on adequacy decisions where available.

11. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention examples:

• Account information: retained while the account exists and for a period of up to 24 months after account deletion for backups and legal compliance, unless a longer period is required by law.
• Form submissions & messages: retained for up to 24 months or as long as necessary to respond to your inquiry, unless otherwise requested.
• Usage logs & analytics: retained for up to 24 months for improvement and security purposes.

If you need a specific retention period for certain data, contact us (see Section 17).

12. Data Security

We implement reasonable technical and organizational measures to protect Personal Data (for example encryption in transit, access controls, secure hosting). However, no security system is impenetrable — we cannot guarantee absolute security. In the unlikely event of a breach that presents a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.

13. Your Rights

Depending on your jurisdiction you may have certain rights regarding your Personal Data, including:

• Right to access the Personal Data we hold about you;
• Right to correct inaccurate Personal Data;
• Right to request deletion (erasure) of your Personal Data subject to legal exceptions;
• Right to restrict or object to certain processing;
• Right to data portability;
• Right to withdraw consent where processing is based on consent;
• Right to lodge a complaint with a data protection authority.

To exercise these rights, contact us at info@eventegration.com. We will verify your identity before responding to requests and will respond within applicable legal timeframes.

14. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect Personal Data from children under 13. If you learn we have collected Personal Data from a child under the applicable age without parental consent, contact us at info@eventegration.com and we will promptly delete that data.

15. Opt-Outs and Communications

You may opt out of marketing communications by following unsubscribe instructions in emails, adjusting your Account communication preferences, or contacting info@eventegration.com. Please note that transactional or service messages (e.g., account or security notices) are not optional.

16. Data Processing Agreements & Subprocessors

We enter into Data Processing Agreements with subprocessors where required by law. A non-exhaustive list of categories of subprocessors includes: cloud hosting providers, email and messaging providers, analytics providers, payment processors, and customer support providers. A current list of subprocessors and DPA summary can be provided on request by emailing info@eventegration.com.

17. How to Access, Correct, Delete, or Port Your Data

You may access or manage your Personal Data in your Account settings where available. To request access, correction, deletion or portability of your data, or to raise a complaint, email info@eventegration.com. We will verify your identity before fulfilling requests and will respond within applicable legal timeframes.

18. Links to Third-Party Sites

The Service may include links to third-party websites, plug-ins and applications. We do not control those third-party sites and are not responsible for their privacy practices. Review their privacy notices before providing Personal Data.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last updated" date, and where appropriate we will notify you via email or in-app notice. Your continued use of the Service after changes constitute acceptance of the updated Privacy Policy.

20. Contact

If you have any questions, requests or concerns regarding this Privacy Policy or our processing practices, contact us:

Email: info@eventegration.com
Address: Turquoise Technologies, PO Box 222, PC 100, Muscat, Sultanate of Oman