Privacy Policy

Event Atlas (“we,” “us,” or “our”) operates the tryeventatlas.com website. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

1. Information We Collect

Account Information

When you create an account we collect your name, email address, and password. Vendor accounts additionally provide a business name, service categories, cultural specializations, location, contact details, and portfolio media. Customer accounts may also store event planning data (see below).

Customer Event Planning Data

Customers can create and manage event planning information within their dashboard, including event details, event dates, expected guest counts, and checklist items. This information is stored in your account and used to personalize your experience on the Platform.

Payment & Billing Data

Vendors who subscribe to paid plans provide payment information that is processed through Stripe, our payment processor. Event Atlas does not store credit card numbers or full payment method details directly—Stripe handles payment data securely on our behalf. We retain billing identifiers, subscription status, and plan information to manage your account.

Inquiry & Communication Data

When a customer sends an inquiry to a vendor through Event Atlas, we store the inquiry message, event details (date, location, guest count), and contact information in our database. The vendor receives a notification email containing the full inquiry details. Vendors respond to customers directly via email or phone — Event Atlas does not provide in-platform messaging. Event Atlas processes inquiry content to facilitate this connection. We do not manually review the content of inquiries except when investigating reported abuse.

Non-Account Visitor Data

We may collect limited data from visitors who do not have accounts, including but not limited to contact form submissions, newsletter subscriptions, and inquiry submissions. Anonymous visitors who submit inquiries may receive email communications from vendors through the Platform.

Newsletter Subscriptions

Visitors can subscribe to our newsletter by providing their email address. We store the email, subscription source, and subscription status.

Contact Form Submissions

Visitors can contact us through the contact form on our website by providing their name, email address, subject, and message.

Referral Program Data

Vendors participating in the referral program may share referral links. We track referral relationships, referred email addresses, and referral credit status.

Uploaded Media

Vendors upload photos and videos for their portfolios. These files are stored in our cloud infrastructure and displayed publicly on vendor profile pages.

Usage & Analytics Data

We collect analytics data to improve the platform, surface relevant search results, and generate vendor analytics (profile views, search appearances, inquiry counts). This includes event types, page and vendor interactions, search queries, and interaction metadata.

To understand usage patterns, we generate a persistent anonymous visitor identifier (stored in your browser's local storage) and a per-session identifier (stored in session storage). These are anonymous identifiers not linked to personal accounts unless you are logged in. We do not store browser type or device type in analytics events.

Event Atlas also logs search queries — including search terms and filters used — to improve search quality and understand popular searches. No personal identifiers are attached to search logs.

Location Data

With your permission, we use your browser's geolocation API to show vendors near you. We also use IP-based geolocation services to suggest your approximate location. You can decline location permissions and search by any location manually.

We use IP addresses for rate limiting to prevent abuse of certain features such as contact forms and inquiry submissions. IP addresses used for rate limiting are stored temporarily in memory and are not linked to user accounts or retained in our analytics records.

Cookies & Local Storage

We use cookies, local storage, and session storage for authentication, functionality, and analytics.

Cookies:

• Authentication cookies managed by our authentication provider to maintain login sessions
• Functional cookies for site status and administrative access

Local Storage:

We use browser local storage for maintaining your session and preferences, remembering your selected dashboard role, caching search and location preferences, supporting the signup and referral flow, tracking one-time UI elements (such as welcome messages and promotional banners), and generating anonymous analytics identifiers.

Session Storage:

We use browser session storage for anonymous session identifiers for analytics and temporary registration flow data.

All cookies, local storage, and session storage items we use are functional or analytical. We do not use third-party advertising cookies or tracking pixels.

2. How We Use Your Information

• To operate and maintain your account
• To display vendor profiles and portfolios to customers
• To facilitate inquiries between customers and vendors
• To provide search results and vendor recommendations
• To generate analytics dashboards for vendors (profile views, inquiry counts, conversion rates)
• To process vendor subscription payments
• To send transactional emails (inquiry notifications, account verification, password resets)
• To send marketing emails if you have opted in (you can unsubscribe at any time)
• To improve and develop new features

3. Email Communications

We send transactional emails necessary to operate your account, such as inquiry notifications, booking status updates, security alerts, billing notices, and account-related reminders. These emails cannot be opted out of as they are essential to the service.

We may send optional product update or marketing emails. You can opt out of these at any time using the unsubscribe link in each email or from your notification preferences in your dashboard.

In some cases, vendors may configure auto-reply messages that are sent to inquiry submitters, including those who submitted inquiries without creating an account.

4. How Inquiry Data Flows

When a customer submits an inquiry, the inquiry details — including the customer's name, email, event information, and message — are stored in our database and sent to the vendor via email notification. The vendor uses this information to respond directly and potentially arrange services. Event Atlas facilitates this connection but is not a party to any agreement or transaction between customers and vendors.

5. Third-Party Services

We use the following third-party services to operate Event Atlas:

• Supabase — database hosting and authentication. Data is stored in Supabase-managed PostgreSQL databases with row-level security policies. Privacy policy.
• Stripe — payment processing for vendor subscriptions. We share vendor email, name, and account identifiers with Stripe to create and manage subscriptions. Stripe independently collects and secures payment method details. Privacy policy.
• Google — authentication via Google OAuth for users who choose to sign in with Google. Google receives standard OAuth authentication data. Privacy policy.
• Google Fonts — web fonts loaded from Google's servers. Your browser makes a standard request to Google to load fonts, which means your IP address is visible to Google per their privacy policy. No other user data is sent. Privacy policy.
• Resend — transactional and marketing email delivery. Emails are sent from mail.tryeventatlas.com. Privacy policy.
• Mapbox — map display, address autocomplete, and location search functionality. Privacy policy.
• Geolocation services — we use multiple services to provide location-based features. ip-api.com and ipgeolocation.io perform server-side IP-based geolocation to suggest your approximate location (your IP address is sent server-side, not directly from your browser). Radar.io and OpenStreetMap Nominatim provide location search and geocoding for address lookup.
• DiceBear — generates default avatar images for users who have not uploaded a profile photo. Avatar generation uses account identifiers (such as your user ID, email address, or name) as a seed to produce a consistent avatar across sessions. The resulting avatar is a cartoon graphic and is not a representation of your actual appearance. The seed is sent to DiceBear's API to generate the image.
• Unsplash — stock photography displayed on the Platform. No user data is sent to Unsplash.
• Vercel — website hosting and edge network delivery. Privacy policy.

Each of these services has its own privacy policy. We select providers that maintain industry-standard security practices. We may use additional service providers as needed to operate the Platform. We update this list periodically to reflect current providers.

6. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Inquiry flow: customer contact and event details are shared with the vendor they contact via email notification.
• Public profiles: vendor business information, portfolios, and reviews are publicly visible.
• Payment processing: vendor account details are shared with Stripe to process subscription payments.
• Legal requirements: we may disclose information if required by law or to protect the safety of our users.

7. Your Rights

• Access: you can view your profile information from your dashboard. To request a complete copy of all data associated with your account, contact us at legal@tryeventatlas.com.
• Correction: you can update your profile information at any time.
• Deletion: you can delete your account directly from your dashboard settings. Account deletion removes your profile, personal data, subscription, and uploaded files (including portfolio images, avatar, and review photos on a best-effort basis). For customers: reviews you have written will be anonymized — your name is replaced with “Former Customer” and the review is no longer linked to your identity. Review text, ratings, and photos remain visible to preserve review integrity for other users. For vendors: your vendor profile, portfolio, packages, reviews on your profile, and all associated vendor data are permanently deleted. Anonymized analytics data (with your user ID removed) may be retained for aggregate platform insights. Administrative logs may retain references to your account for security, fraud prevention, and legal compliance purposes. Newsletter subscriptions are managed independently and are not affected by account deletion — you can unsubscribe at any time. Third-party services we use (such as our payment processor) may retain data in accordance with their own privacy policies. You can also contact us at legal@tryeventatlas.com for assistance with account deletion.
• Data export: you can request an export of your data by emailing us at legal@tryeventatlas.com.
• Marketing opt-out: you can unsubscribe from marketing emails at any time using the unsubscribe link in each email. You can also contact us at hello@tryeventatlas.com to opt out of marketing communications.
• Notification preferences: registered users can manage their notification preferences from their dashboard settings.

California Residents

If you are a California resident, you have the right to know what categories of personal information we collect and why, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information (we do not sell personal information). To exercise these rights, contact us at legal@tryeventatlas.com.

International Users

Event Atlas is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer.

8. Data Retention

We retain your account data for as long as your account is active. Inquiry records are retained for as long as they are relevant to the vendor-customer relationship. Vendors can archive or manage inquiries through their dashboard. We may implement automated retention limits in the future.

Analytics data, including anonymous interaction events and daily aggregate metrics, is retained to help vendors understand their profile performance. Individual event records may be retained indefinitely in anonymized form.

We maintain internal administrative logs for security and platform integrity purposes. These logs may contain references to user accounts and actions, and are retained for operational and compliance purposes.

If you delete your account, we remove your personal information within 30 days, though some data may persist in backups for up to 90 days. Anonymized records and administrative logs may be retained as described above.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), row-level security policies on our database, secure password hashing, and access controls on internal systems. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

10. Children's Privacy

Event Atlas is not intended for anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected information from someone under 18, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top of this page indicates when the policy was last revised.

12. Contact Us

For data rights requests, privacy complaints, or legal matters, contact us at legal@tryeventatlas.com. For general questions about this Privacy Policy, contact us at hello@tryeventatlas.com.