Privacy policy
Last updated 6 October 2026
Who we are
Eventfully (eventfully.app) is a seating plan tool run by a sole trader based in the United Kingdom. We are the controller of the personal data described here. Questions and requests go to
[email protected].
What we collect
•
Your account: email address, and your name and profile picture if you sign in with Google. Our sign-in provider also keeps a record of sign-ins, with the IP address and browser used, to protect your account.
•
Trying it without an account: a random identifier saved in your browser, so your work comes back when you return, and the time of your last visit.
•
What you put into Eventfully: event names, dates and notes, guest names, dietary needs and notes, and your tables and seating.
•
Request logs: IP address, browser, time and the page or request, kept by our hosting providers for security and fixing faults.
Signing in with Google
If you choose Continue with Google, Google shares your name, email address and profile picture with us. We ask for nothing else. We cannot see your Gmail, Drive, contacts, calendar or any other Google data.
We use this information only to create your account, sign you in and show which account you are signed in with. We do not sell it, use it for advertising, share it beyond the providers listed below, or use it to train AI or machine learning models.
Eventfully's use and transfer of information received from Google APIs adheres to the
Google API Services User Data Policy, including the Limited Use requirements. You can remove Eventfully's access at any time from your
Google Account.
Your guests' information
When you add guests, you decide what goes in. We store it only so you can see and arrange it, and never use it for anything else.
Dietary needs can reveal things like a health condition or religious belief. Add only what you need to plan seating and catering, and only what your guests would be comfortable with you noting down.
Why we use it
•
To provide the service you asked for: your account, and saving and showing your plans. The lawful basis is our contract with you.
•
To keep Eventfully secure and working: request logs, bot checks at sign-up and fixing faults. The lawful basis is our legitimate interest in running a safe, reliable service.
•
To meet legal obligations, where the law requires it.
We do not show ads, use analytics or tracking tools, or send marketing emails. The only emails you get from us are sign-in codes and replies to messages you send. We make no automated decisions about you.
Who we share it with
We use a small number of providers to run Eventfully. Each handles data only on our instructions.
•
Clerk (United States): accounts, sign-in codes and bot checks.
•
Google Cloud (London): runs the Eventfully server.
•
Neon (London, on Amazon Web Services): the database that holds your events and guest lists.
•
Cloudflare (global network): delivers the Eventfully website.
•
Google: only if you choose to sign in with Google.
We never sell your data. We would share it with anyone else only if the law required us to.
Where it is stored
Your events and guest lists are stored in London. Your account details are held by Clerk in the United States, and Cloudflare may serve the website from outside the UK. Both are certified under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as giving adequate protection.
How long we keep it
•
Without an account: your work is kept until you create an account, when it moves across, or until we clear out inactive work. We do that from time to time, permanently deleting everything made by visitors who have not been back for at least 7 days.
•
With an account: we keep your data until you ask us to delete your account. We then delete the account and everything in it within 30 days.
•
Things you delete in the app disappear from view straight away, and are kept in the database until your account is deleted so a mistake can be put right. Ask us if you want them erased sooner.
•
Request logs are kept for up to 30 days. Deleted data can stay in our database provider's backups for a short time before they roll over.
Cookies and browser storage
Eventfully uses cookies only to keep you signed in. Without an account, it saves a random identifier in your browser so your work comes back. It also remembers how you like guest names shown. These are all needed for features you use, so we do not ask for consent. There are no advertising or analytics cookies.
Your rights
You can ask to see, correct, delete or take a copy of your data, or object to or restrict how we use it. Email
[email protected] and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the
Information Commissioner's Office. We would appreciate the chance to put things right first.
Security
All traffic is encrypted with HTTPS, and our providers encrypt stored data. Each account can only reach its own events. We never hold a password, because sign-in uses emailed codes or Google. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Children
Eventfully is for adults. If we learn that someone under 18 has an account, we will delete it.
Changes
We will update this page and its date when this policy changes, and tell you in the app or by email before any significant change.