Legal

Privacy Policy

Evven is built on the belief that your data belongs to you. This policy explains exactly what we collect, why we collect it, and what control you have over it.

Last updated: June 2026

What We Collect

We collect only what's needed to run the service.

Account dataYour name, username, and email address when you sign up.

Profile dataAny additional info you choose to add — avatar, bio, and so on.

Event dataEvents you create, join, or interact with on the platform.

Usage dataPages visited, features used, and actions taken within the app — used to improve the product.

Device dataBrowser type, OS, and IP address — used for security and debugging.

We do not collect payment information — we don't process payments directly.

How We Use It

Your data is used to:

Create and maintain your account.
Power core features — event creation, discovery, and collaboration.
Send transactional emails: account verification, password resets, event notifications.
Detect and prevent abuse, fraud, and security incidents.
Understand how people use Evven so we can make it better.

We do not use your data to train ML models or sell it to advertisers. There are no ads on Evven.

Third-Party Services

We rely on a small set of trusted infrastructure providers to operate the platform:

SupabaseDatabase and authentication infrastructure.

ResendTransactional email delivery.

RenderBackend hosting and deployment.

VercelFrontend hosting and edge delivery.

Each provider processes only the data necessary for their function and is contractually bound to protect it. We share your data with no one else.

Data Retention

Your data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or needed to resolve an open dispute.

Security

Passwords are hashed and never stored in plaintext. All data in transit is encrypted via TLS. Access to production systems is restricted to core team members and protected by multi-factor authentication.

No system is perfectly secure. If you discover a vulnerability, please disclose it responsibly to security@evven.xyz.

Your Rights

You have the right to:

AccessRequest a copy of your personal data.

CorrectUpdate inaccurate or incomplete information.

DeletePermanently remove your account and associated data.

ExportReceive your data in a portable, machine-readable format.

Opt outWithdraw consent from non-essential communications at any time.

To exercise any of these, email hello@evven.xyz with the subject line "Privacy Request". We will respond within 14 days.

Children's Privacy

Evven is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

Changes to This Policy

If we make material changes, we will notify you via email and update the date above at least 7 days before changes take effect. Continued use of the service after that date constitutes acceptance.

Contact

Questions, concerns, or requests — we're at:

hello@evven.xyz