GetEventNow

Privacy Policy

Introduction

GetEventNow is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how you can exercise your rights.

Legal Basis for Processing

The processing of your personal data is based on the following legal grounds: your consent (for using the platform), contract performance (for providing our services), and our legitimate interests (for platform security and abuse prevention).

Mandatory or Optional Data

Data marked as mandatory (email, birth year) is required for the platform to function. Refusal to provide this data prevents use of the service. Optional data (gender, biography) is optional and its absence does not affect platform use.

Data Collected

We collect the following data:

  • Email address (via Google OAuth)
  • Birth year (to verify minimum age)
  • Gender (optional, for analytics)
  • Profile photo URL
  • Profile information (display name, bio, city, music styles)
  • Follow history and tracked events
  • IP address (retained 90 days for security)
  • User-Agent (retained 90 days for anonymized analytics)

Data NOT Collected

We do NOT collect:

  • Phone number
  • Precise GPS location
  • Address book contacts
  • Banking data (payments go through Bakong / KHQR)

Data Usage

Your data is used to: provide our services, personalize your experience, send important notifications, improve our platform via anonymized analytics, detect and prevent abuse, ensure platform security.

Data Sharing

We share your data only with:

  • Supabase (self-hosted storage and database)
  • AI moderation service (for content analysis)
  • Resend (transactional email delivery)
  • Cloudflare (CDN, security, and performance)

Data Retention

Your data is retained as long as your account is active. Technical data (IP, User-Agent) is retained for a maximum of 90 days. Upon account deletion, your personal data is deleted or anonymized within 30 days.

Your Rights

You have the following rights:

  • Right of access: request a copy of your data
  • Right of rectification: correct your inaccurate data
  • Right to be forgotten: request account deletion
  • Right to portability: export your data

Data Security

We use TLS 1.3 encryption for all communications. Data is encrypted at rest in our PostgreSQL database. Our backups are encrypted and stored securely. We apply the principle of least privilege and strict RLS (Row Level Security) policies.

Cookies

We use httpOnly and Secure cookies for authentication. Cookies are marked SameSite=Lax to protect against CSRF. We do not use third-party advertising tracking cookies.

Data Hosting

Your data is hosted on our secure servers located in Europe. All data transfers are secured via TLS 1.3.

Children's Privacy

GetEventNow is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we discover we have collected data from a minor, we will delete it immediately.

Privacy Policy Changes

We may update this Privacy Policy. Significant changes will be announced by email or notification. Continued use of the platform after changes constitutes acceptance of the new policy.

Contact

For any questions regarding this Privacy Policy or to exercise your rights, please contact us at [email protected]

Data Protection Authority

In accordance with GDPR, you have the right to access, rectify, delete, limit, and object to the processing of your data. You can exercise these rights by contacting us at [email protected]. You also have the right to lodge a complaint with the relevant data protection authority.