Privacy Policy

This Privacy Policy applies to personal information processed through EveBash, including information relating to:

• account holders;
• event organizers and hosts;
• gallery owners;
• guests;
• photographers and other media contributors;
• business users;
• visitors to our website;
• mobile application users;
• people contacting EveBash support; and
• other individuals whose personal information may be processed through the Services.

Some photographs and videos uploaded by users may contain images of people who do not themselves have an EveBash account.

The treatment of such information may depend on the circumstances, the person who uploaded the content, applicable privacy law, and the EveBash feature being used.

The information EveBash processes depends on how you use the Services. We may process the following categories of information.

2.1 Account Information

When you create or maintain an EveBash account, we may process information such as:

• name;
• email address;
• phone number, where provided or required;
• profile photograph;
• username or profile information;
• account type;
• authentication information;
• account preferences;
• language or regional settings;
• subscription status; and
• account creation and activity information.

Passwords and authentication credentials are handled through the authentication systems used by EveBash and should not be stored by EveBash in readable plaintext form.

2.2 Authentication Information

EveBash may use authentication providers and technologies to support:

• email and password authentication;
• email verification;
• password recovery;
• Google sign-in;
• Apple sign-in; and
• other supported authentication methods.

When you use a third-party login provider, EveBash may receive information permitted by that provider, such as your name, email address, account identifier, or profile information.

2.3 Event Information

When an event is created or managed through EveBash, we may process information such as:

• event name;
• event type;
• event description;
• event date;
• event location where provided;
• event organizer information;
• gallery settings;
• invitations;
• guest information;
• access permissions;
• event branding;
• comments and interactions; and
• other information supplied by the event organizer.

2.4 Photos, Videos and Other Media

EveBash is a digital gallery and media platform. Users may upload:

• photographs;
• videos;
• thumbnails;
• profile images;
• event artwork;
• business portfolio media; and
• other files supported by the Services.

Media may contain information about identifiable people. EveBash processes uploaded media to provide the Services requested by users and event organizers.

Depending on the features being used, uploaded photographs and videos may undergo technical processing including:

• storage;
• upload validation;
• format validation;
• image resizing;
• thumbnail generation;
• preview generation;
• compression;
• video transcoding;
• streaming preparation;
• video thumbnail extraction;
• metadata extraction;
• indexing;
• integrity checking;
• content moderation;
• access-control processing;
• caching; and
• delivery through content-delivery infrastructure.

These processes are performed to operate, secure, optimize, and deliver EveBash galleries and related features.

EveBash may provide a feature called Find You or similar functionality that helps an authorized user locate photographs in an eligible gallery in which they may appear.

When Find You is used, EveBash may process a photograph or image submitted by the user for facial matching.

Technical processing may include:

• detecting a face in an image;
• preparing or aligning the facial region;
• generating a mathematical facial representation or embedding;
• comparing that representation with compatible facial representations generated from eligible gallery photographs; and
• returning photographs that the system determines may contain a matching face.

A facial embedding is a mathematical representation used by the matching system. It is not intended to be used by EveBash to independently determine a person's legal identity.

Find You results are probabilistic. The system may:

• return incorrect matches;
• fail to return a correct match; or
• produce different results depending on image quality, lighting, angle, obstruction, and other technical factors.

Find You should therefore not be treated as definitive proof of identity.

4.1 Purpose of Find You Processing

Facial processing associated with Find You is intended to help authorized users locate their own or otherwise lawfully searchable photographs within eligible EveBash event galleries.

EveBash does not intend Find You to be used for general public facial identification, surveillance, stalking, law-enforcement identification, or unrelated profiling.

4.2 Consent and Availability

Where applicable law requires consent or another lawful basis for facial processing, EveBash will implement appropriate notices, controls, or consent mechanisms.

Find You may therefore be unavailable or subject to additional requirements depending on jurisdiction, age, gallery settings, event-host settings, applicable law, or other privacy considerations.

4.3 Facial Data Retention

EveBash should retain facial representations only for as long as reasonably necessary for the purpose for which they were created, subject to applicable legal, security, dispute-resolution, and technical requirements.

The precise production retention schedule for Find You data should be documented and reflected in EveBash's technical systems.

Where deletion is required or requested and applicable, EveBash will delete or de-identify eligible facial-processing data according to its applicable retention procedures.

Photographs and videos uploaded to EveBash may contain people who did not personally upload the content or create an EveBash account.

Event organizers, photographers, businesses, and other users uploading media are responsible for ensuring they have the rights, permissions, consents, or other lawful basis required to upload and share that media.

If you believe your personal information or image appears on EveBash without appropriate authorization, you may contact: support@evebash.com.

EveBash may investigate appropriate privacy, safety, or legal requests and may restrict or remove content where required or appropriate.

EveBash may process information relating to how galleries are configured and accessed. This may include:

• gallery identifiers;
• event identifiers;
• invitations;
• guest access;
• access permissions;
• sharing settings;
• private/public settings;
• access links;
• authentication status; and
• activity necessary to maintain gallery security.

This information helps EveBash ensure that restricted content is available only to users who are authorized to access it.

If EveBash provides social or interaction features, we may process information such as likes, reactions, comments, media interactions, gallery interactions, and related account identifiers.

Some interactions may be visible to event organizers or other authorized gallery participants depending on the feature and privacy settings.

Users creating profiles through EB Business or related business features may provide information including:

• business name;
• contact information;
• business description;
• service categories;
• location;
• portfolio photographs or videos;
• business logo;
• website or social links;
• pricing or service information; and
• other information intentionally published as part of the business profile.

Information designated for a public business profile may be visible to other EveBash users or visitors. Users should avoid publishing information they do not want to make publicly available.

If you use EB Network, EveBash may process information necessary to enable professional discovery, networking, inquiries, recommendations, listings, or related functionality.

Information intentionally published through a public or discoverable profile may be visible to other users according to your applicable settings.

When you purchase an EveBash subscription or paid service, we may process information including:

• selected plan;
• transaction identifier;
• payment status;
• amount;
• currency;
• invoice information;
• subscription status;
• renewal information;
• payment timestamps; and
• refund or dispute status.

Payments may be processed through third-party payment providers such as Razorpay.

EveBash does not intend to store full payment-card numbers, UPI credentials, banking passwords, CVVs, or similar sensitive payment credentials when those credentials are collected and processed directly by the payment provider.

Payment providers process payment information according to their own terms and privacy practices.

When you use EveBash, certain technical information may be processed automatically. This may include:

• IP address;
• browser type;
• operating system;
• device type;
• application version;
• request information;
• timestamps;
• error logs;
• security events;
• session information;
• network information;
• pages or features accessed;
• performance information; and
• diagnostic information.

This information helps us operate, secure, troubleshoot, monitor, and improve the Services.

EveBash may use cookies, local storage, session storage, SDKs, or similar technologies where necessary to:

• maintain authentication;
• preserve sessions;
• remember preferences;
• secure accounts;
• prevent abuse;
• measure performance;
• understand product usage; and
• improve the Services.

Where required by applicable law, EveBash will provide appropriate controls or obtain consent before using non-essential cookies or similar technologies. Additional details may be provided through a separate Cookie Policy.

EveBash may process personal information to:

• create and maintain accounts;
• authenticate users;
• manage events;
• create and display galleries;
• store photographs and videos;
• process media;
• deliver media to authorized users;
• provide Find You where enabled;
• manage invitations and gallery access;
• enable comments, likes, and interactions;
• operate EB Business and EB Network;
• process subscriptions;
• confirm payments;
• communicate service information;
• provide customer support;
• detect prohibited content;
• prevent fraud and abuse;
• protect accounts and infrastructure;
• investigate security incidents;
• enforce our Terms and policies;
• troubleshoot technical issues;
• maintain service reliability;
• understand and improve the Services; and
• comply with applicable legal obligations.

We seek to process personal information only for purposes connected with operating EveBash or for other purposes communicated to users as required by applicable law.

EveBash does not sell personal information. We may share or make information available in limited circumstances described below.

Service Providers

EveBash relies on infrastructure and technology providers to operate the platform. Depending on the deployed architecture, these may include providers supporting:

• website hosting;
• backend hosting;
• database services;
• authentication;
• object storage;
• content delivery;
• media processing;
• artificial-intelligence processing;
• background jobs;
• payments;
• email;
• analytics;
• monitoring; and
• security.

These providers may process limited information as necessary to perform services for EveBash.

Other EveBash Users

Information may be shared with other users when required by the feature being used. For example:

• event hosts may see event participants;
• authorized guests may see gallery media;
• comments may be visible to gallery participants;
• business information may be publicly discoverable;
• gallery owners may see relevant activity; and
• Find You may return eligible photographs to an authorized user.

Visibility depends on the feature, event settings, account permissions, and applicable privacy controls.

Legal and Safety Requirements

EveBash may preserve, disclose, or provide information where reasonably necessary to:

• comply with applicable law;
• respond to legally valid requests;
• enforce legal rights;
• investigate fraud;
• address security incidents;
• protect users;
• prevent serious harm; or
• enforce EveBash policies.

Where legally permitted and appropriate, EveBash will seek to protect user privacy when responding to such requests.

EveBash's infrastructure may use third-party providers for different technical purposes. Our current or intended architecture may involve services such as:

• Vercel for web frontend hosting;
• Railway for backend services;
• Supabase for database and authentication;
• Backblaze B2 for media storage;
• Cloudflare for media delivery and caching;
• Modal for specialized AI and video processing;
• Upstash QStash for background-job delivery;
• Razorpay for payment processing; and
• Hostinger for business email services.

The specific provider configuration may change as EveBash's infrastructure evolves. We may replace providers where appropriate without materially changing the purposes for which personal information is processed.

Some EveBash service providers may operate infrastructure in countries outside the location where a user resides. As a result, personal information may be processed or stored in other jurisdictions where permitted by applicable law.

Where cross-border processing is subject to legal requirements or restrictions, EveBash will take steps reasonably required to comply with those requirements.

EveBash uses technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Depending on the system involved, measures may include:

• authentication;
• access controls;
• private storage;
• encrypted network connections;
• secure API communication;
• restricted server credentials;
• database security controls;
• Row Level Security;
• temporary media-access mechanisms;
• logging;
• monitoring;
• rate limiting;
• security updates; and
• separation of development, staging, and production systems.

However, no online system can guarantee absolute security. Users are also responsible for protecting their account credentials and gallery-access information.

If EveBash becomes aware of a personal-data breach or security incident, we may investigate, contain, remediate, document, and provide notifications where required under applicable law.

Users should promptly contact EveBash if they believe their account or information has been compromised.

EveBash retains personal information only for as long as reasonably necessary for the purposes for which it is processed, subject to legal, security, contractual, accounting, fraud-prevention, dispute-resolution, and operational requirements.

Retention periods may vary according to the type of information. For example:

Account information

May be retained while the account remains active and for an appropriate period after deletion where necessary.

Uploaded media

May be retained while associated events, galleries, subscriptions, or accounts remain active and according to applicable storage and deletion policies.

Payment records

May be retained for accounting, taxation, fraud prevention, disputes, and other legal obligations.

Security logs

May be retained for a reasonable period for security monitoring and investigation.

Facial representations

Should be retained only for the period reasonably necessary to provide the relevant Find You functionality and satisfy applicable legal or security requirements.

Backups and caches

Deleted information may remain temporarily in backups, caches, logs, or technical systems until those copies are overwritten or removed according to normal retention cycles.

Users may be able to delete individual media, galleries, events, business information, or their EveBash account depending on their permissions and the applicable feature.

Deletion from the user interface may not result in immediate removal from every backup, cache, log, or processing system. EveBash will remove or de-identify eligible information according to applicable retention procedures and legal requirements.

Depending on applicable law and the circumstances of processing, you may have rights relating to your personal information. These may include the ability to:

• request information about personal data being processed;
• request access to eligible personal information;
• request correction of inaccurate information;
• request completion or updating of information;
• request deletion or erasure where applicable;
• withdraw consent where processing is based on consent;
• manage certain privacy choices;
• raise a grievance or complaint; and
• exercise other rights available under applicable data-protection law.

Requests may be subject to identity verification and applicable legal limitations. India's Digital Personal Data Protection framework provides rights relating to access, correction, erasure and grievance redressal, among other matters, as applicable when the relevant provisions are in force.

Where EveBash relies on consent for a particular processing activity, you may withdraw that consent through the method provided by EveBash.

Withdrawal of consent does not necessarily affect processing that lawfully occurred before withdrawal. Withdrawing consent may make certain features unavailable where the relevant information is necessary to provide those features.

Where required by applicable law, withdrawing consent should be reasonably accessible and comparable in ease to giving consent. India's notified DPDP framework specifically addresses mechanisms for withdrawal and exercising data rights.

EveBash events and galleries may contain photographs or videos of children.

Processing information relating to children requires particular care.

Event organizers and uploaders are responsible for ensuring they have appropriate authority or permission to upload and share content involving children.

Where applicable law requires parental or guardian consent for processing a child's personal information or use of particular features, EveBash will require appropriate consent or restrict the relevant feature.

Find You or other facial-processing functionality involving children may be subject to additional restrictions or may be unavailable depending on applicable legal requirements and EveBash policy.

Event hosts and gallery owners control certain aspects of how content is uploaded, organized, and shared through their events.

Hosts should:

• invite only appropriate participants;
• manage gallery access responsibly;
• avoid publicly exposing private gallery credentials;
• ensure they have appropriate rights to uploaded media;
• respect requests concerning personal content where applicable; and
• configure gallery privacy settings appropriately.

EveBash provides the platform infrastructure, while event organizers remain responsible for their own use of the Services and the content they choose to upload or share.

EveBash may update this Privacy Policy as the Services, technology, or legal requirements change.

When we update the policy, we will change the Last updated date.

For material changes, we may provide additional notice through:

• the EveBash website;
• the application;
• email;
• the user dashboard; or
• another appropriate communication method.

Where applicable law requires renewed consent, we will request it.

For privacy questions, requests, complaints, account issues, or concerns about photographs or videos appearing on EveBash, contact:

Before public launch, EveBash should add its final legal entity name, registered/business address, and the appropriate privacy/grievance contact details required under applicable law.

Users may contact EveBash at: support@evebash.com for matters including:

• access requests;
• correction requests;
• deletion requests;
• consent-related requests;
• privacy complaints;
• unauthorized media concerns;
• Find You concerns; and
• other privacy questions.

EveBash may request reasonable information to verify the identity or authority of the person submitting a request before acting on it.

Additional grievance-redressal information will be provided where required by applicable law.