Privacy Policy

This Privacy Policy explains how EventHub collects, uses, and shares information when you use our website and related services (the “Service”). By creating an account or using EventHub, you acknowledge this Policy.

EventHub processes personal data in connection with operating an event-discovery platform. Where Algerian law applies, that includes Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, as amended and supplemented, including by Law No. 25-11 of 24 July 2025. This Policy is meant to inform you in clear language. It is not a claim that EventHub holds a particular government registration, certification, or approval.

Your use of EventHub is also governed by our Terms of Service. If this Policy and the Terms appear to conflict on a privacy topic, this Policy controls for that topic.

1. Information we collect

Depending on how you use EventHub, we may collect:

• Account information, such as your name, email address, and password.
• Profile information you choose to add, such as a username, short bio, organization name, or profile photo.
• Event information you provide when creating or editing events, including descriptions, dates, locations, and media.
• Organizer submission data, such as the identity you associate with a listing and any supporting information you send when we ask about authority or legitimacy.
• Registration information you submit when joining an event, which may include contact details requested by the organizer.
• Usage data, such as pages viewed, device type, and basic diagnostic logs needed to operate and secure the Service.
• Technical data, which may include IP address, browser type, language, approximate time of access, and similar device or log information generated when you use the Service.
• Preference data stored on your device, such as language and display-theme choices.
• Communications you send us, including support questions and reports about listings or accounts.

Guests may browse public events without an account. Some features require you to sign in.

We aim to collect only what we need for the purposes described below (data minimization). We do not ask you to provide sensitive categories of data (such as health, religion, or biometric templates) to create a basic EventHub account. If an organizer’s join form or an event itself collects such data, that organizer is responsible for having a lawful basis and for telling attendees why it is needed.

2. How we use information

We use information to:

• create and manage accounts;
• publish, review, and display events;
• process event registrations and show them to the relevant organizer;
• maintain security, prevent abuse, and diagnose problems;
• communicate about your account or the Service when needed;
• remember language and theme preferences;
• review reports, enforce the Terms of Service, and protect users;
• comply with applicable law and respond to lawful requests from competent authorities.

We do not use your personal data for third-party advertising networks. We do not sell your personal information.

Lawful basis

Where Law 18-07 applies, processing of personal data generally requires the data subject’s consent, unless another ground provided by that law applies (for example, where processing is necessary to perform a request you make, to comply with a legal obligation, or in other cases the law allows). In practice:

• account creation and use of signed-in features are based on your request to use the Service and the consent you give when you register;
• event listings you submit are processed to provide the Service you asked for;
• registrations you submit are processed to complete your request to join an event and to show your details to that organizer;
• security logs and abuse prevention are processed as needed to operate and protect the Service and, where applicable, on the basis of our legitimate need to keep the platform safe, to the extent the law allows;
• we process data to meet legal obligations when the law requires us to retain or disclose it.

Where processing is based on consent, you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. Withdrawal may mean we cannot keep providing some features.

3. How we share information

We share information only as needed to run EventHub:

• with event organizers when you register for their event;
• with service providers who host or process data on our behalf, including Google Firebase for authentication and database services;
• with Cloudinary, which we use to store and deliver images you or organizers upload (such as event images and profile photos);
• with providers of technical resources the site loads to function, such as fonts or maps, which may receive technical data such as IP address when your browser requests those resources;
• when required by law, or to protect EventHub, our users, or the public.

We do not sell your personal information.

EventHub does not currently use a separate email-marketing provider or a payment processor on the Service. If we add those services, we will update this Policy and name the categories of providers.

Service providers (processors) are allowed to process personal data only to provide their service to us and as described in their terms and this Policy. We do not authorize them to use EventHub user data for their own unrelated marketing.

Legal and government disclosures

We may disclose information if we reasonably believe it is required by applicable law, a court, or a competent authority, or if it is necessary to detect, prevent, or address fraud, security issues, or serious harm. We may also disclose information to enforce the Terms of Service or to defend legal claims. We will limit what we disclose to what is reasonably necessary.

4. Retention

We keep account, event, and registration data for as long as needed to provide the Service and meet operational or legal requirements. You may ask us to update or delete your account information, subject to records we must retain.

In practice, we apply these criteria:

• Account and profile data — kept while your account is active, then deleted or irreversibly anonymized within a reasonable period after deletion, except as noted below.
• Event listings — kept while the listing is live and for a reasonable period afterward so organizers and EventHub can handle disputes, reports, or legal requests.
• Registration / guest records — kept as needed for the organizer to manage the event and for EventHub to operate and secure the Service, then deleted or anonymized when no longer needed.
• Security and technical logs — kept for a limited period appropriate to security, abuse prevention, and diagnostics, and longer only if a specific investigation or legal obligation requires it.
• Legal holds — we may retain specific records longer if we must do so to comply with law, to establish or defend a claim, or to respond to a competent authority.

Backup copies may persist for a short additional period after deletion from live systems. We do not keep personal data indefinitely “just in case” without a purpose.

5. Security

We use industry-standard safeguards, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

In addition, we limit access to personal data to persons who need it to operate the Service, and we rely on our hosting and authentication providers’ access controls. This is not a claim that EventHub is certified to a named security standard.

Security incidents

If we become aware of a personal-data breach, we will investigate and take steps we reasonably consider appropriate to contain it. Where Algerian law requires notification of the National Authority for the Protection of Personal Data (ANPDP) — including the time limits introduced by Law 25-11 — or notification of affected persons, we will do so as required. We may also tell affected users when we believe there is a serious risk to them, even if a specific notice is not mandated, when we can do so without creating further risk.

6. Your choices

You may access or update certain account details while signed in. To request deletion or to ask questions about your information, contact us at hello@eventhub.app.

Your rights under Algerian data-protection law

Where Law 18-07 applies, you may have the right, subject to the limits in that law, to:

• be informed about the processing of your personal data;
• obtain confirmation of whether we process your personal data, and access that data in an intelligible form;
• request updating, rectification, erasure, or blocking of data that is inaccurate, incomplete, or processed in a way that does not comply with the law;
• object, for legitimate reasons, to processing of your personal data, and to object to use of your data for prospecting, including commercial prospecting;
• withdraw consent where processing is based on consent;
• not be subject to a decision based solely on automated processing that produces legal effects concerning you or significantly affects you, except as the law allows. EventHub does not currently make solely automated decisions of that kind about users.

You may also lodge a complaint with the ANPDP. Information about the Authority is published by the Authority itself (including at anpdp.dz).

To exercise these rights, email hello@eventhub.app with the subject “Privacy request” and describe what you want. We may ask you to verify your identity (for example, by using your account email or providing information that matches our records) before we act, so that we do not disclose data to the wrong person. We may refuse or limit a request that is manifestly unfounded or excessive, as the law allows, and we will explain if we cannot fully meet a request.

Where Law 18-07 requires corrections to be made within ten (10) days of a valid rectification request, we will follow that time limit. For other requests, we will respond within a reasonable time.

7. Cookies and similar technologies

EventHub and our service providers may use cookies or local storage to keep you signed in, remember preferences, and maintain security. You can control cookies through your browser settings. Disabling them may affect sign-in and some features.

We use these technologies for:

• Strictly necessary / security — sign-in session and abuse prevention;
• Preferences — language and light/dark theme stored on your device;
• Service operation — features that cannot work without storing a signed-in state.

We do not currently use third-party advertising cookies. Preference storage (language and theme) is optional in the sense that you can clear it in your browser; the Service will then use defaults. Authentication cookies or storage are needed to stay signed in.

Because EventHub is a signed-in web application, some storage is required for the Service to function. Where consent is required for a non-essential cookie, we will request it before using that cookie. Clearing cookies or site data may sign you out.

8. Children

EventHub is not directed at children under 13, and we do not knowingly collect personal information from them.

The Service is intended for users with legal capacity to contract, which in Algeria is generally 18 years of age. If we learn that we have collected personal data from a child without appropriate consent from a parent or legal guardian where the law requires it, we will delete that data. Organizers who collect information from minors at an event or through their own forms are independently responsible for complying with applicable rules on children’s data.

9. Changes

We may update this Policy from time to time. Continued use of EventHub after an update means you acknowledge the revised Policy. The “Last updated” date at the top of this page will change when we do.

If a change is material, we will try to give reasonable notice through the Service or by email when we have an address for you.

10. Contact

Privacy questions can be sent to hello@eventhub.app.

This is also the contact for access, correction, deletion, objection, and withdrawal-of-consent requests. EventHub has not appointed a separate public data-protection officer on this page. If that changes, we will update this Policy.

11. EventHub processing and organizer processing

EventHub processes personal data to run the platform: accounts, listings, on-platform registrations, security, and communications with us. For those activities, EventHub determines the purposes described in this Policy.

Organizers are independently responsible for:

• how they use registration details EventHub shows them;
• any additional data they collect at the event, on paper, by messaging apps, or through external links;
• whether they have a lawful basis and have informed attendees;
• keeping attendee data secure after they receive it and deleting it when they no longer need it.

If you register for an event, the organizer will see the information you submitted for that event. After that, the organizer’s use of your data is their responsibility. EventHub is not their data-protection officer and does not control what they do offline or on third-party sites.

If an organizer’s listing links to an external form or website, that destination is not EventHub. The Privacy Policy of that destination applies there.

12. International data transfers

Some service providers we use (including Google Firebase for authentication and database hosting, and Cloudinary for images) may process data on servers outside Algeria. Your browser may also contact other technical providers (for example, font or map services) when you load the site.

Under Law 18-07, transfers of personal data to a foreign State may require authorization from the ANPDP and are subject to conditions set by that law, including that the destination provide a sufficient level of protection, subject to exceptions the law allows (such as the data subject’s express authorization in certain cases). EventHub does not claim that any particular transfer has already been authorized by the ANPDP. We will take the steps required of us under applicable law. This is an area that should be reviewed with Algerian counsel before relying on cross-border hosting at scale.

13. Account deletion and legal retention

You may request deletion of your account by emailing hello@eventhub.app or by using any in-product account-deletion control we provide. When we delete an account, we remove or anonymize personal data we no longer need.

We may retain limited information when we must do so to comply with law, resolve disputes, enforce the Terms of Service, prevent abuse, or complete transactions already in progress. Event listings you created may remain visible in anonymized or reassigned form if needed to keep the Service coherent, or we may remove them. Registration records shared with an organizer may already be in that organizer’s possession; deleting your EventHub account does not automatically delete copies the organizer kept.

14. Language

This Policy is published in English. A French translation may be provided for convenience. Until EventHub designates another language version as official, the English text is the operative version if there is a conflict.