Privacy policyHow Evently handles your data

1. Who we are

Evently (evently.com.my) is operated by IntellAgent Technologies in Malaysia. For any question about this policy or your data, email hi@intellagent.my.

Each event on Evently is run by its organizer, such as a club, a company or another group. When you register for an event, the organizer decides what the registration form asks and uses your answers to run the event. We hold that data for them and handle it as this policy describes. For how an organizer uses your data outside Evently, ask the organizer.

2. What we collect

Data you give us:

• Your email address, which is how you sign in.
• Your name, phone number and date of birth, when a registration form asks for them or you add them on your profile.
• A profile photo, if you upload one.
• Your answers to an event's registration form. The organizer chooses the questions.
• The name and age of each child or family member you add to a ticket.
• Your feedback on an event you attended, if you give it.
• A password, if you set one. We store only a scrambled form of it (a hash) that cannot be turned back into the password.

Data we collect as you use Evently:

• Your registrations and tickets: which events, the ticket code, whether you are approved or waitlisted, the price shown, and when you were checked in.
• Booth visits: which booths scanned your ticket, and which children on your ticket joined each booth.
• Lucky draws: your entries, and any prize you win.
• Signed-in devices: the device and browser name, the IP address, an approximate place worked out from the IP address (such as a city), and when you signed in and were last active.
• Passkeys: if you save one, we keep only its public key. Your fingerprint, face or device PIN never leaves your device.
• Your preferred language, so our emails reach you in it.

Data from others:

• If you sign in with Google, Microsoft or Yahoo, that service tells us your account ID, your email address and whether it has confirmed that address. We never get your password for that account.
• Organizers and their staff add data about you when they approve or reject a registration, check you in, or scan your ticket at a booth.

3. How we use it

• To sign you in and keep your account secure, including showing you the devices signed in to your account.
• To register you for events, show your ticket, check you in, and record booth stamps and lucky draw results.
• To send the emails you need: sign-in links, your ticket, news that you are approved or waitlisted, changes to an event you registered for, and a request for feedback after it.
• To give each event's organizer the data they need to run it.
• To fix problems, prevent abuse and keep Evently running.
• To meet our legal obligations.

We do not sell your personal data, and we do not use it for advertising.

You don't have to give us any data. But we need your email address to give you an account, and an organizer may need the answers to their form before they can accept your registration.

4. Who can see your data

• The organizer of each event you register for, and the staff they add, see your registration: your name, email, phone number, date of birth, form answers, the people on your ticket, your check-in, booth visits and feedback. They see it only for their own events.
• Booth staff see your name and the names of the people on your ticket when they scan it.
• If you are drawn in a lucky draw, your full name is shown on the draw screen at the event and to the organizer.
• Other attendees do not see your profile or your tickets.
• The service providers that run parts of Evently for us, listed below. They use your data only to provide their service to us.
• Authorities, when the law requires us to share it.

5. Service providers

We use these providers to run Evently:

• Vercel hosts the website and the API, and gives us visitor statistics (page views) without cookies.
• Neon runs our database.
• Backblaze stores images, such as profile photos and event posters.
• Upstash passes live updates between our servers, such as a lucky draw result.
• Resend sends our emails.
• Google shows the map on an event's page. When the map loads, Google receives your IP address and may set its own cookies, under Google's privacy policy.

Some of these providers store or process data outside Malaysia. We choose providers that protect personal data, and transfer data only as the PDPA allows.

6. Cookies and storage on your device

• A sign-in cookie keeps you signed in. The app needs it to work.
• A short-lived cookie protects a Google, Microsoft or Yahoo sign-in while it is in progress.
• A cookie remembers your language, and your browser stores your choice of light or dark theme.

We do not use advertising or tracking cookies.

7. How long we keep it

• Your account and its data stay until you ask us to delete them.
• Sign-in links expire after 15 minutes. A device stays signed in until you sign it out or its session expires.
• When you delete your account, we remove your profile and your tickets. We may keep records the law requires us to keep, and copies may stay in backups for a limited time.

8. Your choices and rights

Under the PDPA you can:

• Ask for a copy of the personal data we hold about you.
• Correct data that is wrong. You can change your name, phone number, date of birth and photo yourself on your profile.
• Withdraw your consent, or ask us to limit how we use your data. We may then be unable to keep your account or your registrations.
• Ask us to delete your account.
• Sign out any of your devices from your profile.

Email hi@intellagent.my from the address on your account. We reply within 21 days. To change what an organizer holds about your registration, you can also contact the organizer.

9. Children

You can add children to your ticket if you are their parent or guardian, or have their parent's or guardian's permission. We use their name and age only for that event: to price the ticket, check them in and record the booths they join.

Anyone under 18 should use Evently with a parent's or guardian's permission.

10. Security

Every connection to Evently is encrypted (HTTPS). Passwords are stored as strong hashes, sign-in tokens are stored only as hashes, and staff access is limited to the people who need it. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

11. Changes to this policy

We will update this page when our practices change, and change the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

12. Language

This policy is in English and Bahasa Melayu. If the two versions differ, the English version applies.

13. Contact us

IntellAgent Technologies: hi@intellagent.my. The rules for using Evently are in our terms of service.