Privacy Policy

1. Data Controller

The data controller for personal data collected through Stagebly-powered event experiences is the event organizer that uses the Stagebly platform to create and manage their event. Stagebly acts as a data processor on behalf of the event organizer.

2. Data We Collect

When you use a Stagebly-powered event experience, we may collect the following categories of data:

• Analytics data — page views, search queries, session duration, and interaction events (e.g., partner link clicks). Collected only with your consent.
• Push notification subscriptions — browser push endpoint and encryption keys, used to deliver event announcements. Collected only with your consent.
• Feedback responses — if you submit feedback through the event experience, the content of your response and an anonymous session identifier.
• Technical data — anonymized session identifiers stored in your browser (localStorage). We do not use third-party tracking cookies.

3. How We Use Your Data

• Analytics data is used to help event organizers understand attendee engagement.
• Push subscriptions are used solely to deliver event-related notifications.
• Feedback is shared with the event organizer to improve future events.

4. Consent

Before collecting analytics or push notification data, we request your explicit consent via a cookie consent banner. You can customize your preferences at any time. Necessary cookies (e.g., session identifiers for basic functionality) do not require consent.

5. Data Retention

• Analytics events — retained for 90 days after the event end date, then automatically deleted.
• Session data — retained for 14 days, then automatically deleted.
• Push subscriptions — retained for 30 days after creation, then automatically deleted.
• Feedback responses — retained for the duration of the event organizer's account.

6. Sub-Processors

We use the following sub-processors to deliver our service:

• Google Cloud Platform (EU region) — infrastructure hosting, database, and storage.
• Stripe — payment processing for event organizer billing only. No attendee payment data is collected.
• Resend — transactional email delivery for organizer accounts only.
• Sentry — error tracking and performance monitoring.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please contact the event organizer directly or reach out to us at privacy@stagebly.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. All data is stored in EU-region Google Cloud infrastructure.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

10. Contact

If you have questions about this privacy policy, please contact us at privacy@stagebly.com.