Privacy Policy

Last updated: 28 February 2026

1. Who We Are

EventAnnouncer ("we", "us", "our") is the data controller responsible for your personal data. If you have any questions, contact us at info@eventannouncer.app.

2. What Data We Collect

Category	Data	Purpose
Account	Name, email address, hashed password	Authentication & account management
Subscription	Subscription tier, billing dates, Stripe customer/payment IDs	Billing & feature access
Usage	Credit purchases, credit usage, voice selections, timestamps	Service delivery & analytics
Content	Announcement text you type (processed in real time, not stored long-term)	Generating audio
Projects	Saved projects, audio files, speaker lineups	Your workspace data
Preferences	UI theme, favourite voices, cookie consent choices	Personalisation & compliance
Technical	IP address, browser type, device type (via server logs)	Security & debugging

3. Legal Bases for Processing (GDPR Art. 6)

• Contract (Art. 6(1)(b)): Account data, subscription data, usage data — necessary to provide the Service.
• Legitimate interest (Art. 6(1)(f)): Technical logs — security and fraud prevention.
• Consent (Art. 6(1)(a)): Analytics cookies, marketing communications — only with your explicit consent.

4. Cookies & Similar Technologies

We use the following categories of cookies:

• Strictly necessary: Authentication tokens, session cookies. These are essential for the Service to function and do not require consent.
• Functional: UI theme preferences, cookie consent record. These remember your choices.
• Analytics (optional): Usage patterns to improve the Service. Only set with your consent.

You can manage your cookie preferences at any time via the cookie banner or Settings menu. Withdrawing consent for non-essential cookies will not affect the core functionality of the Service.

5. Who We Share Data With

Recipient	Purpose	Safeguards
Stripe	Payment processing	PCI-DSS compliant; EU SCCs
OpenAI	Text-to-speech generation	Data Processing Agreement; text processed but not retained for training
ElevenLabs	Text-to-speech generation	Data Processing Agreement
Google (optional)	Google Drive sync	OAuth scopes limited to a single folder
Brevo / Nodemailer	Transactional email	Email content limited to account notifications

We do not sell your personal data. We do not share your data with advertisers.

6. International Transfers

Some processors (OpenAI, Stripe) are based in the United States. Transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or the UK International Data Transfer Agreement where applicable.

7. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Usage & billing records: Retained for up to 7 years for tax and legal compliance.
• Announcement text: Processed in transit only; not stored after audio generation.
• Server logs: Retained for up to 90 days.
• Consent records: Retained for as long as your account exists, plus 3 years after deletion for compliance evidence.

8. Your Rights (GDPR Art. 15–22)

You have the right to:

• Access your personal data (Art. 15).
• Rectify inaccurate data (Art. 16).
• Erase your data ("right to be forgotten") (Art. 17).
• Restrict processing (Art. 18).
• Data portability — receive your data in a machine-readable format (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent at any time without affecting lawfulness of prior processing (Art. 7(3)).

To exercise any right, email info@eventannouncer.app. We will respond within 30 days.

9. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. If we learn we have collected data from a child under 16, we will delete it promptly.

10. Security

We use industry-standard measures to protect your data, including HTTPS encryption, hashed passwords (bcrypt), JWT authentication, and access controls. However, no system is completely secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before they take effect. The "Last updated" date at the top indicates the latest revision.

12. Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

13. Contact

For any privacy-related questions, contact us at info@eventannouncer.app.