Privacy policy

Information we collect

We collect account and profile details, event and permit information, documents you upload, messages and collaboration activity, vendor and proposal records, and support communications. We also process limited security and diagnostic data such as sign-in events, truncated user-agent information, opaque rate-limit identifiers, and application errors.

How we use information

• Provide event planning, permitting, communication, and document services.
• Authenticate users and enforce organization, event, and role permissions.
• Deliver invitations, security notices, and service communications.
• Protect the platform, investigate abuse, and maintain reliability.
• Comply with legal obligations and documented municipal records schedules.

Who can access information

Access is determined by the organization, event membership, city-review jurisdiction, vendor assignment, and document visibility selected in the product. We use service providers for hosting and delivery, including Vercel, Supabase, and Resend. They process information only to provide contracted services. We do not sell personal information.

Public and secret links

Information intentionally published in the public event directory is visible without an account. Proposal, invitation, calendar, and site-map links act as credentials: anyone who receives a valid link may be able to open the limited content it grants. Do not forward these links unless the recipient should have access, and revoke them when they are no longer needed.

Retention and deletion

Retention depends on the record type, customer instructions, municipal records law, financial requirements, and legal holds. Authorized users may request correction, export, or deletion by contacting us. Some records may need to be retained where law or a municipal records schedule requires it.

Security and international processing

We use encryption in transit, tenant-aware database controls, restricted service credentials, audit records, and multi-factor authentication for privileged access. No system is completely secure. Service providers may process data in the United States and other locations where they operate.

Children and changes

MyEventScape is a business and government coordination service and is not directed to children under 13. We may update this policy as the product or legal requirements change; material changes will be communicated through the service or by email where appropriate.