Privacy Policy

Who we are

Eventually is an event management platform operated by Stoic Marketing Consulting, trading as Eventually, based in Amsterdam, Netherlands. If you have any privacy-related questions or requests, contact us at hello@eventually.one.

What data we collect

We collect the following categories of personal data:

• Contact information — your name and email address when you fill in a contact or newsletter form.
• Payment information — billing details processed securely via Stripe. We do not store your card number.
• Usage data — pages visited, features used, and technical logs collected via Vercel Analytics (cookieless, first-party), Google Analytics, and Microsoft Clarity to improve the platform.
• Cookie preferences — your consent choices, stored locally in your browser.

Why we collect it

We use your data to:

• Respond to enquiries and contact form submissions.
• Send transactional emails such as confirmations and receipts via Resend.
• Process payments and manage subscriptions via Stripe.
• Understand how visitors use the website so we can improve it.
• Send marketing communications, where you have given consent.

Legal basis (GDPR)

We process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b)) — processing necessary to deliver the service you signed up for.
• Legitimate interest (Art. 6(1)(f)) — security monitoring, fraud prevention, and product analytics.
• Consent (Art. 6(1)(a)) — marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — retaining financial records as required by Dutch tax law.

Data retention

We retain contact form data for as long as necessary to respond to your enquiry. If you create an account, we will retain your data for as long as your account is active. Upon account deletion, personal data is erased within 30 days, except where retention is required by law (e.g., financial records kept for 7 years under Dutch fiscal law). Anonymised aggregate statistics may be retained indefinitely.

Your rights

Under GDPR Articles 15–21, you have the right to:

• Access (Art. 15) — request a copy of the personal data we hold about you.
• Rectification (Art. 16) — correct inaccurate or incomplete data.
• Erasure (Art. 17) — request deletion of your personal data ("right to be forgotten").
• Restriction of processing (Art. 18) — you can request that we temporarily restrict the processing of your data in certain circumstances, such as if you contest the accuracy of data or object to processing.
• Data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Object (Art. 21) — object to processing based on legitimate interest, including direct marketing.

To exercise any of these rights, email us at hello@eventually.one. We will respond within 30 days.

Third-party processors

We share data with the following sub-processors, each bound by a Data Processing Agreement:

• Stripe — payment processing (PCI DSS Level 1 certified).
• Resend — transactional email delivery.
• Vercel — platform hosting, edge network (SOC 2 Type II), and first-party web analytics (Vercel Analytics — cookieless, no personal data collected).
• Supabase — database and authentication, hosted in the EU region.
• Google (Gemini) — AI-powered features within the platform. Data submitted to AI features may be processed by Google. Data may be processed in the US under Standard Contractual Clauses.
• OpenAI — AI-powered features. Data submitted to AI features may be processed by OpenAI. Processed under OpenAI's Data Processing Addendum.
• Anthropic — AI-powered features. Data submitted to AI features may be processed by Anthropic. Processed under Anthropic's Data Processing Agreement.
• Google Analytics (via Google Tag Manager) — website analytics and conversion tracking. Data is collected client-side via cookies (with your consent) and server-side via the GA4 Measurement Protocol for transaction events (e.g., ticket purchases, plan upgrades). Analytics cookies are shared across eventually.one and app.eventually.one as part of the same service. Data may be processed in the US under Standard Contractual Clauses.
• Microsoft Clarity — session recording and heatmaps for UX analysis. Processed under Microsoft's DPA.
• Tawk.to — live chat support. Processes chat messages, visitor page URL, and browser info. Used to provide real-time customer support via the chat widget on our website.

We do not sell your personal data to third parties.

AI-powered features

Eventually uses artificial intelligence to power certain platform features (such as event suggestions, automated messaging, and analytics insights). When you use these features, the content you submit may be sent to our AI providers (Google Gemini, OpenAI, and/or Anthropic) for processing. We do not send special category data (e.g., health information) to AI providers. You should avoid including sensitive personal data in AI-powered inputs. AI providers process data under their respective Data Processing Agreements and do not use your data to train their models without explicit permission.

Cookies

We use cookies and similar tracking technologies. For full details on what we use and how to manage your preferences, please see our Cookie Policy.

Contact

For any privacy-related questions or requests, contact Sharon Sciammas at hello@eventually.one. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.