Privacy Policy

Review status

Operator confirmation pending. This is a review copy. Application collection and member access remain closed until the operator approves the business details, lawful bases, retention periods, service contracts and international transfer information.

Controller and contact

The handover identifies the controller as POPESCU ROBERTA-LUMINIȚA PERSOANĂ FIZICĂ AUTORIZATĂ, CUI 53319460, trade register F2026002009001. The stated address is Bulevardul BUCUREȘTII NOI, Nr. 136, Etaj PARTER, Ap. 5, Sectorul 1, București, Romania. The operator must confirm these details before release. Contact: hello@proevents.agency.

Application and account data

Applications contain business contact details, services, locations and review information. Do not submit bank account statements, personal identity numbers, medical information or other unnecessary personal data. Account records include a verified email, password hash, role and session records. Passwords are not stored as readable text.

The server stores application decisions, access grants, expiry dates, administrative audit records, billing references and email delivery state. Only approved organizers with current access can retrieve real provider profiles. Public demo providers are fictional.

Payments and email

Stripe processes payment details and recurring billing. MESH stores subscription and payment references, consent records and access dates, not card numbers. Mailjet sends account, application and billing messages. Email tracking is disabled in send requests. Provider contracts, processing locations and transfer safeguards require operator approval.

Storage and security

Cloudflare Workers and D1 host the application and database. Accounts use verified sessions. Rate limits use short-lived values derived from IP addresses and a server secret. Operational logs must exclude passwords, tokens and message bodies. Provider and platform log retention require confirmation.

The application sets an essential account session cookie after login. Cookie settings stores an essential-only preference in local storage. No optional analytics or marketing code is active. Search and filter values remain in page memory.

Retention and your rights

You can download account information and request account deletion from the dashboard. Deletion cancels future platform billing before removing the account and its sessions. If payment reconciliation is pending, deletion stops and reports the reason. Contact hello@proevents.agency for correction, access, objection, restriction or a request you cannot complete in the dashboard.

The operator must approve a retention schedule for applications, audit records, legal financial records, service-provider copies and backups. Local deletion does not prove deletion of Stripe, Mailjet or mailbox copies. Scheduled cleanup removes expired sessions and verification records; enquiry cleanup requires an approved configured period.

You can contact the Romanian data protection authority, ANSPDCP, about a privacy concern. Lawful bases, retention obligations and processing agreements remain subject to operator review.