Security & Data Privacy

Your guests' data is
not a product.
We treat it that way.

Eventiere is built privacy-first. Face data is never sold, never shared and never used to train anything. Security as standard - not an upsell.

Built for GDPR
Encrypted & Protected
Removal On Request
Consent-Based
99.9% uptime target
How We Protect Your Data

How we keep
guest data safe.

Encrypted, always

Photos, face data and contact details are encrypted and kept secure at every step, from the moment they're uploaded to the moment they reach a guest.

Face data is never shared

Face data does one job: matching a guest to their own photos at your event. It is never sold, never licensed and never passed to a third party. No one can rebuild a guest's face from what the platform holds.

Explicit consent, always

No guest's face is used without them choosing to opt in first. That choice is recorded and can be reversed at any point - we don't make withdrawal difficult.

GDPR & regional coverage

We're built for events across the GCC, UK, India and Southeast Asia, which means covering GDPR, UAE PDPL, India DPDPA and Singapore PDPA. Need data to stay in a specific region? We can do that.

Deletion on request

Ask us to remove an event's data and we remove it. Guests can request removal themselves from the privacy page, and every request is tracked through to completion.

Access controls

Organisers, photographers and admins each see only what they need to, and every action stays accountable. A guest's photos are visible only to that guest - no shared galleries, no browsing other people's images.

Transparency

What happens to your
data, step by step.

A lot of companies say "privacy-first" without showing their working. Here's what happens from photo upload to deletion, with nothing left out.

Photo Upload

Your photographer's images go into a private, locked folder only your team can access. Nothing is public-facing.

AI Matching

Eventiere recognises each face it finds well enough to match a guest to their own photos. The original photos stay untouched, and a face can never be recreated from what we store.

Guest Match

When a guest takes a selfie, we find their photos automatically. Only their results come back - we never mix guests or share results across events.

Secure Delivery

Photos are sent directly to the guest by email. We never store guest contact details with the delivery provider.

Removal on request

Ask us and an event's face data is removed. Your photos follow your own policy, not ours.

Compliance Matrix

The privacy laws we support
in the regions we work in.

Regulation Region Status How Eventiere supports organisers
GDPR European Union ✓ Supported A consent step for face search that organisers can require, guest requests handled with the organiser (or by Eventiere if the organiser does not act), privacy questions to privacy@eventiere.com
UAE PDPL United Arab Emirates ✓ Supported Consent-based processing, hosting in the UAE or another country on request, breach notification as the law requires
India DPDPA 2023 India ✓ Supported Notice and consent, support for organisers in their duties as data fiduciaries, a route for guest complaints
PDPA Singapore ✓ Supported Purpose limitation, accuracy, consent, safeguards for transfers abroad
PDPPL Qatar ✓ Supported Consent before face data is processed, data subject requests handled with the organiser
UK GDPR United Kingdom ✓ Supported A consent step for face search that organisers can require, Article 9 safeguards for face data
Privacy FAQ

Questions we get
from security and legal teams.

Is Eventiere GDPR compliant?
Eventiere is built with GDPR in mind. We capture explicit consent before facial recognition, allow data deletion on request, and offer Data Processing Agreements - check the details against your own counsel's requirements.
How is a guest's face data used?
Face data does one job: matching a guest to their own photos at your event. It stays inside Eventiere, it is never sold, licensed or passed to a third party, and no one can rebuild a guest's face from what the platform holds. A guest can ask for their data to be removed at any time.
Can guests request their data be deleted?
Yes. Guests ask the event's organiser, who can remove their photos and face data. If the organiser doesn't act, guests can contact privacy@eventiere.com.
Is a guest's face data shared with third parties?
It isn't. A guest's face data stays inside Eventiere and is never sold, licensed or passed to any third party. It is used only to match a guest to their own photos, and nothing more.
Where is data stored geographically?
If your legal or procurement team has a data-residency requirement, talk to us before you set up your event and we will work through it with you.
What happens if there's a data breach?
If a breach ever affected your data, we would notify you and the relevant authorities as the law requires.
Can we sign a Data Processing Agreement (DPA)?
Yes. A standard DPA is available for all paid plans. Contact privacy@eventiere.com to request your DPA.
Do you use facial data to train AI models?
We don't train on guest data. A guest's face is used for one purpose only - finding their photos at your event - and nothing else.

Have specific compliance
requirements? Let's talk.

DPA available on request
Chat with us