Privacy policy

canberra.events is a community events platform based in Canberra, Australia. We respect your privacy and are committed to protecting the personal information you share with us. This policy explains what we collect, why, and how we handle it.

When you use canberra.events, we may collect:

• Account information — your name, email address, and password when you create an account.
• Event information — details of events you create, including title, description, date, time, location, and category.
• RSVP and attendance data — when you RSVP to or attend an event.
• Profile details — a bio, phone number, website and social handles, if you choose to add them.
• Bookings and payments — the tickets you book and what you paid. Card details go directly to our payment provider, Stripe, which also handles your billing address or postcode; we never see or store your full card number.
• Attendee details — the name you add for each person on a booking and, where the event asks for them, optional dietary or allergy notes.
• Crew connections — who you have sent crew requests to or received them from, and the status of each request.
• Usage data — basic analytics about how you use the platform, such as pages visited and features used.
• Device and diagnostic data — identifiers, device and app details and diagnostic information, including through third-party software built into our mobile app.
• Approximate location — derived from your IP address and processed for analytics and security. This is separate from your device's location, which is covered below and is not sent to us.

• Location — where the app on your device includes a map and you allow it, the app uses your device's location (such as GPS) to centre the map around you. This location is not sent to us.
• Camera — organisers can scan ticket QR codes at the door. Only the code's contents are sent to us; no image is stored or sent. On Android, scanning uses Google ML Kit, which collects device and app details, per-install identifiers and diagnostic and usage metrics and sends them over HTTPS, as described in Google's ML Kit disclosure. The QR code image stays on the device.
• Notifications — where notifications are available on your device and you turn them on, we keep a token for your device so we can send you reminders and crew updates. We remove it when you sign out, or the next time someone signs in on that device if we can't reach it then.
• Maps — not every version of the app includes a map. Where an Android version does, the map comes from Google, which receives your IP address, device details, a map-specific identifier and how you use the map, under Google's privacy policy. On iPhone, the map comes from Apple.
• Payments — when you pay in the Android app, Stripe's payment software collects payment and billing information, device and browser details, location derived from your IP address and how you interact with it. Stripe uses this for payment processing, fraud prevention and analytics, as described in Stripe's privacy centre.

We use your information to:

• Provide and maintain the platform.
• Enable event creation, discovery, and RSVPs.
• Send you relevant notifications about events you've RSVP'd to (e.g. updates or cancellations).
• Provide event organisers with attendee information for events you've RSVP'd to.
• Improve the platform based on usage patterns.

We do not sell your personal information. We may share limited information in these circumstances:

• Event organisers — when you RSVP to an event, the organiser can see your name and email to manage attendance. Organisers also see the attendee names and any dietary or allergy notes added to a booking for their event.
• Crew — crew requests and connections are visible to the people they involve. If you turn on attendance sharing, accepted crew can also see which events you're attending.
• Service providers — companies that run parts of the platform for us, such as payments, hosting, email and analytics. Stripe, our payment provider, can also use payment and fraud data for its own fraud and security purposes, not only on our behalf, as set out in Stripe's privacy policy.
• Public profiles — your name and any events you create are visible to other users. If your profile is public, which organiser profiles are by default, so are your bio, website and social handles.
• Legal requirements — if required by Australian law or to protect the safety of our users.

Your data is stored securely using industry-standard practices. We use encrypted connections (HTTPS) for all data in transit and store data in Cloudflare's infrastructure. Passwords are hashed and never stored in plain text.

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Delete your account and associated data. You can do this yourself in the app (Profile, then Delete account) or on the web (Profile settings, then Delete account), or ask us by email. Records of past bookings and payments are kept without your name or contact details where organisers or the law need them.
• If you sold tickets as an organiser, the orders you sold keep the seller name and ABN that were printed on your buyers' receipts, because those are your buyers' records too. We also keep the record of the tax details you gave us and what you authorised, as tax and company record-keeping laws require, for seven years after your account is closed. We then delete that record.

To exercise any of these rights, contact us at hello@canberra.events.

We use essential cookies to maintain your login session. We do not use third-party tracking cookies or sell data to advertisers.

Our usage analytics are provided by PostHog. They don't use cookies; instead, an identifier is kept in your browser's local storage so we can count visits and see which features are used. When you're signed in, this analytics data is linked to your account, including your name and email address.

We may update this policy from time to time. Significant changes will be communicated via the platform. Continued use of canberra.events after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy or how we handle your data, contact us at hello@canberra.events.