Privacy Policy

Last updated: April 2026

SpreadEvent ("we", "us", "our") is a product of Scale by System Consulting & Management - FZCO, a company registered in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website at spreadevent.com and our application at app.spreadevent.com.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union.

1. Data We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in via a third-party provider (e.g. Google), we receive the profile data you authorize.

Event Data

We store the events you create, including titles, descriptions, dates, locations, RSVP settings, and any custom form fields you configure. Attendee data (names, emails, form responses) is stored on your behalf.

Analytics & Usage Data

We collect anonymized usage data such as page views, button clicks, calendar provider selections, and share actions. This helps us improve the product. We also log IP addresses and user-agent strings for security and rate-limiting purposes.

Cookies

We use essential cookies to keep you logged in and remember your preferences. We may use analytics cookies (e.g. Google Analytics) to understand how the site is used. You can manage cookie preferences in your browser settings.

2. How We Use Your Data

  • To provide and maintain our services
  • To process your subscription and billing (via Paddle)
  • To send transactional emails (event confirmations, reminders, account notices)
  • To improve our product through aggregated analytics
  • To prevent abuse, fraud, and unauthorized access
  • To comply with legal obligations

3. Third-Party Services

We share data with the following third-party processors, each under appropriate data processing agreements:

  • Vercel— Hosting and infrastructure. Serves our website and application.
  • Paddle— Payment processing as Merchant of Record. Handles all billing, VAT, invoicing, and refunds. Paddle processes your payment information directly; we do not store credit card details.
  • Resend— Transactional email delivery (event confirmations, reminders, account emails).
  • Twilio— SMS notifications for event reminders (when enabled by you).

4. Data Retention

We retain your account data for as long as your account is active. Event data and attendee data are retained as long as the associated event exists. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of Access— Request a copy of all personal data we hold about you.
  • Right to Rectification— Ask us to correct inaccurate personal data.
  • Right to Erasure— Request deletion of your personal data.
  • Right to Data Portability— Request your data in a structured, machine-readable format.
  • Right to Restrict Processing— Ask us to limit how we process your data.
  • Right to Object— Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent— Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at hello@spreadevent.com. We will respond within 30 days.

6. Cookies

  • Essential Cookies— Required for authentication, session management, and security. These cannot be disabled.
  • Analytics Cookies— Help us understand how visitors interact with our website. You can opt out via your browser settings.

We do not use advertising or tracking cookies.

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), secure password hashing, access controls, and regular security reviews. Our database is hosted on PostgreSQL with encryption at rest.

8. International Data Transfers

Our company is based in the United Arab Emirates. Some of our service providers may process data in the United States or other jurisdictions. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) for EU users.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. The "last updated" date at the top reflects the most recent revision.

10. Contact

If you have questions about this Privacy Policy or your personal data, contact us at:

Scale by System Consulting & Management - FZCO
Building A1, Dubai Digital Park, Dubai Silicon Oasis
Dubai, United Arab Emirates
Email: hello@spreadevent.com