Privacy Policy

1 Who We Are

WeMarketEvents.AI is operated by WEMARKETEVENTS.AI LTD, a company incorporated in England and Wales. We provide EventPulse, a real-time marketing analytics platform for B2B event organisers.

For the purposes of UK GDPR and the Data Protection Act 2018, WEMARKETEVENTS.AI LTD is the data controller for personal data we collect and process.

Data Controller: WEMARKETEVENTS.AI LTD
Contact: privacy@wemarketevents.ai

2 What We Collect

We collect the following categories of information when you use EventPulse:

Account information: Your name and email address, collected when you subscribe via Stripe or create an account.
Billing information: Payment processing is handled entirely by Stripe. We do not store credit card numbers or full payment details.
Organisation details: Your organisation name and event name, provided during onboarding.
Usage data: How you interact with the EventPulse platform, including pages visited, features used, and session duration.
Platform credentials: OAuth access tokens for connected advertising and analytics platforms (see Section 3).

3 Platform Data (OAuth Connections)

EventPulse connects to third-party advertising and analytics platforms on your behalf via OAuth. When you or your account manager authorises a connection, we receive and store access tokens that allow us to read your campaign data.

The platforms we connect to are:

Google Analytics 4 — session data, registration funnel events, landing page performance
Google Ads — campaign spend, clicks, impressions, and conversion data
Meta Ads (Facebook & Instagram) — campaign spend, reach, frequency, and lead generation data
LinkedIn Ads — sponsored content performance, message ads, and lead gen form data

Important: We access only the data necessary to provide the EventPulse service. All OAuth tokens are encrypted using AES-256-GCM encryption before being stored. We never share your advertising data with third parties for their own marketing purposes.

You can revoke any platform connection at any time from within the EventPulse platform or directly through the relevant platform's settings (e.g. Google Account permissions, Meta Business settings). Revoking access will not affect historical data already processed.

4 How We Use Your Data

We use the data we collect to:

Provide, operate, and improve the EventPulse platform
Display your campaign analytics, performance trends, and AI-generated insights
Send transactional emails including account setup, weekly digests, and real-time alerts
Process your subscription payments via Stripe
Respond to support requests and account enquiries
Comply with our legal obligations under UK law

We do not use your data for profiling, automated decision-making, or selling to third parties.

5 Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

Contract performance: Processing your account information and platform data is necessary to deliver the EventPulse service you have subscribed to.
Legitimate interests: Usage analytics and product improvement, where these do not override your rights and freedoms.
Legal obligation: Retaining billing records as required by UK tax and accounting law.
Consent: For any optional communications beyond transactional emails, where we will ask for your explicit consent.

7 Data Retention

We retain your data for as long as your account is active. When you cancel your subscription:

Your account data and platform analytics are retained for 30 days, after which they are permanently deleted.
OAuth tokens are revoked and deleted immediately upon account cancellation.
Billing records are retained for 7 years as required by UK tax law.

You can request earlier deletion of your data by contacting us at privacy@wemarketevents.ai.

8 Security

We take the security of your data seriously. Our security measures include:

AES-256-GCM encryption for all stored OAuth tokens
TLS encryption for all data in transit
Row-level security on our database — users can only access their own workspace data
Supabase authentication with secure session management
Regular security reviews and dependency updates

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours as required by UK GDPR.

9 Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of all personal data we hold about you.
Right to rectification: Ask us to correct inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data ("right to be forgotten").
Right to restrict processing: Ask us to limit how we use your data.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@wemarketevents.ai. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10 Cookies

The EventPulse application uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies within the application.

Our marketing website (wemarketevents.ai) may use analytics to understand visitor behaviour. You can control cookies through your browser settings at any time.

11 Contact Us & Changes

If you have questions about this privacy policy or how we handle your data, please contact us. We aim to respond to all privacy enquiries within 5 working days.

We may update this policy from time to time. We will notify active subscribers of any material changes by email. The date at the top of this page reflects the most recent revision.

Privacy questions?

We're a small team and take data privacy seriously. Email us directly — a real person will respond.

privacy@wemarketevents.ai

Google user data

Where a client connects a Google service, EventPulse requests authorisation through Google's OAuth consent flow. We use that access solely to retrieve reporting data (sessions, registration events, advertising spend and campaign performance) for the property or ad account the client selects. EventPulse makes read-only reporting requests only. It does not create, edit or delete campaigns, budgets, bids, billing settings or any other configuration in a connected Google account, and it contains no functionality to do so.

EventPulse's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the analytics features visible in the client's own workspace. It is never sold, never used for advertising, and never transferred except as necessary to provide those features or to comply with law. Access can be revoked at any time from the Google Account connections page or by disconnecting the integration inside EventPulse.