EventPulseSpell EventPulse
Legal

Privacy Policy

Last updated · April 28, 2026

This Privacy Policy explains how Spell Solutions(“Spell,” “we,” “us”) collects, uses, and shares information when you use EventPulse, our event management platform, accessed through the website at spelleventpulse.com, the application at events.spell.solutions, or any related services (collectively, the “Service”).

EventPulse is invitation-only. By accessing the Service, you agree to this Policy. If you do not agree, do not use the Service.

1. Information we collect

Information you provide

  • Account info: name, email address, role, organization, and password (stored only as a salted bcrypt hash).
  • Workspace data: events, registrations, attendees, sponsors, speakers, materials, evaluations, certificates, and any other content you create or upload.
  • Communication content: messages you send to our support team or via the in-product Spella assistant.
  • Payment details: handled by our payment processor (Stripe). We never see, store, or transmit your full card number.

Information we collect automatically

  • Usage data: pages viewed, features used, timestamps, and basic device data (browser, OS).
  • Log data: IP address, request paths, error traces, and audit-log entries for security and debugging.
  • Cookies: a single first-party authentication cookie (httpOnly, secure, SameSite=Lax). No third-party tracking cookies.

2. How we use information

  • Provide, operate, and improve the Service.
  • Authenticate you, enforce access controls, and prevent abuse.
  • Send transactional emails (registration confirmations, password resets, invoices) via your configured provider (SES, Gmail, Outlook, or custom SMTP).
  • Power Spella, our in-product AI co-pilot, using only your workspace data, never the public internet.
  • Comply with legal obligations and respond to lawful requests.

3. Sharing

We do not sell or rent your personal information. We share data only with the providers required to operate the Service on your behalf:

  • Hosting & infrastructure: Amazon Web Services (compute, database, file storage, CDN).
  • Email delivery: your selected provider (Amazon SES, Gmail, Outlook/Microsoft 365, or your own SMTP). You configure this per workspace.
  • Payments: Stripe processes paid event registrations on your behalf.
  • Video meetings: Zoom and Google Meet, only when you generate a meeting from EventPulse.
  • AI: Anthropic, used only when an admin or attendee invokes Spella. Conversations are stored in your workspace.

We may also disclose information when required by law, court order, or to protect rights, property, or safety.

4. Data retention

We retain your data for as long as your workspace is active. When a workspace is deleted, all events, registrations, materials, and related data are removed within 30 days. Aggregated, non-identifying analytics may be retained.

5. Security

  • All traffic is encrypted in transit with TLS 1.2+.
  • Passwords are stored as bcrypt hashes (cost factor 12).
  • Integration credentials (Stripe keys, SMTP passwords, etc.) are encrypted at rest with AES-256-GCM using a separate platform key.
  • Access to production systems is restricted, audited, and requires multi-factor authentication.

6. Your rights

Depending on your jurisdiction (GDPR, PIPEDA, CCPA), you may have rights to access, correct, export, or delete your personal information. Workspace admins can manage most data directly inside EventPulse. For requests we can't fulfill in-product, email privacy@spelleventpulse.com.

7. International data transfers

EventPulse is operated from the United States. By using the Service you consent to your information being transferred to and processed in the U.S. and in any other country where our service providers operate.

8. Children

EventPulse is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact privacy@spelleventpulse.com and we will remove it.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced in-product or by email. The “Last updated” date at the top reflects the current version.

10. Contact us

Questions or concerns? Reach out at: