Where your data lives, who controls it and how long it stays.

Where is data stored?

• All platform data is stored in the European Union, in the AWS Frankfurt region (eu-central-1).
• Local operations and customer support run in Türkiye.
• Transfers between the EU and Türkiye use Standard Contractual Clauses approved by the European Commission, with safeguards under KVKK Article 9.

How is data protected?

• Data is encrypted in transit with TLS/SSL and at rest with AES-256.
• Employee access is role-based and protected with multi-factor authentication.
• Infrastructure runs on an ISO 27001 certified cloud provider, and security is monitored continuously.
• If a breach affects personal data, affected people are notified within 72 hours and the relevant authorities are informed.

Who is the data controller?

• For event registration data (attendee lists, registration details), the organizer is the controller and Eventiqs is the processor under a data processing agreement.
• For connections, notes and messages users create on the platform, Eventiqs is the controller, and only the user can request their deletion.
• Anonymous and aggregated data that does not identify a person is not personal data.
• Eventiqs is not a joint controller with organizers for event data.

How long is data kept?

• Event-specific data is kept for the event plus 30 days for reporting.
• When an account is deleted, personal identifiers are permanently removed within 30 days; event registration data is returned or deleted as the organizer instructs.
• Anonymous and aggregated data may be kept for up to 5 years.

Data in AI features

• In features such as Smart Matching and Smart Photo Sharing, personal data is processed only to provide the service.
• Model and algorithm development uses only anonymous and aggregated data that does not identify a person.