1. Who we are and when this policy applies
Eventos is event-rental software owned and operated by MRCV Technologies LLC. This policy applies to the Eventos website, accounts, staff application, customer-facing rental pages, transactional communications, support, and software subscription. For information a rental business enters about its customers, staff, venues, contracts, and operations, that business generally determines why the information is used and Eventos processes it to provide the service. The rental business may have its own privacy notice and legal obligations.
2. Information we collect and its sources
We collect information directly from account owners, staff users, customer portal users, and support correspondents; automatically from the browser and service; and from service providers used to operate Eventos. Categories can include:
- Identity and contact data, such as name, business email, and organization membership.
- Account, role, location, subscription, invoice, and software-billing information.
- Authentication, device, request, audit, rate-limit, and security-event information.
- Product usage, configuration, import, export, communication, and support history.
- Rental-business records chosen by a customer, including contacts, event details, inventory, pricing, documents, signatures, delivery evidence, and return records.
Eventos does not currently collect rental-client card numbers or CVVs and does not obtain data from consumer data brokers for advertising.
3. Why we use information
We use information to create and authenticate accounts; provide requested rental workflows; preserve contracts, signatures, activity, and operational history; send requested service communications; administer the Eventos subscription; provide support; prevent fraud and abuse; investigate incidents; improve reliability and accessibility; and comply with legal obligations. Where applicable, the legal bases include performing a contract, taking steps requested before a contract, legitimate interests in operating and securing the service, consent where specifically requested, and compliance with law. Eventos does not make decisions with legal or similarly significant effects using automated profiling.
4. When information is disclosed
Information is disclosed only as needed to the customer organization that controls the workspace; authorized staff and customer-portal participants; infrastructure and service providers; professional advisers; authorities when legally required; or a successor in a properly structured business transaction. Current provider categories include Vercel for web delivery, Render for application and managed data infrastructure, Postmark for transactional email, Cloudflare R2 or compatible private object storage for documents, and Stripe for the Eventos software subscription. Provider access is limited to the service being supplied and should be governed by appropriate contracts before paid launch.
5. Sale, sharing, advertising, and analytics
Eventos does not sell personal information and does not share it for cross-context behavioral advertising. The current public site does not use advertising cookies or third-party behavioral analytics. If those practices change, this policy and any required notice or choice mechanism must be updated before the new collection begins. Where legally required, a browser Global Privacy Control signal will be treated as an opt-out request for any future sale or covered sharing.
6. Cookies and browser storage
Eventos uses essential, secure browser storage and cookies for authentication, request protection, session continuity, and security. These technologies are necessary to provide a signed-in workspace and are not used to build advertising profiles. Blocking essential storage may prevent account or customer-portal functions from working.
7. Security and retention
Eventos uses tenant isolation, authorization, secure sessions, encryption in transit, bounded access tokens, private object storage, audit records, and immutable evidence for sensitive commercial events. No system can guarantee absolute security. Retention depends on the service relationship, record type, customer instructions, backup lifecycle, security needs, disputes, and legal obligations. Supported records can be exported. A written production retention schedule, deletion workflow, backup-expiry period, and legal-hold procedure must be approved before paid public launch.
8. Privacy rights and requests
Depending on location and context, a person may have rights to know or access information, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a privacy regulator. Rights can be limited by verification, another person’s rights, the rental business’s instructions, security needs, or legal exceptions. Submit a request to privacy@eventossoftware.com. Do not send a password, access token, payment credential, or sensitive customer document. We may verify identity and authority before acting.
9. California privacy notice
California residents may have rights to know the categories, sources, purposes, recipients, and specific pieces of personal information; request correction or deletion; opt out of sale or covered sharing; limit certain uses of sensitive information; and receive equal service after exercising a right. Eventos does not currently sell or share personal information for cross-context behavioral advertising. An authorized agent may submit a request, subject to proof of authority and identity verification. This section does not claim that every CCPA obligation applies to Eventos in every circumstance.
10. International use
Eventos is operated from the United States and providers may process information in the United States or other locations. If Eventos offers the service to people in a jurisdiction that requires a local representative, data-transfer safeguard, or additional notice, those arrangements must be completed before that offering begins. People in the EEA or UK may contact their local supervisory authority if they believe applicable data-protection rights were not respected.
11. Children, changes, and contact
Eventos is business software and is not directed to children under 13. We do not knowingly collect a child’s personal information through a direct Eventos account. Material policy changes will be dated and, when appropriate, communicated in the service. Privacy questions can be sent to privacy@eventossoftware.com or through the verified support channel attached to your Eventos workspace.