Effective date: June 15, 2026 · Last updated: June 15, 2026
This Privacy Policy explains what information EventJar collects, how we use and share it, and the choices and rights you have. It forms part of, and should be read together with, our Terms of Service, Refund Policy, and Trust & Safety page. Capitalized terms not defined here have the meaning given in the Terms of Service.
The data controller responsible for your personal data is EventJar, Inc. ("EventJar," "we," "us"). EventJar is a technology platform that helps an Organizer (or "Host") collect voluntary contributions and gifts and coordinate events; payments are processed by Stripe, Inc. ("Stripe"), and EventJar is not the recipient of contributed funds.
Account data. When you register, we collect your name, email address, and optional profile photo, along with authentication data needed to secure your account.
Event data. Event titles, descriptions, fund goals, tasks, wishlists, RSVPs, messages, and guest contributions created or submitted on the platform.
Guest contribution data. When a Guest contributes, we collect the Guest's name, contribution amount, optional message, and — where a receipt or confirmation is sent — the Guest's email address. See Section 5.
Payment data. Payment processing is handled by Stripe. We do not store full credit or debit card numbers. We may receive from Stripe transaction identifiers, contribution amounts, payment status, the last four digits and card brand, and billing status. Card and bank details are collected and held by Stripe under Stripe's own terms and privacy policy.
Identity verification (KYC) data. Organizers who receive payouts may be required by Stripe to complete identity verification. This may involve legal name, date of birth, address, government-issued identification, and bank or payout details. This information is collected and verified primarily by Stripe to meet legal "know-your-customer" and anti-money-laundering obligations; we may receive verification status and limited related records.
Usage data. We collect aggregated or pseudonymized analytics such as pages visited, features used, approximate location derived from IP, and device and browser information, to operate, secure, and improve the Service. Some of this data may constitute personal data under applicable law.
Where the EU or UK General Data Protection Regulation applies, we process personal data on the following legal bases:
We do not sell your personal data. We may share information with:
Guests who contribute to events may provide their name and an optional message. This information is visible to the event Host and may be visible to other Guests. Where we send a contribution receipt or confirmation, we also collect the Guest's email address for that purpose. Guests do not need an account to contribute. Guest contributions are also subject to Stripe's processing as described above.
To protect the community and meet legal obligations, EventJar and Stripe use automated tools to monitor transactions, score risk, and detect fraud, money laundering, and prohibited activity. These tools may result in a transaction being delayed, a payout being held or reviewed, or an account being flagged. Where an automated decision would produce a legal or similarly significant effect, you may request human review by contacting us at privacy@eventjar.app.
EventJar, Stripe, and our service providers may process and store personal data in the United States and other countries that may have different data-protection laws than your own. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism. You may contact us for more information about these safeguards.
We retain account data for as long as your account is active. Event data is generally retained for 12 months after the event date, after which it may be archived or deleted.
However, we retain certain records for longer where we are required or permitted to do so — including transaction records, identity-verification (KYC) data, and fraud-prevention records needed to comply with anti-money-laundering, tax, accounting, and audit obligations, to resolve disputes and chargebacks, and to enforce our agreements. Such records are retained for the period required by applicable law (which may be several years) and are then deleted or anonymized. You may request deletion of your data at any time (see Sections 11–12); we will honor the request except for data we are legally required or permitted to retain.
We implement industry-standard security measures including encryption in transit (TLS), secure authentication, and access controls. Card and bank data are handled by Stripe within its PCI-DSS-compliant environment. No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach affecting you, we will notify you and applicable regulators as required by law.
We use essential cookies for authentication and session management, which are necessary for the Service to function. We may also use analytics cookies to understand usage patterns. Where required by law, we obtain your consent before setting non-essential (e.g., analytics) cookies, and you can manage or withdraw consent through our cookie controls and/or browser settings. Disabling essential cookies may prevent the Service from working properly.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at privacy@eventjar.app. We may need to verify your identity before acting on a request. We will respond within the timeframe required by applicable law (generally within 30–45 days), and will tell you if we need an extension. Exercising these rights will not result in discriminatory treatment.
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request access to and deletion of that information; to correct inaccurate information; and to be free from discrimination for exercising your rights.
We do not sell your personal information, and we do not knowingly "share" personal information for cross-context behavioral advertising as those terms are defined under California law. You may also have the right to limit the use of sensitive personal information. To exercise these rights, contact us at privacy@eventjar.app; you may use an authorized agent as permitted by law.
EventJar is intended for adults, and you must be at least 18 to hold an account or receive funds (see our Terms of Service and Trust & Safety page). EventJar is not directed to children under 13, and we do not knowingly collect personal information from them. In jurisdictions where the GDPR applies, the minimum age for consent to information-society services is 16 unless a lower age (down to 13) is set by local law. If you believe a child has provided us personal data, contact us at privacy@eventjar.app and we will take steps to remove it.
We may update this Privacy Policy periodically. We will post the updated version here with a revised "Last updated" date and, for material changes, notify you by email or in-app notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy, except where additional consent is required by law.
For privacy questions or to exercise your rights, contact: