Privacy Policy

This Privacy Policy explains how Eventum AI Corp (“Eventum,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit eventum.ai (the “Site”), contact us, apply to join our talent network, subscribe to our updates, or otherwise engage with our services. It also describes your privacy rights and how to exercise them.

We are an AI delivery and embedded-talent firm based in San Francisco, California, USA. For the purposes of the EU and UK General Data Protection Regulation (GDPR), Eventum is the data controller of the personal information described in this policy.

1. Quick summary

• We collect only what we need to respond to your inquiry, evaluate talent applications, send updates you ask for, and run and improve the Site.
• We do not sell or “share” your personal information (as those terms are defined under California law), and we do not use it for advertising-based profiling.
• We use a small set of established service providers (our hosting, content, scheduling, and analytics vendors) listed in Section 6.
• You have rights over your data — including access, correction, and deletion — described in Section 10. To exercise them, email info@eventum.ai.

This summary is for convenience only; the full policy below governs.

2. Scope

This policy applies to personal information we process through the Site and our related business communications. It does not apply to:

• Personal data we process on behalf of our clients as part of a paid engagement — in that context we act as a data processor/service provider, and our client’s privacy notice and our contract (including any Data Processing Addendum) govern that processing.
• Third-party websites or services we link to (see Section 12).

3. Information we collect

a. Information you provide to us

• Contact and project inquiries (e.g., “Book a Call”). Your name, work email, company, role, the nature of your project or hiring need, and anything else you choose to include in your message.
• Talent applications (“Apply as Talent”). Your name, work email, the role you’re interested in, years of experience, availability, skills, a short bio, and — if you choose to upload one — your résumé/CV file. Uploading a résumé is optional.
• Newsletter / updates. The email address you submit to subscribe.
• Other correspondence. Information you provide when you email us or otherwise communicate with us.

b. Information collected automatically

When you use the Site, we and our service providers automatically collect:

• Device and usage data — IP address, browser type, operating system, referring/exit pages, pages viewed, and interactions with the Site.
• Cookies and similar technologies — see Section 5.
• Product analytics and performance data — including aggregated traffic, performance, and (where enabled) session-behavior analytics (e.g., clicks, scrolls, and mouse movement captured by our analytics tools; these tools do not capture passwords or payment details).
• Server logs — generated by our hosting provider for security, debugging, and abuse prevention.

We do not intentionally collect special categories of personal data (such as health, biometric, or government-ID data), and we ask that you do not include them in free-text fields or your résumé.

4. How we use your information, and our legal bases

• Respond to inquiries (replying to a contact/project message, scheduling a call). Legal basis (EEA/UK GDPR): performance of a contract or steps prior to a contract; our legitimate interest in responding.
• Evaluate talent applications (reviewing your application and résumé, contacting you about roles). Legal basis: steps prior to a contract at your request; our legitimate interest in building our talent network; your consent where applicable.
• Send updates you requested (newsletter and occasional product/insights emails). Legal basis: your consent (you can withdraw it any time via the unsubscribe link).
• Operate, secure, and improve the Site (hosting, analytics, performance monitoring, debugging, fraud/abuse prevention). Legal basis: our legitimate interests in running a secure, working website; consent for non-essential cookies where required.
• Comply with law (responding to lawful requests, enforcing our terms, defending legal claims). Legal basis: compliance with a legal obligation; our legitimate interests.

Where we rely on legitimate interests, we have weighed those interests against your rights and will provide more detail on request. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

We do not sell your personal information and we do not make decisions producing legal or similarly significant effects about you using solely automated processing.

5. Cookies and similar technologies

We use cookies and similar technologies for two purposes:

• Strictly necessary — required for the Site to function and to keep it secure. These are always on.
• Analytics and performance — to understand how the Site is used and to improve it (see the tools in Section 6).

Managing cookies. Where required by law (for example, for visitors in the EEA and UK), we ask for your consent before setting non-essential cookies, and you can change your choices at any time using the “Cookie settings” control in the Site footer. You can also:

• Opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Review Microsoft’s privacy controls at the Microsoft Privacy Statement.
• Control or block cookies through your browser settings.

We honor recognized browser-based opt-out signals, including Global Privacy Control (GPC), where applicable.

6. How we share your information

We do not sell your personal information. We share it only with the following categories of recipients:

a. Service providers (sub-processors)

We use a limited set of vendors that process personal data on our behalf, under contracts that require them to protect it and use it only for the services they provide to us:

• Vercel Inc. — website hosting, serverless functions that process our forms, file storage for uploaded résumés (Vercel Blob), server logs, and Vercel Web Analytics and Speed Insights. Privacy: vercel.com/legal/privacy-policy.
• Sanity AS — content management system that stores and serves Site content (text and images). Privacy: sanity.io/legal/privacy.
• Google LLC — Google Analytics 4 and Google Tag Manager (Site analytics); Google Search Console (search performance). Privacy: policies.google.com/privacy.
• Microsoft Corporation — Microsoft Clarity (aggregated session and interaction analytics). Privacy: privacy.microsoft.com/privacystatement.
• Zcal — scheduling and booking calls when you choose to book one. Privacy: zcal.co/privacy.
• Resend — sends transactional and notification emails on our behalf (e.g., confirmations and form/application notifications). Privacy: resend.com/legal/privacy-policy
  
  

If we add or change a sub-processor, we will update this list.

b. Professional advisors and authorities

We may disclose information to our lawyers, accountants, auditors, or insurers, and to courts, regulators, or law-enforcement authorities, where necessary to comply with the law, enforce our agreements, or protect our rights, users, or the public.

c. Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

7. International data transfers

We are based in the United States, and our service providers may process data in the United States and other countries. When we transfer personal data out of the EEA or UK, we rely on a lawful transfer mechanism — typically the European Commission’s Standard Contractual Clauses (and the UK Addendum), together with supplementary measures where appropriate. You can request a copy of the relevant safeguards by emailing info@eventum.ai.

8. How long we keep your information

We keep personal information only as long as we need it for the purposes in this policy, then delete or anonymize it. In general:

• Contact / project inquiries: up to 3 years after our last interaction.
• Talent applications (including any uploaded résumé): up to 2 years, so we can consider you for future roles, unless you ask us to delete it sooner.
• Newsletter subscriptions: until you unsubscribe.
• Google Analytics data: up to 14 months.
• Microsoft Clarity data: up to 90 days.
• Server logs: a short rolling period for security and debugging.

We may keep certain information longer where required to comply with legal obligations or to establish, exercise, or defend legal claims.

9. How we protect your information

We use technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, a Content Security Policy and other security headers, and limiting access to personal data to personnel who need it. Uploaded résumés are stored on Vercel Blob and are accessible only to authorized Eventum personnel. No method of transmission or storage is completely secure, but we work to protect your information and to address vulnerabilities promptly.

10. Your privacy rights

a. Everyone

You may contact us at info@eventum.ai to ask about the personal information we hold about you, to update or correct it, or to ask us to delete it. We will respond within the timeframe required by applicable law (and in any case within 30 days for most requests).

b. EEA / UK residents (GDPR)

You have the right to: access your data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO; in the EEA, your national authority).

c. California residents (CCPA/CPRA)

You have the right to know what personal information we collect and how we use and disclose it; to access and delete it; to correct inaccurate information; and to not be discriminated against for exercising your rights. We collect the categories of personal information described in Section 3 (identifiers, professional/employment information, and internet activity), for the business purposes described in Section 4. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding 12 months. You may submit a request — including through an authorized agent — by emailing info@eventum.ai. We will verify your request using the information we hold.

d. Other US states

If you reside in a US state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and obtain a copy of your personal information; contact us at info@eventum.ai to exercise them.

11. Children’s privacy

The Site is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal information from children under 16 (or under 13 in the United States). If you believe a child has provided us personal information, contact info@eventum.ai and we will delete it.

12. Third-party links

The Site may link to third-party websites and services (for example, our scheduling tool or social channels). We are not responsible for their privacy practices. Please review their privacy policies before providing them with personal information.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the “Last updated” date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Site after an update means you accept the revised policy.

14. How to contact us

For any privacy question or to exercise your rights:

Eventum AI Corp
Attn: Privacy
5432 Geary Blvd, No. 805, San Francisco, CA, 94121, USA
Email: info@eventum.ai
General: info@eventum.ai · +1-510-214-2581

We aim to respond to all privacy requests within 30 days.