Privacy Policy

1. Data we collect

Name, email address and password (hashed, never readable) — collected at sign-up through NetSun Hub, for authentication and account management. Legal basis: performance of the contract.

Role (organizer, agent, exhibitor, attendee) and organization — for access permissions. Legal basis: performance of the contract.

Tickets purchased, orders and amounts — for ticket delivery, support and accounting. Legal basis: performance of the contract.

Cashless wristband balance and transactions — to operate on-site payment. Legal basis: performance of the contract.

Networking profile (display name, job title, company, bio, professional link, optional phone) — entered voluntarily, visibility adjustable. Legal basis: consent.

Anonymous hashed device identifier generated locally in guest mode, never linked to an identity. Legal basis: legitimate interest.

Ticket QR content at access control, including offline. Legal basis: performance of the contract.

Technical logs (errors, reliability diagnostics). Legal basis: legitimate interest.

What we never collect: full banking details — payments are handled by our partners (FedaPay, Stripe, Flutterwave) on their own secure page, EvenFlow never sees or stores card data —, precise GPS location, phone contacts, photo gallery, advertising identifiers.

2. Mobile device permissions

Camera: scanning ticket and badge QR codes. Optional, requested only for scanning roles.

NFC: reading cashless wristbands. Optional, requested only for on-site payment.

Notifications: networking requests and appointment reminders. Optional, refusable at any time.

Biometrics: unlocking an already-open session. Optional; no biometric data leaves the device, the system returns only a confirmation.

No location, contacts, microphone or file storage permission is requested.

3. Data sharing

NetSun Hub, the same publisher’s central authentication service: account identifiers, for single sign-on across NetSun services.

Payment gateways: order amount and reference, strictly for the transaction.

The relevant event organizer: an attendee’s ticket and order data, needed to run their event — never another organizer.

Exhibitors: only the details you deliberately share by presenting your badge to be scanned; that consent is timestamped and you may ask for its deletion.

No data is ever sold. No data is used for advertising.

4. Retention

Account data is kept while the account is active. Ticketing and accounting data is retained under the commercial record-keeping obligations applicable in the organizer’s country. The networking profile and the anonymous visitor identifier can be deleted at any time.

5. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to withdraw consent where processing relies on it. The networking profile can be deleted directly from your account. For any other request: privacy@evenflow.netsun.pro. We reply within thirty days.

6. Security

EvenFlow never holds your password: authentication is delegated to NetSun Hub, which keeps only a hash. Mobile session tokens live in the operating system’s secure store (iOS Keychain, Android Keystore) and never in clear text. Each ticket QR is cryptographically signed with a key specific to its event. Sensitive contact fields entered by exhibitors and table sessions are encrypted at rest (AES-256-GCM). All traffic is encrypted in transit (HTTPS/TLS).

7. Children

EvenFlow is not directed at people under 16 and does not knowingly collect their data.

8. Changes and contact

This policy may change; material changes are announced in the app and on this page. Publisher: NetSun Global. Contact: privacy@evenflow.netsun.pro.