This Privacy Policy explains how Eve Technologies Ltd. ("Eve", "we") collects, uses, shares and protects personal information when you use the Eve websites, apps and services (the "Platform"). It applies to visitors, ticket buyers and attendees, event organizers and their staff, promoters and check-in staff. Last updated: 19 September 2026.
1. Who is responsible for your information
The controller of the personal information described here (in Israeli law, the controller of the database — בעל השליטה במאגר) is Eve Technologies Ltd., Tel Aviv, Israel. Privacy requests and complaints: support@goeve.io. Where Eve processes attendee information on behalf of an event organizer (Section 4), that organizer is a separate, independent controller of the information it receives.
Notice under Section 11 of the Israeli Protection of Privacy Law, 5741–1981: you are not legally required to provide us with any information. Without the fields marked as required we cannot create your account, complete your purchase or register you for an event. The information is collected for the purposes listed in Section 3 and is shared only with the recipients listed in Section 5, for the purposes stated there. You have rights of access and correction (Section 8).
2. Information we collect
2.1 Information you give us
- Account details: name, email address, phone number, password (stored only as a salted hash) or passkey public key, preferred language, and profile settings.
- Purchase and registration details: buyer name, email and phone; attendee names and contact details when an organizer requires a name per ticket; answers to the organizer’s registration questions; age or identity confirmations when an event is age- or ID-restricted; seat selections and coupon codes.
- Organizer details: business name and address, tax identifiers, bank or payout account details, and identity documents submitted for verification (passport, national ID, driver licence or residence permit) together with the details printed on them.
- Communications: messages you send to support, refund requests, dispute submissions and accessibility feedback.
2.2 Information collected automatically
- Technical data: IP address, device and browser type, operating system, screen size, language settings and the pages or event listings you view, with timestamps.
- Security signals: sign-in attempts, failed payments, unusual purchase velocity and similar indicators we use to protect accounts and prevent fraud (Section 13).
- Strictly necessary cookies and browser storage, described in our Cookie Policy. We do not use advertising cookies or third-party analytics trackers.
2.3 Information from other sources
- Payment providers: Stripe tells us whether a payment succeeded, the card brand and last four digits, and fraud-risk signals. We never receive or store full card numbers.
- Sign-in providers: if you sign in with Google, Google provides your name, email address and profile picture.
- Organizers: an organizer may upload guest lists or customer records that include your name, contact details and, where the organizer records it, a government identification number. The organizer is responsible for having the right to share them with us.
3. Why we use your information and on what legal basis
- To provide the service you asked for — creating accounts, selling and delivering tickets, issuing QR codes and wallet passes, running check-in, processing refunds and paying out organizers. Legal basis: performance of a contract.
- To send transactional messages about your order or event — confirmations, reminders, venue or schedule changes, check-in details and refund updates — by email, SMS or WhatsApp. Legal basis: performance of a contract. These are service messages, not marketing.
- To keep the Platform secure and prevent fraud, chargebacks, account takeover and ticket abuse, including automated risk checks (Section 13). Legal basis: these checks are necessary to conclude and perform the purchase contract with you, our legal obligations, and our legitimate interest in protecting users, organizers and the Platform.
- To comply with law — tax and bookkeeping records, anti-money-laundering and sanctions checks for organizers, responding to lawful requests from authorities, and keeping evidence of consent. Legal basis: legal obligation.
- To improve the Platform — understanding which features are used and fixing errors, using aggregated or de-identified data wherever possible. Legal basis: legitimate interest.
- To send you marketing — only where you have opted in (Section 9), and always with an easy way to stop. Legal basis: consent.
We collect only the information needed for these purposes. Organizers choose which registration questions to ask; we require them to ask only what they need for the event.
4. Organizers and your information
When you buy a ticket or register for an event, we share with the organizer your name, contact details, ticket and seat details, your answers to their registration questions and your check-in status. The organizer uses this to run the event and is independently responsible for it under its own privacy policy. Organizers may contact you about the event you purchased through the Platform’s messaging tools. Organizers may send you promotional messages only if you gave your separate consent at checkout (or to them directly); you can withdraw that consent at any time through the unsubscribe link or reply instruction in the message, or by contacting us or the organizer.
5. Who we share information with
We do not sell personal information and we do not share it for cross-context behavioural advertising. We share it only as follows:
- Event organizers, as described in Section 4.
- Payment processing and organizer verification: Stripe, Inc. (payments, payouts, Stripe Connect onboarding and know-your-business checks).
- Hosting and infrastructure: Vercel (web application), Railway (application servers), a managed MongoDB database provider, and Cloudflare (storage and delivery of uploaded images and documents).
- Messaging: Resend (email delivery), Vonage (SMS delivery) and Meta Platforms (WhatsApp Business messages, only if you receive event messages over WhatsApp).
- Artificial-intelligence services: OpenAI. It receives what you type into the Help Center assistant and — when you are signed in — your email address and a short list of your recent orders, so the assistant can answer about them; the organizer assistant, which can read the organizer’s own customer, order and attendee records to answer their questions; contact lists an organizer pastes into the import tool; translation of organizer cancellation policies; and the text of identity documents organizers submit for verification. Content sent through our API access is not used to train the provider’s models, and no record is sent for profiling or automated decisions about you.
- Sign-in security: ipapi.co (Kloudend, Inc., United States) receives the IP address of a sign-in or one-time-code request so we can tell you where a sign-in came from; the city and country it returns are stored with the sign-in record. An operator can turn this off, in which case the IP address is never sent.
- Social networks and music services an organizer chooses to connect to its own account: Meta Platforms (Facebook and Instagram) and X receive the account data needed to connect and the posts the organizer publishes through us; Spotify receives lineup searches. Nothing about buyers or attendees is sent to them.
- Google: sign-in with Google when you choose it; Google Maps and YouTube content on event pages, loaded only after you choose to load it (see the Cookie Policy).
- Apple: if you add a ticket to Apple Wallet, the pass is generated on our servers and stored on your device.
- Image hosts: an organizer may host an event’s cover or gallery images on its own server or a stock-image provider. Your browser fetches those images directly, so that host sees your IP address and the page you came from.
- Professional advisers, auditors and insurers under confidentiality obligations.
- Authorities, courts and regulators where the law requires it or to protect the rights, safety or property of Eve, our users or others.
- A successor in the event of a merger, acquisition or sale of assets, subject to this policy.
Each service provider acts under a written agreement that limits its use of the information to providing the service to us.
6. International transfers
Eve is based in Israel. Our service providers process information in Israel, the European Union, the United Kingdom and the United States. Israel is recognised by the European Commission as providing adequate protection for personal data. Where information leaves the EEA, the UK or Israel to a country without an equivalent finding, we rely on the European Commission’s standard contractual clauses (with the UK addendum or international data transfer agreement where UK data is concerned) or an equivalent lawful transfer mechanism, and on the conditions of the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761–2001.
7. How long we keep information
- Orders, tickets, invoices, refunds and payout records: seven years after the transaction, as required by Israeli tax and bookkeeping rules.
- Records of your acceptance of our terms and of consents you gave: seven years after your last activity, so we can evidence them if needed.
- Account and profile information: while your account is active and for up to three years after it is closed, unless a longer period is required for the records above.
- Organizer identity documents: until the verification is decided and for the period anti-money-laundering rules require, after which the document images are deleted.
- Sign-in, session and security or fraud audit records: 26 months (the Israeli Data Security Regulations require at least 24).
- Support correspondence: three years after the matter is closed.
When information is no longer needed we delete it or irreversibly anonymise it. Backups are overwritten on a rolling schedule.
8. Your rights
8.1 Everyone
Under the Israeli Protection of Privacy Law you may inspect the information we hold about you, ask us to correct or delete information that is inaccurate, incomplete or out of date, and ask to be removed from any marketing mailing list. You may also complain to the Israeli Privacy Protection Authority. We respond within the period the law requires, and in any case within 30 days.
8.2 If you are in the European Economic Area or the United Kingdom
You additionally have the rights to access, rectify and erase your data, to restrict or object to processing, to data portability, to withdraw consent at any time without affecting earlier processing, not to be subject to a decision based solely on automated processing that has legal or similarly significant effects (Section 13), and to lodge a complaint with your supervisory authority. We respond within one month.
8.3 If you are a resident of a US state with a privacy law
You may have the rights to know what personal information we collect and how we use and share it, to access and delete it, to correct inaccuracies, to opt out of the sale or sharing of personal information and of targeted advertising, and not to be discriminated against for exercising these rights. Eve does not sell or share personal information for targeted advertising and does not use sensitive personal information for purposes other than providing the service. We honour these requests for all US residents whether or not a specific law applies to us, and respond within 45 days.
8.4 If you live anywhere else
We grant everyone — wherever you live and whether or not a law in your country obliges us — the rights to access a copy of your personal information, correct it, delete it, object to marketing, and ask us how we use it. Use the same contact details below.
To exercise any right, email support@goeve.io from the address on your account or include your order number. We will verify your identity before acting and will not charge a fee unless the law allows it. You may authorise someone to act for you; we may ask for proof of that authority.
9. Marketing communications
Eve and organizers send promotional email or SMS only with your explicit, separate consent — an unticked checkbox you choose to tick at checkout, or consent you gave the organizer directly — as the Israeli Communications Law (Section 30A) and the GDPR require. We do not rely on the “existing customer” exception. Every marketing message includes a free, one-step way to unsubscribe, and we honour it within 3 business days. Messages about an event you already purchased — reminders, changes, check-in information and refund updates — are service messages, not marketing.
10. Cookies and similar technologies
We use only strictly necessary cookies and browser storage, and we load external content such as Google Maps or YouTube on event pages only after you choose to. Details and controls are in our Cookie Policy.
11. Security
We protect information with encryption in transit, hashed passwords, passkeys and one-time codes, role-based access controls, audit logging and monitoring for suspicious activity. Full payment card numbers never touch our servers. If a security incident affects your information, we will notify the Israeli Privacy Protection Authority and, where the law requires it, you, in accordance with the Protection of Privacy (Data Security) Regulations, 5777–2017 and any other applicable notification law.
12. Children
The Platform is for adults. You must be at least 18 years old to create an account or purchase tickets. Organizers may hold all-ages events: an adult buyer or guardian may give us the attendee details of a minor in their care, and those details are used only to admit that attendee. Someone under 18 should not register themselves — a parent or guardian should register for them. We do not knowingly collect information directly from a child below the age at which their own consent would count (14 in Israel, 16 in the EEA) without a guardian; if you believe a child has provided us information, contact us and we will delete it.
13. Automated decisions
To prevent fraud and abuse we automatically score purchase and sign-in attempts using signals such as IP address, device data, purchase velocity and payment outcomes. A high score may cause a purchase to be held for review or declined and an account to be temporarily restricted. Where this amounts to a decision based solely on automated processing, it is one that is necessary for concluding the purchase contract with you (GDPR Art. 22(2)(a)); you may always contact support to have a person review the decision, express your point of view and contest it.
14. Changes to this policy
We will post any changes here with a new "last updated" date. If a change materially affects how we use your information, we will notify you by email or through the Platform before it takes effect.
15. Contact and complaints
Privacy requests: support@goeve.io. General support: support@goeve.io. Security reports: support@goeve.io. If you are unhappy with our response you may complain to the Israeli Privacy Protection Authority or, in the EEA or UK, to your local data-protection authority.
Legal entity and privacy contact
Legal entity: Eve Technologies Ltd., Tel Aviv, Israel.
Legal domain: goeve.io. Legal email: support@goeve.io. Support email: support@goeve.io. Contact email: support@goeve.io. Security email: support@goeve.io.