Privacy Policy · Evonli

This Privacy Policy describes how Red Barn Software ("we", "us") collects, uses, and shares information when you use Evonli ("Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide

Account information: name, email address, password (hashed), and the organization name you provide at signup.
Event content: documents, images, text, and other materials you upload or create within the Service — speaker bios, sponsor logos, agendas, attendee rosters, etc.
Attendee data: names and email addresses of attendees you import for an event, plus any information they provide when they claim a magic-link invitation.
Communications: messages you send us via support, contact forms, or email.

Information we collect automatically

Engagement events: when an attendee views, bookmarks, or interacts with content in the published program, we record the event (target, type, timestamp) tied to their magic-link registration. These events power your event metrics dashboard.
Technical data: IP address, browser type, OS, referring URL, and approximate location, captured in standard server logs for security and performance.
Cookies: session cookies for authentication and a magic-link-bound cookie to recognize returning attendees across editions.

2. How We Use Information

To provide and operate the Service
To process event content via AI extraction (see "Third-Party Services" below)
To send transactional emails (magic-link invitations, password resets, account notices)
To compute engagement metrics for the editor-side dashboard
To respond to your support requests
To detect and prevent abuse, fraud, and security incidents
To improve the Service (in aggregate, de-identified form)

3. Third-Party Services

Operating Evonli requires us to share certain data with third-party providers. We choose providers carefully and only share what's necessary.

OpenAI — content you upload (PDFs, documents, images, text) is sent to OpenAI's API for extraction, classification, and copy drafting. OpenAI's API terms apply; we don't permit them to train their public models on your data.
Resend — transactional email delivery (magic-link invitations, password resets, contact-form submissions).
Digital Ocean — managed PostgreSQL database, web and background-job hosting (via Hatchbox), and Spaces object storage for uploads and processed assets (logos, headshots, PDFs).

We don't sell your data or your attendees' data to anyone, ever.

4. Data Retention

We retain Your Content for as long as your account is active. When an account is closed, we delete content within 30 days, except where retention is required for legal, compliance, or backup-recovery purposes (typically up to 90 days for backups).

Engagement events are retained at the per-edition level for the lifetime of the edition record.

5. Your Rights

Depending on where you live, you may have rights including access, correction, deletion, and portability of your personal data. To exercise any of these rights, email hello@redbarnsoftware.com. We respond to verified requests within a reasonable time, typically within 30 days.

6. Attendees' Data

When an organization imports attendees to an event, the attendee becomes a user of the Service through that organization. The organization is the controller of attendee data; Evonli is the processor. Attendees should direct privacy requests to the organization hosting the event in the first instance.

7. Children's Privacy

The Service is not intended for children under 13. We don't knowingly collect personal information from children. If you believe we've collected information from a child, contact us and we'll delete it.

8. International Transfers

The Service is operated from the United States. Using it from outside the U.S. means your data is transferred to the U.S., which may have different data-protection laws than your country.

9. Security

We use industry-standard safeguards (encryption in transit, hashed passwords, scoped access tokens, regular dependency updates) to protect your data. No system is perfectly secure — if you suspect unauthorized access to your account, contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced to active accounts via email or in-app notice. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Questions or concerns about your privacy? Email hello@redbarnsoftware.com or use our contact form.