Privacy Policy

1. Introduction and Data Controller

Evynt is operated by HinotoWay LLC, a Wyoming limited liability company (“we,” “us,” or “our”). We are the data controller responsible for your personal data when you use our website, applications, and services (the “Services”). This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

This policy applies to personal data we collect through the Services, including when you create an account, plan events, invite guests, make payments, or contact us. It does not apply to third-party sites or services linked from our Services.

2. Data We Collect

We may collect the following categories of data:

Account and profile: name, email address, password (stored in hashed form), and any profile information you provide.
Event and content data: event details, guest lists, invitations, wishlists, photos or links you add, and other content you create or upload.
Payment and billing: billing name and address, payment method details (processed securely by our payment provider, such as Stripe; we do not store full card numbers or CVV), and transaction history.
Usage and technical: IP address, device type, browser, log-in and usage times, pages visited, and similar technical and usage data.
Communications: messages you send to us (e.g., support or contact forms) and our responses.
Cookies and similar technologies: we use cookies and similar technologies as described in our Cookie Policy.

We may receive data from third parties (e.g., if you sign in via a third-party provider or a guest provides your email when responding to an invitation). If you are invited as a guest, the event host may provide your contact details (such as email) to send invitations and manage responses. We use such data in accordance with this policy and the source provider’s terms.

3. How We Use Your Data

We use your data to:

Provide, operate, and improve the Services (e.g., accounts, events, invitations, payments).
Process payments and comply with tax and financial obligations.
Send service-related communications (e.g., confirmations, reminders, account or security notices).
Respond to your requests and provide support.
Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms of Service.
Analyze usage to improve our products and user experience.
Comply with legal obligations and enforce our rights.
Send marketing or promotional communications where you have consented or where permitted by law (you may opt out at any time).

4. Legal Basis for Processing

Where applicable law requires a legal basis (e.g., under the GDPR in the European Economic Area), we process your data on the following grounds:

Contract: processing necessary to perform our contract with you (e.g., providing the Services, processing payments).
Legitimate interests: processing necessary for our legitimate interests (e.g., security, fraud prevention, analytics, improving the Services), where not overridden by your rights.
Consent: where we ask for your consent (e.g., optional marketing, certain cookies); you may withdraw consent at any time.
Legal obligation: processing required to comply with laws (e.g., tax, anti-fraud, responding to lawful requests).

5. Sharing and Third Parties

We may share your data with:

Service providers: vendors who help us operate the Services (e.g., hosting, payment processing such as Stripe, email delivery, analytics). They process data on our instructions and under agreements that protect your data.
Other users: as needed for the Services (e.g., event hosts may see guest responses; guests may see event details you choose to share).
Legal and safety: when required by law, court order, or government request, or to protect our rights, your safety, or the safety of others.
Business transfers: in connection with a merger, sale, or other transfer of our business or assets, subject to the same privacy commitments.

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes without your consent.

6. International Transfers

We are based in the United States. Your data may be processed in the United States or other countries where our service providers operate. Laws in those countries may differ from your country of residence. When we transfer data from the EEA, UK, or other regions with strict data protection laws, we use appropriate safeguards (e.g., standard contractual clauses, adequacy decisions) as required by applicable law.

7. Data Retention

We retain your data only as long as necessary for the purposes in this policy. After you delete your account, we remove or anonymize your personal data from our active systems within a reasonable period (typically within 30 days), unless a longer retention period is required by law.

We may retain certain data where necessary for legitimate business or legal purposes, including: billing and payment records for accounting and tax; security and access logs for safety and legal process; and data required to comply with legal obligations, enforce our terms, or defend legal claims. Such data is retained only as long as needed for those purposes.

8. Security

We implement technical and organizational measures to protect your data against unauthorized access, loss, or alteration. These include encryption in transit and at rest where appropriate, access controls, and secure payment processing through reputable providers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your Rights

Depending on where you live, you may have the following rights:

Access: request a copy of the personal data we hold about you.
Correction: request correction of inaccurate or incomplete data.
Erasure: request deletion of your data (subject to legal exceptions).
Portability: request a copy of your data in a structured, machine-readable format where applicable.
Object or restrict: object to certain processing or request restriction of processing where applicable by law.
Withdraw consent: where we rely on consent, you may withdraw it at any time.
Opt out of marketing: use the unsubscribe link in our emails or contact us.
Complain: lodge a complaint with a supervisory authority in your country (e.g., in the EEA, your local data protection authority).
Cookies / analytics: you can manage cookie preferences via the Cookie Policy or cookie banner.

To exercise these rights, contact us using the details in Section 12. We will respond within the time required by applicable law. We may need to verify your identity before processing your request.

California residents: We do not sell personal information. You may have additional rights under the CCPA/CPRA (e.g., right to know, delete, correct, limit use of sensitive data, non-discrimination). To exercise these rights, contact us as in Section 12.

10. Children

The Services are not directed at children. You must be at least 18 years old to use the Services, as stated in our Terms of Service. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have collected personal data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Services and update the “Last updated” date. Material changes may be communicated by email or a prominent notice on the Services. Your continued use of the Services after the effective date means you acknowledge the updated policy. We encourage you to review this policy periodically.

12. Contact Us

For privacy-related questions or to exercise your rights:

General inquiries: [email protected]

HinotoWay LLC
Mailing address: 1021 E Lincolnway Suite #9826
Cheyenne, Wyoming 82001
United States