Skip to legal content
EventloomConference program operations

Eventloom legal

Privacy Policy

This Policy explains the information Eventloom handles, why we handle it, and the choices available to people and organizations using the service.

Effective: August 14, 2026Contact: support@namuh.co

Plain-language summary

We use personal information to operate and secure Eventloom, never sell it, and only use connected-service data to provide the integration you authorize. Organization admins control much of the program data in their workspace.

1. Scope and who we are

Eventloom is a conference program operations service operated by Namuh ("Namuh," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our public websites or use the hosted Eventloom service.

Organizations may also deploy Eventloom on infrastructure they control. A self-hosted operator is responsible for its own privacy practices, and this Policy does not govern personal information processed solely by that independent deployment.

2. Information we collect

We collect information in the following categories:

  • Account and identity information. Name, email address, password verifier, email-verification status, profile details, account roles, and authentication records. If Google sign-in is offered and you choose it, we may receive your name, email address, profile image, and a stable Google account identifier.
  • Program and event content. Organization and event settings, speaker profiles, proposals, reviews, rubric scores, schedules, session details, messages, tasks, files, and other content you submit or manage.
  • Integration information. OAuth grants, encrypted access and refresh tokens, workspace or base identifiers, field mappings, synchronization state, and the records you direct us to exchange with services such as Airtable.
  • Billing information. Plan, subscription, invoice, transaction, and billing-contact details. Payment processors handle complete card or bank credentials; we do not intend to store full payment-card numbers.
  • Usage and device information. IP address, browser and device type, pages and features used, timestamps, referral data, errors, diagnostic events, and security logs.
  • Communications. Support requests, product feedback, survey responses, and records of service-related correspondence.

3. Where information comes from

We receive information directly from you, from organizers or organizations that invite you into an event, automatically from your use of the service, and from integrations you authorize. If you submit information about another person, you must have permission to do so and must provide any notice required by law.

4. How we use information

We use personal information to:

  • Provide, secure, maintain, troubleshoot, and improve Eventloom.
  • Authenticate users and preserve organization, event, and role-based access.
  • Process submissions, reviews, schedules, publications, files, and communications.
  • Run integrations and synchronizations that an authorized user configures.
  • Provide user-requested advisory AI features that remain subject to human review.
  • Administer subscriptions, payments, account notices, and customer support.
  • Prevent fraud, abuse, security incidents, and violations of our Terms.
  • Comply with law, enforce agreements, and protect users, Namuh, and the public.
  • Analyze aggregated or de-identified service performance and product usage. We do not attempt to re-identify data that we have de-identified.

5. OAuth and connected services

Connected services are optional. Before you authorize one, its consent screen identifies the requested permissions. We use the resulting grant only to provide the connection you requested, maintain its security, and comply with law.

Airtable. If your organization connects Airtable, Eventloom may access selected base metadata and records within the authorized scopes, store encrypted OAuth credentials, and exchange only the fields configured by an authorized organization member. Disconnecting Airtable stops future synchronization and makes the related credentials unusable, subject to short-lived security and recovery records.

Google. If Google sign-in becomes available and you select it, Eventloom uses basic identity information to create or authenticate your Eventloom account. Google sign-in does not by itself grant access to Google Drive, Calendar, Gmail, or other Google content. Any future Google feature requiring additional scopes will ask for separate, specific authorization.

Eventloom's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell connected-account data or use it for personalized advertising.

6. Legal bases

Where a legal basis is required, we process information to perform our contract with you or your organization, pursue legitimate interests such as service security and improvement, comply with legal obligations, and act on consent where we ask for it. You may withdraw consent at any time, but withdrawal does not affect processing already completed.

7. How we disclose information

We may disclose information to:

  • Your organization and authorized collaborators according to the event, role, assignment, and publication settings they control.
  • Service providers that support hosting, storage, security, email, calendar delivery, analytics, customer support, payments, and user-requested AI features. They may process information only to provide contracted services to us.
  • Connected services such as Airtable or Google when you or your organization direct the connection.
  • Authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce agreements.
  • A successor in a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice obligations.

We do not sell personal information.

8. Retention and deletion

We retain account and event information while it is needed to provide the service and as directed by the controlling organization. After deletion or termination, we delete, de-identify, or isolate information within a commercially reasonable period, subject to backups, fraud prevention, dispute resolution, audit integrity, and legal obligations. Billing records may be kept for legally required accounting periods. OAuth credentials are removed or rendered unusable when a connection is revoked, subject to short-lived security records.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant and event authorization, encrypted transport, restricted production access, audit records, and protected credential storage. No system is completely secure. You are responsible for protecting your login credentials and promptly notifying us of suspected unauthorized access.

10. International transfers

Eventloom and its service providers may process information in countries other than your own. Where required, we use recognized transfer mechanisms and contractual protections. An organization that controls an Eventloom workspace may have additional obligations to its speakers, reviewers, applicants, and staff.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to appeal a denied request. You may also disconnect integrations, manage communication preferences, or ask to close your account.

Some event information is controlled by the organization running that event. We may direct your request to that organization or assist it in responding. Send requests to support@namuh.co. We may verify your identity before completing a request.

12. Cookies and similar storage

We use cookies and browser storage that are necessary for authentication, security, theme preferences, and core service operation. If we introduce optional analytics or advertising technologies that require consent, we will provide the controls and notices required by applicable law.

13. Children

Eventloom is not directed to children under 16, and we do not knowingly collect their personal information without authorization required by law. Contact us if you believe a child has provided personal information improperly.

14. Changes to this Policy

We may update this Policy as Eventloom, our integrations, or legal requirements change. We will post the revised version here, change the effective date, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

15. Contact us

Questions, privacy requests, and complaints can be sent to support@namuh.co. Include "Privacy" in the subject line so we can route your request appropriately.