EventVault Privacy Policy

Effective Date: August 8, 2026
Last Reviewed: August 8, 2026

1. Who We Are

EventVault is an event discovery platform and media publication covering events, venues, performers, and community happenings. EventVault is owned and operated by Caffeine Group LLC, a California limited liability company.

In this policy, "we," "us," and "our" mean Caffeine Group LLC. Caffeine Group LLC is the business responsible for the personal information described here.

Operator: Caffeine Group LLC, a California limited liability company
Mailing address: 1470 East Valley Rd # 50131, Santa Barbara, CA 93108
Phone: (805) 699-5425
Privacy contact: privacy@eventvault.com
General contact: hello@eventvault.com

This policy covers the EventVault website at eventvault.com, our email newsletters, and any other service that links to this policy (collectively, the "Services").

2. Information We Collect

2.1 Information you give us directly

2.2 Information we collect automatically

2.3 Information from other sources

• Event organizers, venues, and promoters, who submit event listings, images, and descriptions.
• Publicly available sources, including public event pages, venue websites, and public calendars, from which we compile factual event listings.
• Our service providers, such as our email platform (delivery and engagement data) and Stripe (transaction confirmations).

2.4 Information we do not collect

We want to be explicit about this, because it matters:

• We do not use facial recognition, face matching, face tagging, or any biometric identification on photographs or video, of adults or of children. We do not build or maintain biometric templates.
• We do not collect Social Security numbers, driver's license numbers, or government ID numbers.
• We do not knowingly collect health information, religious or political affiliation, sexual orientation, or union membership. If you volunteer such information in content you publish, you are publishing it yourself.
• We do not purchase personal information from data brokers, and we do not append or enrich your record with data purchased from third parties.

3. How We Use Information

• To provide, operate, secure, and improve the Services
• To create and manage your account and authenticate you
• To personalize which events, articles, and recommendations you see
• To send you the emails you have signed up for
• To process ticket purchases, registrations, and refunds
• To publish content you submit
• To respond to your questions and provide support
• To measure how the Services are used, in aggregate, so we can improve them
• To report aggregate, de-identified audience information to sponsors and advertisers — for example, "this event reached approximately 4,000 members interested in live music." See Section 4.2.
• To detect, investigate, and prevent fraud, abuse, spam, and security incidents
• To comply with law and enforce our Terms of Service

Automated personalization. We use automated processes to rank and recommend events based on your stated interests and your activity on the Services. These processes affect what you see; they do not make decisions about your eligibility for credit, housing, employment, education, insurance, or health care, and we do not use them for any such purpose.

Automated content processing. We use automated tools, including artificial intelligence, to read event submissions and help categorize and structure them. These tools help us organize information; they do not make decisions about you.

4. How We Share Information

4.1 Service providers

We share personal information with vendors who perform services for us and are contractually prohibited from using it for their own purposes:

Automated processing of submitted content. When an event is submitted to us — including its description text and any poster or flyer image — we use an artificial intelligence service (Anthropic) to read that content and help us categorize the event, extract details such as dates and venues, and suggest audience tags. Our AI provider is not permitted to use your content to train its models. A person reviews every event before it is published; the AI assists, it does not decide.

Maps. Venue and event pages may display a map. Loading a map sends your IP address to the map tile provider (OpenStreetMap). If you prefer not to load maps, every venue's full address and directions link is available as text on the same page.

4.2 Sponsors and advertisers

We do not sell your personal information to sponsors or advertisers.

What sponsors receive is aggregate, de-identified reporting: counts, categories, and campaign performance — how many people saw a placement, how many clicked, and which broad interest categories they fall into. Sponsor reports never identify you, and we do not provide sponsors with member lists, email addresses, phone numbers, or record-level data.

If you enter a sweepstakes, giveaway, or offer sponsored by a third party, the official rules for that promotion will tell you before you enter exactly what information is shared with the sponsor and why. That sharing happens only because you chose to enter.

4.3 Event organizers, venues, and program operators

When you buy a ticket, register for a program, or RSVP to an event, we provide the organizer with the information necessary to admit you and run the event — typically your name, email address, order details, and any registration information you supplied. The organizer's own privacy practices then govern their use of that information, and we do not control them. We disclose the organizer's identity on the event page before you complete a purchase or registration.

4.4 Content you choose to make public

Anything you publish — photos, videos, reviews, comments, event listings, and your public profile — is visible to others and may be indexed by search engines. Please do not publish information you want to keep private.

4.5 Legal and safety disclosures

We may disclose information when we believe in good faith that it is necessary to comply with a law, regulation, subpoena, court order, or lawful government request; to enforce our Terms of Service; to protect the rights, property, or safety of EventVault, our users, or the public; or to investigate fraud or a security incident.

4.6 Business transfers

If Caffeine Group LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will provide notice on this site before your information becomes subject to a materially different privacy policy.

5. Cookies, Analytics, and Embedded Content

5.1 What we use

We do not use advertising or retargeting cookies. We do not participate in cross-context behavioral advertising, and we do not allow third-party advertising networks to place tracking technologies on the Services.

We use Google Analytics to understand how the Services are used. We have configured Google Analytics to restrict how Google may use that data: Google Signals and advertising personalization are disabled, we do not share analytics data with other Google products for advertising, and Google processes the data as our service provider under Google's data processing terms.

5.2 Embedded content from other sites

Event pages and articles may include content embedded from other services — most commonly YouTube and TikTok videos — and links to Instagram, Facebook, and other pages maintained by organizers and venues.

When a page loads embedded content, the provider of that content may receive your IP address and set its own cookies, even if you do not click play. This happens under the embedding provider's privacy policy, not ours, and we do not control it.

To reduce this, we use YouTube's privacy-enhanced embed mode (youtube-nocookie.com), and embedded video loads only after you click to play. Until you click, no request is made to the video provider.

Links to Instagram, Facebook, TikTok, and other external sites take you off EventVault. We do not control, and are not responsible for, what those sites collect.

5.2a Other third parties that load with our pages

Some parts of the site are assembled from resources hosted elsewhere. These providers are not processing personal information on our behalf and are not our service providers — but because your browser fetches the resource directly, each one receives your IP address, and your browser tells it which EventVault page you were on. We do not control what they do with that.

Maps are covered separately in Section 4.1.

Sponsors and advertisers do not receive anything this way. Sponsor images are served from our own servers, not the sponsor's, so loading a page carrying a sponsored placement sends nothing to that sponsor. If you click a sponsored link you leave EventVault, and from that point the destination site's own privacy policy applies.

None of these are advertising or analytics services, and none of them are given your name, email address, or account information. Where we can serve a resource ourselves instead, we prefer to.

5.3 Your tracking choices

• Browser settings. Most browsers let you block or delete cookies. Blocking strictly necessary cookies will break sign-in and checkout.
• Analytics opt-out. You can opt out of Google Analytics across all websites using Google's browser add-on at https://tools.google.com/dlpage/gaoptout.
• Mobile. You can reset or limit your advertising identifier in your device's privacy settings, and revoke location permissions at any time.
• Opt-out preference signals. See Section 5.4.

5.4 Global Privacy Control and Do Not Track

Global Privacy Control (GPC). GPC is a signal your browser or a browser extension can send automatically to tell every website you visit that you do not want your personal information sold or shared. We do not sell or share personal information, so there is nothing for an opt-out preference signal to opt you out of. We nevertheless honor GPC signals as a request to disable non-essential analytics technologies.

Do Not Track (DNT). California law requires us to tell you how we respond to browser Do Not Track signals. We do not currently respond to DNT signals, because no common industry standard for DNT has been adopted. We do honor Global Privacy Control signals as described above.

Third-party tracking. California law also requires us to tell you whether third parties may collect personal information about your online activities over time and across different websites when you use the Services. Yes — third parties whose content is embedded on our pages, and our analytics provider, may collect information about your activity over time and across different websites. We do not control that collection.

6. Location Information

We use location in two different ways, and the distinction matters:

• Approximate location — a city or region inferred from your IP address. We use this to show you relevant local events by default. This does not identify where you are with any precision.
• Precise location — your device's GPS-level location. We request this only when you use a feature that needs it (such as "events near me" or venue directions), only after you grant permission, and only for as long as you allow it. You can revoke this permission at any time in your browser or device settings, and doing so will not prevent you from using the Services — you will simply enter a location manually instead.

We do not use precise location to build profiles about you, we do not sell or share precise location data, and we do not use geofencing around health care facilities, places of worship, shelters, or other sensitive locations.

7. Email

We send newsletters, event recommendations, and transactional messages (receipts, ticket confirmations, account notices).

Every marketing email includes an unsubscribe link and our physical mailing address. You can unsubscribe at any time and we will honor it promptly and in no event later than ten business days. Transactional messages — receipts, ticket delivery, security notices, and refund information — are not marketing and will continue as long as you have an account or a pending order.

8. Children and Young People

EventVault is intended for adults. You must be 18 or older to create an EventVault account.

8.1 Youth programs and family registrations

Some events on EventVault are youth programs — youth sports registration, camps, and family activities. Only a parent or legal guardian aged 18 or older may register a child, using their own adult EventVault account.

Where we handle registration for a youth program:

• The child's information is stored as part of the parent's account record. The child does not receive a login, a profile, a message inbox, an interest quiz, or the ability to upload content.
• We collect only what the program organizer needs to run the program — typically the participant's name, age or birthdate, and an emergency contact.
• We provide that information to the program organizer, and we do not use it for advertising, personalization, or profiling.
• We do not run advertising or behavioral tracking technologies on youth program registration pages.
• We retain participant information only as long as needed for the program season and our records, and then delete it. See Section 11.

We do not knowingly collect personal information online directly from children under 13. If we learn that a child under 13 has created an account or submitted information directly to us, we will delete it promptly. If you believe a child has provided information to us, contact us at privacy@eventvault.com and we will remove it.

8.2 Photographs of children

We publish photographs from public community events, including youth sports. Our practices:

• We do not identify children by name without a parent or guardian's explicit permission. We caption teams, not individual children.
• We do not use photographs of identifiable minors in advertising, in sponsored placements, on merchandise, or to market EventVault itself.
• We do not perform face recognition, face matching, or automatic tagging on any image.
• We strip GPS location data from uploaded photographs of youth events.
• Any parent or guardian may ask us to remove a photograph of their child, for any reason or no reason, and we will remove it within 48 hours. Email privacy@eventvault.com with a link to the photo. We do not ask for an explanation and we do not require a legal justification.

8.3 Users aged 13 to 17

We do not permit account registration by anyone under 18. If we learn that a user is between 13 and 17, we will not sell or share their personal information, and we will not use their information for cross-context behavioral advertising.

9. Your Privacy Rights

We extend the following rights to all of our users, regardless of where you live. You will never be discriminated against for exercising them — we will not deny you service, charge you a different price, or give you a lower quality of service.

9.1 The rights

9.2 How to make a request

Email privacy@eventvault.com with the subject line "Privacy Request."

You do not need an account to make a request. We will not require you to create one.

9.3 How we verify and respond

We will confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time, we will tell you why and take no more than an additional 45 days.

To protect your information, we need to verify that you are who you say you are. For most requests, confirming control of the email address associated with your account is sufficient. For requests involving sensitive information, we may ask for additional confirmation. We will not ask for more information than is necessary to verify you, and we will not use anything you provide for verification for any other purpose.

An authorized agent may submit a request on your behalf with written permission signed by you; we may contact you to confirm.

Limits. We may decline a request where the law permits — for example, where we must retain information to complete a transaction, comply with a legal obligation, detect security incidents, or exercise a legal claim. If we decline, we will tell you why. Deleting your account will not remove content you published publicly and that others have already shared, or that is necessary to preserve the integrity of an event record; we will tell you what we cannot remove and why.

9.4 Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months. We do not sell or share the personal information of anyone under 16.

9.5 Your California Privacy Rights — Shine the Light (Cal. Civ. Code § 1798.83)

California residents may request information about our disclosure of personal information to third parties for those third parties' own direct marketing purposes.

We have adopted, and hereby disclose, a policy of not disclosing our customers' personal information to third parties for those third parties' direct marketing purposes without offering our customers the opportunity to opt out of such disclosure at no cost. You may exercise that choice at any time, free of charge, by emailing privacy@eventvault.com.

To make a Shine the Light request, write to privacy@eventvault.com with "Shine the Light Request" in the subject line, or to our mailing address above. We will respond within 30 days.

9.6 Outside the United States

EventVault is operated from the United States and is directed to audiences in the United States. We do not target our Services to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not offer goods or services in those regions. If you access the Services from outside the United States, your information will be transferred to and processed in the United States.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls with multi-factor authentication on administrative accounts, and regular software patching. We never store full payment card numbers — card data goes directly to Stripe, our PCI-compliant payment processor.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you as required by law. Under California law we will notify affected California residents within 30 calendar days of discovering the breach, and we will notify the California Attorney General as required.

If you believe your account has been compromised, contact us immediately at security@eventvault.com.

11. How Long We Keep Information

We keep information no longer than reasonably necessary for the purposes described in this policy, unless a longer period is required by law.

12. Third-Party Sites and Content

The Services contain links to third-party websites — organizer pages, ticketing platforms, venue sites, and social media. We are not responsible for the privacy practices or content of those sites. Review their privacy policies before providing information to them.

13. Changes to This Policy

We review this policy at least once every twelve months and update it whenever our practices change. When we make a material change, we will post the updated policy here with a new effective date and notify you by email or by a prominent notice on the Services at least 7 days before the change takes effect. The "Last Reviewed" date at the top tells you when we last confirmed this policy is accurate.

14. Contact Us

Email: privacy@eventvault.com
Mail: Caffeine Group LLC, Attn: Privacy, 1470 East Valley Rd # 50131, Santa Barbara, CA 93108
Phone: (805) 699-5425
Accessibility requests: accessibility@eventvault.com — see our Accessibility Statement
Copyright / DMCA: dmca@caffeinegroup.com — see our DMCA page

If you are not satisfied with our response to a privacy request, you may contact the California Privacy Protection Agency or the California Attorney General's Office.

EventVault is a publication of Caffeine Group LLC.