Privacy Policy
Last updated 4 September 2026
1. Who we are
Eleganter Event Maker is operated by Eleganter Inc.. We are the controller of the personal data described here. You can reach us through our contact page.
2. What we collect
Account details. Your name and email address, received from Microsoft’s identity service when you sign in. We never receive your password.
What you tell us about your event. Everything entered on the proposal form: dates, city and country, attendance, industry, mood, brand colours, brand personality, creative guidelines, special requirements, any agenda you build, and any event name or logo you supply.
What we generate for you. The finished proposals, the images in them, and the history of versions and edits.
Payment details. Handled entirely by Stripe. We receive confirmation of your subscription and its status. We never see or store your card number.
Technical records. Standard diagnostic logs — pages requested, errors, and how long a proposal took — kept to run the Service and investigate faults.
3. Why we use it, and on what basis
- To provide the Service — generating and storing your proposals. Necessary to perform our contract with you.
- To take payment — managing your subscription. Necessary for the contract.
- To keep the Service working and secure — diagnostics, fraud and abuse prevention. Our legitimate interests.
- To email you about your account and your proposals. Necessary for the contract. Marketing email, if any, is only with your consent and you can withdraw it at any time.
4. Automated processing by AI services
This matters more here than in most policies. To create a proposal, the information you enter is sent to a third-party AI service, which generates the written content and the images. Venue and map information is looked up through third-party mapping and places services, and city photographs come from a public image library.
Do not enter personal data about other people into the proposal form — names of attendees, contact details, dietary or health requirements. The form does not ask for any of it, and it is not needed to produce a proposal.
No decision with a legal or similarly significant effect on you is made by automated means.
5. Who else processes your data
These providers handle information that identifies you, because they have to in order to run the Service:
- Our cloud provider — hosting, database, file storage, and the AI services that generate proposals.
- Microsoft — sign-in, through its identity service.
- Stripe — payments and subscription management.
We also look things up from two public sources while a proposal is being built. These receive only the event details you typed into the form — a city, a venue or a hotel name. They do not receive your name, your email address, your account, or anything else that identifies you or your company, and they are not told who the lookup is for:
- A mapping and places service — hotel location and photograph lookups.
- A public image library — city photographs.
We do not sell your personal data, and we do not share it for advertising.
6. Where your data is held
Your data is processed in the United States and the European Union. Where data leaves the European Economic Area, transfers rely on the safeguards offered by those providers, including standard contractual clauses.
7. How long we keep it
Your account and your proposals are kept while your account is open, so you can return to earlier work. Diagnostic logs are kept for a short period — currently 30 days — and then deleted. Records we must keep for tax or accounting reasons are kept for as long as the law requires. Close your account and we will delete or anonymise the rest within 30 days.
8. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. If you are in the European Economic Area or the United Kingdom these rights come from the GDPR; if you are in California, from the CCPA. Ask us through the contact page and we will respond within one month.
You may also complain to your data protection authority if you are unhappy with how we have handled a request.
9. Cookies
We use only the cookies the Service needs to work: one to keep you signed in, and one to protect forms against cross-site request forgery. We do not use advertising or analytics cookies, which is why you are not asked to accept any.
10. Security
Traffic is encrypted in transit and data is encrypted at rest. Sign-in is handled by Microsoft’s identity service rather than by us. Access to production systems is limited to those who need it. No service can promise perfect security, but we will tell you and the relevant authority about a breach affecting your data where the law requires it.
11. Children
The Service is for business use and is not intended for anyone under 18.
12. Changes
We may update this policy. The date at the top shows when it last changed, and we will give notice of anything that materially affects you.