Privacy Policy
Last updated: April 2026
1. Data controller
The data controller for personal data collected on Ez'Events is:
- Eazy Green SAS
- 29 Résidence Parc d'Ardenay, 91120 Palaiseau
- RCS Evry : 100 855 733
- Email : contact@ezevents-app.com
2. Data collected
Account data (organiser)
- Email address
- Display name
- Profile picture (URL, provided by Google or Apple)
- OAuth identifier (Google sub or Apple sub)
- Account creation date
Participation data (guests)
- Username chosen when accessing the event
- IP address (used for moderation purposes only)
- Date and time of participation
Event-related data
- Text messages, photos, videos and audio recordings posted in the guestbook
- Playlist votes, quiz answers, kitty contributions
- Timeline moments
Payment data
- Amount, status and order reference
- Banking data is processed exclusively by Stripe and is never stored by Eazy Green
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Authentication and account management | Contract execution |
| Event creation and management | Contract execution |
| Payment processing | Contract execution |
| Moderation (guest IP address) | Legitimate interest |
| Retention of accounting data | Legal obligation (10 years) |
4. Retention period
- Account data : retained until account deletion
- Event data : retained until manual deletion by the organiser, or automatically deleted 90 days after the event closing date
- Payment data : 10 years from the transaction (legal accounting obligation)
- Session cookies : 1 hour (access token), 30 days (refresh token)
5. Cookies
Ez'Events uses only strictly necessary cookies for the operation of the service. No advertising or analytical tracking cookies are used.
| Cookie | Role | Duration |
|---|---|---|
ez_token | Authentication (JWT access token) | 1h |
ez_refresh | Session renewal | 30j |
These cookies are httpOnly and secure: they are not accessible via JavaScript and are only transmitted over HTTPS. No consent banner is required for these functional cookies.
6. Sub-processors and transfers outside the EU
Eazy Green uses the following sub-processors, who may process your data outside the European Union:
| Provider | Role | Country |
|---|---|---|
| Vercel Inc. | Web interface hosting | United States |
| Railway Corp | Application server hosting | United States |
| Cloudflare Inc. | Media storage (photos, videos, audio) | United States |
| Stripe Inc. | Payment processing | United States |
| Google LLC | OAuth authentication | United States |
| Apple Inc. | Sign in with Apple authentication | United States |
These transfers are governed by standard contractual clauses approved by the European Commission or equivalent mechanisms compliant with the GDPR.
7. Your rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access : obtain a copy of your data
- Right of rectification : correct inaccurate data
- Right to erasure : request the deletion of your data
- Right to data portability : receive your data in a structured format
- Right to object : object to certain processing activities
- Right to restriction : request the suspension of a processing activity
To exercise these rights, contact us at: contact@ezevents-app.com. We respond within one month.
You also have the right to lodge a complaint with the CNIL: www.cnil.fr.