Privacy Policy
Last updated: September 2026
1. Data controller
The data controller for personal data collected on Ez'Events is:
- Eazy Green SAS
- 29 Résidence Parc d'Ardenay, 91120 Palaiseau
- RCS Evry : 100 855 733
- Email : contact@ezevents-app.com
2. Data collected
Account data (organiser)
- Email address
- Display name
- Profile picture (URL, provided by Google or Apple)
- OAuth identifier (Google sub or Apple sub)
- Account creation date
Participation data (guests)
- Username chosen when accessing the event
- IP address (security and abuse prevention, e.g. limiting the number of connections)
- Date and time of participation
Event-related data
- Text messages, photos, videos and audio recordings posted in the guestbook
- Playlist votes, quiz answers, kitty contributions
- Timeline moments
Payment data
- Amount, status and order reference
- Banking data is processed exclusively by Stripe and is never stored by Eazy Green
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Authentication and account management | Contract execution |
| Event creation and management | Contract execution |
| Payment processing | Contract execution |
| Security and abuse prevention (IP address) | Legitimate interest |
| Retention of accounting data | Legal obligation (10 years) |
| Service emails (confirmation, reminder before the event) and a single follow-up if your account has not created an event yet | Legitimate interest — you can object at any time by writing to contact@ezevents-app.com |
4. Retention period
- Account data : retained until account deletion
- Event data : retained until manual deletion by the organiser, or automatically deleted 90 days after the event closing date
- Payment data : 10 years from the transaction (legal accounting obligation)
- Session cookies : 1 hour (access token), 30 days (refresh token)
5. Cookies
Ez'Events uses only strictly necessary cookies for the operation of the service. No advertising or analytical tracking cookies are used.
| Cookie | Role | Duration |
|---|---|---|
ez_token | Authentication (JWT access token) | 1h |
ez_refresh | Session renewal | 30j |
These cookies are httpOnly and secure: they are not accessible via JavaScript and are only transmitted over HTTPS. No consent banner is required for these functional cookies.
6. Sub-processors and transfers outside the EU
Eazy Green uses the following sub-processors. The website, API and database are hosted in France; some other providers may process your data outside the European Union:
| Provider | Role | Country |
|---|---|---|
| OVH SAS | Hosting of the website, API and database (server in France) | France (EU) |
| Cloudflare, Inc. (R2) | Media storage (photos, videos, audio) | United States |
| Stripe Inc. | Payment processing | United States |
| Google LLC | OAuth authentication | United States |
| Apple Inc. | Sign in with Apple authentication | United States |
| Brevo (Sendinblue SAS) | Sending transactional emails | France (EU) |
These transfers are governed by standard contractual clauses approved by the European Commission or equivalent mechanisms compliant with the GDPR.
7. Your rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access : obtain a copy of your data
- Right of rectification : correct inaccurate data
- Right to erasure : request the deletion of your data
- Right to data portability : receive your data in a structured format
- Right to object : object to certain processing activities
- Right to restriction : request the suspension of a processing activity
To exercise these rights, contact us at: contact@ezevents-app.com. We respond within one month.
You also have the right to lodge a complaint with the CNIL: www.cnil.fr.