Privacy Policy
Last updated: February 27, 2026
1. Introduction
EventTara ("we," "us," or "our") is a Philippine outdoor adventure event
booking platform for hiking, mountain biking, road biking, running, and
trail running. This Privacy Policy explains how we collect, use, disclose,
and safeguard your information when you use our website and services.
2. Information We Collect
We may collect the following types of information:
- Account information: When you sign up or log in using Facebook or other
providers, we receive your name, email address, and profile photo.
- Profile data: Information you provide to complete your profile, such as
your username and contact details.
- Booking and event activity: Records of events you book, attend, or
organize, including check-in data.
- Payment information: Payment method selected (GCash, Maya, or cash) and
payment proof screenshots uploaded for verification. We do not store credit
card numbers or e-wallet credentials.
- QR codes: Unique QR codes generated for event check-in purposes.
- Companion data: Names and optional phone numbers of companions you
register for events.
- Badge awards: Badges earned through event participation and achievements.
- Device and usage data: Browser type, IP address, and pages visited,
collected automatically through standard web server logs.
3. How We Use Your Information
- Account creation and authentication: To create and manage your account,
including login via Facebook OAuth.
- Event booking and management: To process your event registrations and
provide booking confirmations.
- Communication: To send transactional emails such as booking confirmations,
event updates, and badge award notifications.
- Badge system: To track and award badges based on your event participation.
- Service improvement: To understand how our platform is used and improve
the user experience.
4. Third-Party Services
We use the following third-party services to operate our platform:
- Supabase: For authentication, database storage, and file storage. Your
account data and event information are stored securely on Supabase
infrastructure.
- Resend: For sending transactional emails such as booking confirmations and
badge award notifications.
- Facebook Login: If you choose to log in with Facebook, we receive the
profile information you authorize. We do not post to your Facebook account
or access your friends list.
- Google Analytics: For aggregated, anonymized usage analytics to understand
how the platform is used. No personally identifiable information is shared
with Google.
- Vercel: Our website is hosted on Vercel's infrastructure. Vercel may
process server logs containing IP addresses.
5. Data Security
We implement appropriate technical and organizational measures to protect
your personal information, including:
- Encrypted connections (HTTPS/TLS) for all data in transit.
- Row-level security policies on our database to ensure users can only
access their own data.
- Authentication tokens stored in secure, HTTP-only cookies.
- Payment proof images stored in access-controlled cloud storage.
6. Data Sharing
We do not sell, rent, or trade your personal information. Your information
may be shared only in the following circumstances:
- Event organizers: When you book an event, the organizer receives your name
and contact information necessary to manage the event.
- Legal requirements: We may disclose information if required by law or in
response to valid legal process.
7. Cookies and Session Data
We use authentication session cookies managed by Supabase to keep you logged
in securely. These cookies are essential for the functioning of the service
and are not used for advertising or tracking purposes.
8. Data Retention and Deletion
We retain your personal information for as long as your account is active or
as needed to provide our services. If you wish to request deletion of your
account and associated data, please contact us at info@eventtara.com. We
will process your request within 30 days. For details on how to delete your
data, including data associated with Facebook Login, please visit our
/data-deletion page.
9. Philippine Data Privacy Act
EventTara complies with the Philippine Data Privacy Act of 2012 (Republic
Act No. 10173). As a data controller, we ensure that your personal
information is collected for specified and legitimate purposes, processed
fairly and lawfully, and protected against unauthorized access. You have the
right to access, correct, and request deletion of your personal data. To
exercise these rights, contact us at info@eventtara.com.
10. Children's Privacy
Our service is not directed at individuals under the age of 13. We do not
knowingly collect personal information from children under 13. If we become
aware that we have collected data from a child under 13, we will take steps
to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will
revise the "Last updated" date at the top of this page. We encourage you to
review this policy periodically to stay informed about how we protect your
information.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data
practices, please contact us at info@eventtara.com.
