Skip to main content

Privacy Policy

Last Updated: 28th August 2025

1. Information we collect

We collect the following personal information:

  • Email address (account creation, licensing).
  • Billing information (if you purchase a license, handled securely via Stripe).
  • Usage data via Simple Analytics (e.g., builds, plugins, aggregate usage patterns).

2. Self-Hosted Users

When running EventCatalog self-hosted:

  • Your data remains under your control.
  • Only limited usage events (e.g., builds, plugins) are sent back through Simple Analytics.
  • We do not access your diagrams, content, or internal data.

3. Data Storage & Retention

  • We use Supabase to store account and license information.
  • License/account data is deleted within 90 days of account closure.
  • Billing/payment records are retained for 7 years to comply with tax and legal obligations.
  • Analytics data is stored only in aggregate/anonymous form.

4. Third-Party Services

We share information with trusted third parties as necessary:

  • Supabase – authentication & database.
  • Stripe – payment processing.
  • Simple Analytics – usage analytics (privacy-friendly).
  • Resend – transactional email delivery.

Each provider processes data under its own privacy policy.

5. User Rights

You may request to:

  • Access the personal data we hold about you.
  • Correct, update, or delete your data.
  • Export your data.

To exercise these rights, contact us at: hello@eventcatalog.dev

6. Security

We store minimal data (email addresses and license keys) securely in Supabase. For detailed information about data security, please refer to Supabase's security documentation.

For self-hosted users:

  • Your data security is under your control and responsibility
  • We regularly release security patches and updates for EventCatalog
  • It is your responsibility to keep your self-hosted version up to date
  • We recommend following security best practices for your hosting environment

7. Changes to This Policy

We may update this Privacy Policy from time time.

We will notify users of material changes by updating the effective date above.

8. Contact

For privacy-related questions, contact: hello@eventcatalog.dev