Privacy Policy

When an organizer runs an event on GOey, we process the guest information the organizer provides (name, and optionally email or phone), your check-in activity, and any content you submit through enabled modules (questions, feedback, photos, poll votes, raffle entries).

For events using advanced verification, we additionally process an identity document image and a selfie that you choose to upload for organizer review.

To let organizers manage attendance and deliver the event experience: issuing invitations, confirming check-ins, answering questions, generating your event receipt, and — where enabled — verifying identity for access control.

Identity-verification images (ID and selfie) are stored encrypted, accessible only through short-lived signed links, and are automatically purged no later than 90 days after the event ends.

Other event data is retained while the organizer's workspace is active. Deleted records enter a 30-day restore window before permanent deletion.

Under the Data Privacy Act you have the right to be informed, to access, to object, to rectify, to erase or block, and to data portability, as well as the right to file a complaint and to be indemnified for damages.

To exercise any of these rights, contact the event organizer who invited you, or reach the GOey team through the access request form.

Data is isolated per organizer workspace with row-level security, transmitted over TLS, and private files are served only via signed, expiring URLs. Access to identity documents is limited to the reviewing organizer and audit-logged.