Your privacy matters.

Last updated: August 30, 2026

Data we collect

• Account information: Your name, email address, and profile image when you sign up.
• Organization data: Organization name, branding assets, and settings you configure.
• Event data: Event details, registration forms, questions, activities, and participant responses.
• Payment data: Transaction references and payment screenshots for manual verification. We do not store full payment gateway credentials in plaintext.
• Usage data: Aggregated metrics like event counts, participation counts, and feature usage for plan limit enforcement.

• To provide and maintain the Engagio platform — events, activities, assessments, certificates, and analytics.
• To verify payments and manage event registrations.
• To enforce plan limits and feature entitlements.
• To send transactional emails (registration confirmation, result publication, certificate issuance).
• To improve our product and fix issues. We never sell your data to third parties.

• All data is stored in a PostgreSQL database with organization-level tenant isolation. One organization cannot access another organization's data.
• Payment provider credentials are encrypted at rest using AES-256-CBC.
• Authentication uses secure, HttpOnly cookies with NextAuth.js.
• Image uploads go through Cloudinary with file-type and size validation.
• Public share links use cryptographically random tokens — not sequential IDs.

• Authentication cookies: Required for login. These are HttpOnly and Secure.
• Theme preference: Stored in localStorage to remember your Light/Dark/System choice.
• Organization context: Stored in localStorage to remember your selected organization.
• We do not use third-party advertising or tracking cookies.

• Access: You can view your data through the platform dashboard.
• Correction: You can update your profile and organization settings at any time.
• Deletion: You can delete your events and organizations. Account deletion is available on request.
• Export: You can export your data via CSV from the admin panel.
• Privacy control: Achievement cards default to "Link only" visibility. You control whether your results are public.

• If you have questions about this privacy policy or your data, please contact us at privacy@engagio.app.
• We will respond to your request within 30 days.