Privacy Policy | Wave Events

Purpose of this Privacy Policy

We value and respect your privacy. This Privacy Policy (the "Policy") describes how we collect, use, and share your personal information when you use our Services — including any white-label mobile applications operated, managed, or marketed by our Clients. Any capitalized term not defined here has the meaning set out in our Terms of Service.

All references to "we," "us," "our," or "Wave" mean Wave Events, Inc., a Delaware corporation. References to "you," "your," or "user" mean the End User of the Services.

In Summary

We collect certain information about you, as explained in this Policy, but you control what and how much you share.
We do not knowingly collect information from children under 13.
We do not sell your personal information, but we may share it with vendors, Clients, and third parties in connection with providing our Services.
Third-party providers who help us deliver our Services are required to protect your information.
We may use and share aggregated or de-identified information.
We may disclose information when required by law.
If you are outside the United States, you agree that your information may be transferred to and stored in the United States.

Notice at Collection for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information. We collect personal information to provide, support, and improve our Services—for example, to register you for events, deliver personalized experiences, and communicate with you. While we do not sell your information for monetary value, we may "share" it for analytics, personalization, or event-related marketing with organizers and sponsors.

You can learn more about:

The types of personal information we collect in Section 2
How we use that information in Section 3
How we share it in Section 4

To exercise your rights under the CPRA—including the Right to Know, Delete, Correct, or Opt Out of Sale or Sharing—contact us at hello@wave.events.

We retain personal information only for as long as necessary for the purposes described in this Policy (see Section 7 for details).

1. Scope of this Policy

This Policy applies to your use of the Services, whether as a Client or an End User, including when participating in one or more events ("Events"). By accessing or using the Services, you agree to this Policy.

If you are an End User, you acknowledge that we may share your information, including personally identifiable information, with third parties as explained here.

2. Information We Collect

Information you provide

When you create a Wave account, you provide details such as your name and email address. You may also share additional information—for instance, completing a profile, registering for Events, or engaging with others through the Services. This may include your address, phone number, or company name (if you are a Client). If you communicate with us by email, we may retain your messages, your email address, and our replies. We may also keep messages you send through the Services.

Information collected automatically

We automatically collect certain information as you use the Services, including through cookies on our website and in-app tracking in our mobile apps. This data may include device information (such as a unique device identifier), approximate location, browsing activity, and details about how you interact with our Services—like which sections you use, sessions you attend, and the websites or apps you visit after leaving our platform.

Information from third parties

If you are an End User, we may receive information about you from a Client. With your permission, we may also obtain information from your social media accounts. We work with vendors who may collect information about your usage (for example, through scripts or analytics tools) to help ensure our Services function properly.

3. How We Use Information

To provide our Services. We use your information to deliver core functionality, such as event registration, session management, and attendee engagement.
To improve our Services. We analyze data to make our website, apps, and products better and to personalize your experience.
To respond and provide support. We use your information to answer questions, address requests, and provide assistance.
To communicate with you. We may contact you regarding your account, feedback, this Policy, or our Terms of Service.
For security purposes. We use data to protect our company, Clients, and users from fraud and unauthorized access.
For promotional purposes. We may send you updates about new features, services, or offers. You can opt out at any time (see Section 5).

4. How We Share Information

To deliver the Services. We share information with trusted third parties that help us operate the Services—such as hosting, payment processing, analytics, support, and email delivery providers.
With Clients, partners, and sponsors. If you are an End User, we may share your contact and engagement details (such as session attendance) with the Client managing your Event, that Client's partners, and Event sponsors or exhibitors. These parties may contact you regarding the Event or for their own marketing purposes.
Legal compliance and protection. We may disclose information if required by law, court order, or to respond to lawful requests from authorities, or to prevent fraud or security threats.
Business transfers. If we sell or merge part or all of our business, your information may be shared or transferred as part of that transaction.
With your consent. We may share information for any other purpose with your approval.

5. Your Choices

Emails. You can unsubscribe from promotional emails by following the link included in those messages. We will continue to send transactional or essential communications.
Cookies. You can manage cookies and tracking through your browser settings, though disabling them may affect certain site features.
Do Not Track. We do not currently respond to browser "Do Not Track" signals.
Mobile controls. You can adjust device settings to disable GPS or push notifications. Some features may not work without them.

7. Data Retention

We retain personal information only as long as necessary to achieve the purposes described in this Policy or to meet legal and business obligations.

We consider the type and sensitivity of the data, potential harm from unauthorized use, and whether we can achieve the purpose in other ways.

If you request deletion of your data, we will comply unless retention is legally required or permitted. Aggregated or anonymized information may be retained indefinitely for analytics and product development.

If we process sensitive personal data (as defined by the CPRA), we do so only for lawful purposes and never to infer personal characteristics.

Questions or requests about retention, correction, or deletion can be sent to hello@wave.events.

8. Security

We take reasonable steps to protect your data from unauthorized access, use, or disclosure. However, no system is completely secure. We are not responsible for any loss, misuse, or alteration of data except as required by law.

Use caution when sharing information online and safeguard your passwords. You can learn more about online safety at ftc.gov.

9. Third-Party Links and Services

Our Services may contain links to external websites or integrate third-party tools we do not control.

This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Review their privacy policies before interacting with them.

10. Contact Us

If you have questions about this Policy or wish to correct or update your information, email us at hello@wave.events.

Wave Events, Inc.
Email: hello@wave.events

11. Policy Updates

We may update this Policy periodically. Updates are not retroactive.

By continuing to use our Services after an update takes effect, you agree to the new Policy. We will notify users of material changes as required by law and post updates on www.wave.events.

12. California Users

This section applies to California residents and is consistent with the CCPA and CPRA.

Your Rights:

Right to Know what personal information we collect, use, or share.
Right to Delete information we hold about you, with certain exceptions.
Right to Correct inaccurate information.
Right to Opt Out of the sale or sharing of your information (including for cross-context advertising).
Right to Limit the use of sensitive information.
Right to Non-Discrimination for exercising these rights.

We honor Global Privacy Control (GPC) signals as a valid opt-out under California law.

We do not sell your personal data for money but may "share" limited data for analytics or marketing purposes.

To make a CPRA request, email hello@wave.events (subject: "California Request").

To make a "Shine the Light" request under California Civil Code §1798.83, contact us at the same address and specify that you are making a Shine the Light inquiry.

13. European Users

This section applies to users in the European Economic Area (EEA), the United Kingdom, and Switzerland, in compliance with the GDPR, UK GDPR, and Swiss FADP.

Legal Bases for Processing:

Consent: You have given clear consent for specific purposes (e.g., event registration).
Contract: Processing is necessary to perform our contract with you.
Legal Obligation: Processing is required to comply with applicable laws.
Legitimate Interests: Processing is necessary for our legitimate business purposes, provided your rights do not override those interests.

Your GDPR Rights:

Access your personal data
Correct inaccurate data
Request deletion ("Right to be Forgotten")
Restrict processing
Data portability
Object to processing, including direct marketing
Withdraw consent at any time

To exercise your rights, contact hello@wave.events. You may also lodge a complaint with your local data protection authority.

International Transfers:

Wave Events, Inc. is based in the United States. If you use the Services from outside the U.S., your data may be transferred to or processed in the United States or other countries that may not provide the same level of protection.

We safeguard such transfers through mechanisms such as:

Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
The UK International Data Transfer Agreement (IDTA) or Addendum to SCCs
Adequacy decisions by relevant authorities
Additional safeguards like encryption and strict access controls

All third parties that process data on our behalf are contractually required to maintain appropriate data protection standards.