Legal
Sub-processors
Every outside company involved in running EventzNest or its website, what they do, and what they hold. This is the complete list — including the three that only ever see our public site.
Last updated 9 September 2026
Current sub-processors
| Provider | Purpose | Data involved |
|---|---|---|
| Digital Ocean | Application hosting and Postgres database hosting | All business data you enter — customers, students, quotations, bookings, payments, attendance. |
| Your own email provider | Sending mail from your address | Whatever your quotations, receipts and reminders contain. You choose this provider, not us. |
| Google (Analytics 4 and Google Ads) | Measuring traffic to our public website and the performance of our advertising | Which pages of eventznest.com a visitor viewed and whether an enquiry followed. Loads on the public website only — never inside the application — and stores nothing until a visitor accepts cookies. None of your business data reaches it. |
| Meta (Facebook Pixel) | Measuring the performance of our advertising | Which pages of eventznest.com a visitor viewed and whether an enquiry followed. Loads on the public website only — never inside the application — and stores nothing until a visitor accepts cookies. None of your business data reaches it. |
| Microsoft (Clarity) | Heatmaps and session replay for our public homepage, so we can improve it | How a visitor moves through the eventznest.com homepage — clicks, scrolling, mouse movement. Our homepage only: not our pricing page, not any page with a form, and never inside the application. Runs only after a visitor accepts cookies, and text typed into input boxes is masked. |
The first two hold data you put into EventzNest. The last three do not — they are on our public website only, and they never see anything inside the application. The difference matters, so it is spelled out in each row rather than left to be inferred.
A note on your email provider
Connecting your own email account is optional. If you do not, mail goes out through our shared sender instead, and that provider becomes the sub-processor in its place. Either way, the credential is encrypted and is never shown back to you or to us.
Changes to this list
We will email you before adding a sub-processor, not after. If you object to one, tell us — for a small platform that is a real conversation, not a form letter.
Where the line is drawn
Nothing third-party runs inside the application. No advertising tag, no analytics product, no session recorder, no customer data platform, no chat widget reading your screen. When you or your staff are signed in and working — looking at customers, quotations, payments, attendance — no outside company is watching, and none is receiving anything. That is not a setting we chose and could change quietly; it is a rule we hold ourselves to, and the reason the three marketing vendors above are confined to our public website.
On our public website, we do advertise, and we measure it. Until August 2026 this page said we ran no advertising networks and no session recording. That stopped being true when we started advertising, and this paragraph replaced it rather than being quietly softened. What runs there: cookieless, aggregate traffic counting for everyone; and, only for visitors who accept cookies, the advertising and session-replay tools listed above. Decline, or ignore the banner, and they store nothing. Session replay runs on the homepage alone — never on a page where you would type anything.
We do not sell personal data. Not yours, not your customers', not a website visitor's. To anyone, under any circumstances.
Questions: info@eventznest.com.
