Privacy Policy

Effective date: March 19, 2026 · BUENA VISTA VISION, INC.

EventDesk ("EventDesk," "we," "our," or "us") is a product of Buena Vista Vision, Inc. This Privacy Policy explains how we collect, use, and protect information about you when you use EventDesk at eventdesk.bossospro.com.

1. Information We Collect

We collect information you provide directly:

Account information: name, email address, organization name, and organization type when you create an account.
Event data: event names, dates, venues, formats, checklists, speaker and sponsor contacts, P&L entries, and other event details you enter into EventDesk.
Speaker and sponsor contacts: names, email addresses, and other contact details you add to your pipelines.
Billing information: payment details are collected and processed directly by Stripe. We do not store credit card numbers.

We also collect limited technical data automatically:

IP address (used for rate limiting and security only)
Browser and device type
Pages visited and features used (usage patterns, not content)

2. Google User Data

If you choose to connect your Gmail account, EventDesk accesses your Google user data as follows:

Scope requested: gmail.readonly — read-only access to your Gmail messages.
What we read: We scan recent email messages to detect event-related signals such as RSVP replies, speaker confirmations, sponsor responses, and venue communications. We read email metadata (sender, subject, date, message ID) and message content solely to extract these event signals.
How we use it: Messages are classified by our AI to surface actionable updates in your EventDesk dashboard — for example, marking an attendee as confirmed, logging a speaker acceptance, tracking a sponsor commitment, or flagging a deadline change. Classification results are stored as structured signal data attached to your events.
What we store: We store email metadata (sender, subject, date, message ID) and AI-generated classification results. We do not store full email bodies long-term. Message content is processed in-memory during scans and discarded after classification.
What we do NOT do:
- We do not send, modify, label, archive, or delete your emails
- We do not share your email data with any third party other than our AI provider for classification only (and they do not use API inputs for model training)
- We do not use your Google user data for advertising, market research, or any purpose unrelated to the Services you use
- We do not allow humans to read your email data, except as required for security, legal compliance, or with your explicit consent to resolve a support issue
- We do not sell your Google user data to anyone
Revoking access: You can disconnect Gmail at any time from your EventDesk account settings, or revoke access from your Google Account permissions page. When you disconnect, we stop scanning and delete stored email metadata within 30 days.

EventDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

To provide, operate, and improve EventDesk
To send OTP authentication codes and account-related emails
To send your daily deadline digest and RSVP alerts (if enabled)
To generate AI content drafts, run-of-show documents, and post-event automations using your event data
To process payments and manage your subscription
To enforce our Terms of Service and prevent abuse

4. Third-Party Service Providers

We share data with the following processors solely to operate EventDesk:

Cloud database provider — stores your account and event data
Payment processor — processes payments and manages subscriptions (credit card details are handled directly by the processor; we do not store them)
Transactional email provider — delivers OTP codes, digests, and account-related notifications
Anthropic — AI features (content generation, run-of-show, post-event drafts, Gmail signal classification). Your event data and Gmail message content (during in-memory processing) is sent to Anthropic's API to generate AI output. Anthropic's API data use policies apply, and Anthropic does not use API inputs for model training.
Google — Gmail API for read-only email scanning (only if you connect your Gmail account)

We do not sell your data to any third party. We do not use your data for advertising.

5. Data Retention

We retain your account and event data for as long as your account is active. If you close your account or request deletion, we will delete your data within 30 days, except where retention is required by law. Gmail-derived metadata is deleted within 30 days of disconnecting your Gmail account or closing your account.

6. Cookies and Session Storage

EventDesk uses browser session storage (not persistent cookies) to maintain your login session within a single browser session. We do not use tracking cookies or third-party advertising cookies.

7. Security

Access codes are stored as HMAC-SHA256 hashes — never in plain text. Gmail OAuth tokens are encrypted at rest using Fernet encryption. All data is transmitted over HTTPS. We use Supabase's service role key server-side only, never exposed to the browser.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@bossospro.com. We will respond within 30 days.

9. Children's Privacy

EventDesk is intended for business use by adults 18 and older. We do not knowingly collect data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before material changes take effect. Continued use of EventDesk after changes constitutes acceptance.

11. Contact

Questions about this policy? Email us at hello@bossospro.com.

Buena Vista Vision, Inc.
hello@bossospro.com