Privacy policy

EVENT.AGENCY Privacy Policy 1. Introduction This Privacy Policy sets out how we, Event Agency (hereinafter referred to as "event.agency"), use and protect your personal data provided by you or otherwise obtained or generated by us in connection with your use of our cataloging and messaging services (hereinafter referred to as "Services"). For the purposes of this Privacy Policy, the pronouns "we" and "our" refer to event.agency, while "you" and "Your" refer to you as a Service user. 1.1. Privacy Principles When collecting and processing personal data, event. agency adheres to two fundamental principles: • We do not use your correspondence data to serve ads. • We store only the data that is necessary for the correct operation of event. agency as a reliable and multifunctional service for posting, exchanging messages and receiving orders. 1.2. User Agreement This Privacy Policy is part of the event.agency User Agreement, which defines the terms of use of our Services. Therefore, this Privacy Policy should be read in conjunction with the User Agreement available here https://event.agency/en/docs/policy 1.3. Content This Privacy Policy defines: on what legal grounds we process personal data; which of your personal data we may collect; how we ensure the security of personal data; for what purposes we may use your personal data; to whom personal data may be transferred; and what rights you have in relation to your personal data.

2. Legal grounds for processing personal data The basis for processing your personal data is that it is necessary for the implementation of our legitimate interests (including (1) providing efficient and up-to-date Services to users and (2) detecting, suppressing and other measures to prevent fraud or security threats related to the provision of Services by us), except in cases where your interests prevail over our interests or fundamental rights and freedoms that require the protection of personal data. 3. Types of personal data we use 3.1. Basic Account Information event. agency is a service for hosting your services and communicating. When creating an account in event. agency, you provide your phone number and basic account information (such as your name, profile photos, and information about your services). Your chosen profile name, profile photos, and user name (if you choose to set one) are always available to other event.agency users, so that it is easier for your contacts and others to find out, find your services, and contact you. We do not ask you to provide your real name, gender, age, or preferences. The display name doesn't have to match your real name. Please note that the user who added you to contacts will see you not under the name you specified, but under the one that he saved for your number in his contact list. For example, your father can specify the name "Marcel.", but you will display it as" Dad", and your subordinates will display it as" Director " (or under any other name, depending on how the interlocutor writes it in their contact list). 3.2. Email address When you enable two-step authentication for your account or save documents in the event.agency directory, you can specify an email address for password recovery. This address is used exclusively for sending a code as part of the procedure for recovering a forgotten password. We do not engage in annoying mailings like" You haven't visited us for a long time " and do not send advertising emails.

Starting in September 2026, we may ask some users for an email address to send codes, or for confirmation to log in or create an account with event. agency by email. This email address is stored separately from password recovery mail and is only used to send codes when you log in to your account. The email address used to log in to your account is stored until you enter a new address or delete your account. 3.3. Your messages 3.3.1. Cloud chats event. agency is an Ai catalog and cloud service. We store messages, photos, videos, and documents from your cloud chats on our servers so that you can access your data from any device at any time, without resorting to third-party backup services. All this data is securely encrypted, and the encryption keys are stored in several data centers located in different jurisdictions. Thus, technical personnel in any of the data centers or intruders (for example, in case of penetration into the data center) will not be able to access user data. Data storage time is limited in time and is subject to permanent deletion. 3.3.2. Secret chats Secret chats use end-to-end encryption. This means that all the data in them is encrypted using a key that only you and your interlocutor have. No one, including us, can find out the content of correspondence in such chats without direct access to your device. We do not store secret chats on our servers. We also do not keep a record of sending messages in secret chats, and after a short period of time, we do not have any information about who and when you sent messages in such chats. For the same reason, secret chats are not available in cloud storage — messages in them can only be viewed on the device from which or to which they were sent. 3.3.3. Media files in secret chats When you send photos, videos, and other files in a secret chat, each of these files is encrypted with a separate key unknown to the server before uploading. This key and file location are then encrypted again, this time with the secret chat key, and sent to the recipient. The recipient can download and decrypt the file. So, technically, the file is located on one of the event.agency servers, but to everyone but you and your interlocutor, it looks like a meaningless set of characters that cannot be deciphered. We don't know what is hidden behind these random characters, nor what kind of chat they relate to. From time to time, we clear the servers of this data to free up space. 3.3.4. Public chats and placement In addition to placements and messages, event. agency supports public channels and groups. All public chats are cloud chats (see point 3.3.1). The information that you publish in the public pages of the catalog is encrypted — like all data in event. agency- both during storage and transmission, but your public placement and messages are available to all users. 3.4. Postal email address and contact list In event.agency, email plays the role of a unique identifier. You can use mail names to restore your placement in the event.agency directory. We store up-to-date information about your contacts so that we can inform you when any of them have communicated or placed orders through event.agency, and correctly display names and emails in notifications. To do this, we need Telegram will be able to confirm your login details with a phone call instead of asking you to enter a code. Access to the call log is used only so that Telegram can record the receipt of a confirmation call to log in to your account. 3.5. Location data If you share your geo position on the catalog map, your location data is processed in the same way as other placements in the catalog and chats, respectively. If you simply enter the location address and don't specify the location point on the map, your location will not be visible to other users. 3.6. Cookiescookie We only use cookiesthat are necessary for us to operate and provide Services over the Internet. We do not use cookies to create a user profile or display ads based on your preferences. The cookieswe use are small text files that allow us to provide and personalize Services, thereby improving your user experience. Internet browsers usually allow you to manage the settings of cookies, including the ability to accept or reject their use, as well as delete them. You can block cookies in your browser, but in this case you will not be able to log in to event. agency. 4. Security of personal data 4.1. Data storage

If you have registered with event. agency from Europe, your data is stored in data centers in the Netherlands, USA, Russia, China, India. These data centers are owned by third-party organizations, and event. agency rents dedicated space in them. Servers for storing email addresses are protected and can be located in different countries of the world. At event.agencythe same time, servers and networks containing your personal data hosted on event.agency servers and data centers are the property of event.agency. We do not share your personal data with data centers. All data is securely encrypted, and neither the local event.agency technical staffnor intruders (for example, if they break into a data center) can access it. 4.2. Data protected by end-to-end encryption Your placements, messages, multimedia and other files (see point 3.3.2 above), as well as the content of correspondence and data that you store in event.agency, are processed only on your device and the other person's device. All this data is already encrypted on our servers, and only you and the other person have the key to decrypt it. Although event.agency servers perform the necessary actions with end — to — end encryption to transmit data to the recipient-or, in the case of event.agency, to store it-we do not have the technical ability to decrypt it. In this way, we do not store and process your personal data as such, but random sequences of characters that make no sense without encryption keys — which we do not have. 4.3. Data retention period Unless otherwise stated in this Privacy Policy, the personal data you provide is only stored for as long as it is necessary for us to fulfill our obligations to provide the Services. 5. Processing of personal data 5.1. Our Services event. agency is a service on the Internet. We process your data to provide you with access to event.agency pages, including your message history, media, and files, on any device of your choice, without having to resort to third-party backup services or cloud storage services for up to 30 days (for communication and file sharing). 5.2. Safety and Security Event.agency has many professional placements that we need to protect from abuse and violations of the User Agreement. In order to better protect your account, as well as to prevent spam, abuse and other violations of the User Agreement, we may collect metadata: for example, your IP address, information about the devices and applications of event.agencythat you used, the history of user name changes, and similar information. Such metadata, if collected, is stored for a maximum of 12 months. 5.3. Spam and abuse In order to combat fraud (phishing), spam, and other types of abuse and violations of the event.agency User Agreement, our moderators can check messages that receive complaints from recipients. If, after checking, the moderators confirm that your message is spam, your account may be restricted-temporarily or indefinitely. During the period of restrictions, you will not be able to contact users who are not in your contact list. You can challenge the moderators ' decision via support@event.agency. In case of more serious violations, your account may be completely blocked. In order to combat spam and phishing, we can also use automated algorithms to analyze messages in the service, including the use of artificial intelligence. 5.4. Working on multiple devices simultaneously We may also store some summary metadata for creating event.agency functions (see point 5.5 below) that are available simultaneously on all your devices. 5.5. Advanced Features We can create new useful features using some summary data about how you use the event.agency directory. 5.6. No advertising based on correspondence data Unlike other Internet services, we do not use your correspondence data to display ads based on your preferences or for other commercial purposes. event. agency stores only the data it needs to function correctly as a reliable and functional cloud service. event. agency offers advertisers a platform for placing advertising messages and banners on the main pages, but the content of such blocks depends only on the topic of the channels. No data from your correspondence is collected or analyzed for displaying ads or advertising messages. The functionality of the advertising platform does not apply to users with an event.agency Premium subscription. 5.6.1. Enhanced advertising opportunities in some countries The data used to display certain ads is never shared with third parties (including advertisers). The functionality of the advertising platform does not apply to users with a Telegram Premium subscription, and the data specified in this clause is not processed for them.

The advertiser can send us an anonymized list of encrypted identifiers based on email addresses or phone numbers (but not containing the phone numbers themselves) in order to determine the range of users who will be served certain ads in large channels. This does not allow any third parties, including advertisers, to find out your phone number or ID in event. agency. Advertisers can use pixel tags on their websites to analyze ad performance. A pixel tag is a small piece of code embedded in an advertiser's digital product (for example, a website) that allows you to more efficiently collect and process statistics about actions performed on the advertiser's website: page views, clicks, purchases, registrations, and other interactions recorded using this code. In particular, advertisers can use pixel tags to determine that a link placed in the advertising material on our platform was used to navigate to a web page. All data collected using pixel tags is processed in an impersonal and aggregated form and does not allow identifying specific users. Pixel tags do not allow you to collect and process statistics about actions in event. agency. 6. Interaction with bots 6.1. Ecosystem event. agency provides access to an API that developers can use to create their own bots. Bots are programs that can be integrated directly into the event.agency interface: You can correspond with them by selecting them in the chat list, add them to groups, or use the special built-in interface to access their functions directly from the input field in your chats ("eventbot"). To perform any of these actions, you must send some of your data to third-party developers of the corresponding bot. 6.2. Ways for bots to get data Bot developers can get your data when you interact with bots, such as: * send messages to the bot. * you are using an eventbot. • you are a member of the group that the bot was added to. * click on buttons in messages sent by the bot. * pay for goods and services using the bot (see point 7 below). 6.3. Data that bots can collect In any of the cases listed in the previous paragraph, the developers of the automated user (bot) can get public information about your account (see point 3.1 above): your chosen name, username, and profile photos. Bots can also collect the following data when you interact with them: * Bots, of course, receive the messages you send them. • If you follow links or click on buttons in the bot's messages, it can find out your IP address (provided that the bot is directly connected to the site to which the link leads). • If you are a member of the same group as the bot, it may know that you are a member. • When you start a message with a username that belongs to the eventbot (for example, @gif), the interface changes, and everything you type in the input line becomes a request to this bot. This request is sent to the bot so that it can perform its function. We will warn you about this when you use the eventbot for the first time. * Bots added to a group can work in two modes:: with or without access to messages in it. Bots with access to messages can see everything that happens in the group. The list of group members indicates whether the bot has access to messages in the group. 6.4. Third-party bots are independent of event. agency There are bots whose terms of use are set by the event.agency administration. No other bots or their developers are associated with event. agency. They are completely independent of us. They must ask you for permission before accessing any of your data or data from you. 7. Third-party payment services 7.1. Payment data Starting with the latest version of event. agency 8.0, a platform for accepting payments via bots is available to users. event. agency does not process payments made by users: this function is performed by various payment systems around the world. These payment systems process and store your bank card data themselves. Neither event.agencynor sellers of goods and services (bot developers) have access to this data. Despite the fact that we use the services of payment systems, they are completely

independent of event. agency. We recommend that you read the privacy policies of such payment systems before transferring your data to them. 7.2. Bank card details When making a purchase, you enter your bank card details in the interface of the payment system that processes the payment. Then this information is sent directly to the payment system's server. Your bank card data is never sent to the event.agency servers, we do not have access to it, and we do not store it for ourselves. If you save your bank card details, they will be stored on the servers of the corresponding payment system, and the system, in turn, will provide event. agency with a token (electronic key), which you can then use for new payments. You can't use this token to restore your bank card details. 7.3 Delivery Details When you place an order and enter the information required for delivery, we send it directly to the developer of the bot-seller or service owner. You can save this information in event. agencyif you don't want to re-enter it for future purchases. An easy way to delete this information is available in the app interface. 7.4. Deleting Payment Data You can delete all payment data associated with your account at any time. To do this, in the Telegram app, just go to Settings > and select the "Delete payment data" option. If you decide to clear your payment details, we will delete all the information we store that is necessary for the delivery of goods. 7.5. Contesting payments event. agency does not store bank card data and transaction information, so we cannot consider claims or requests for a refund of funds paid. All disputes about payments are the responsibility of the bot developers, payment systems, and banks involved in the transaction. 8. Persons to whom your personal data may be transferred 8.1. Other event.agency users Other event.agency users are defined as users with whom you communicate and share certain information at will. Please note that by accepting the User Agreement and communicating with other users of event. agency, you instruct us to transfer your personal data to such users on your behalf in accordance with this Privacy Policy. We take all appropriate technical and organizational measures (including encryption of personal data) to ensure that the level of data security is adequate to meet the possible risks. 8.2. event. agency group companies In order to provide, improve and support our Services, we may share your personal data with: (1) our parent company map.event.agency, registered in Europe, and (2) event.agency, an EVENT AGENCY group company registered in Dubai. We take appropriate measures to ensure the security and security of this personal data by applying standard contractual terms (Standard Contract) approved by the European Commission, in agreements with other companies of the event.agencygroup. 8.3. Law enforcement agencies If event. agency receives an official request from the competent judicial authorities that confirms that you are a suspect in a criminal case for illegal actions that violate the event.agency User Agreement, we will conduct a legal analysis of the request and may provide your IP address and phone number to the relevant authorities. If any data is provided, we will reflect this in a report that will be provided to the judicial authorities every three months. 8.4. Translation of site pages and chats, channels, and individual messages at the user's request Users can independently translate individual text messages into another language, or by selecting automatic translation in the browser. To enable automatic translation of messages at the user's request, event. agency may use the services of a third party, Google LLC, a subsidiary of Alphabet Inc., so the text of the original messages can be transmitted to Google for translation. Google only accesses the source message data for translation purposes and may not use this data for other of its products and services or for advertising purposes. 9. Your rights with respect to the personal data provided 9.1. Your rights Please do inform us promptly of any changes to or inaccuracies of to your personal data by contacting <url>. You have the right to: (1) request a copy of all your personal data (this is your email address) stored in event. agencyand transfer this copy to another service; (2) delete (see paragraph 10 below) or change your personal data; (3) restrict or object to the processing of your personal data; (4) correct any inaccurate or incomplete personal data stored in event. agency

9.2. Exercise of your rights If you want to exercise any of these rights, you can find the necessary information in point 12 below. 9.3. Data Management You can manage the use of your data (for example, delete synced favorite contacts and files including text descriptions) in Settings > Delete Account (all data and the entire account will be permanently deleted). You will not be able to challenge the fact of deletion. If you are not ready to provide event.agency with the minimum necessary data for the application to work, unfortunately, we will not be able to provide you with Services. In this case, you can delete your account on the page in your merchant profile. 10. Deleting data 10.1. Accounts You can delete your event.agency account on the page in your merchant profile. When you delete your account, all your messages, mediafiles, contacts, and any other data in event. agency will also be deleted. You must confirm deleting the account. After that, you will not be able to restore the account and place it in the folder. 10.2. Messages * Starting with event. agency 8.0, any participant in a personal chat can delete any messages — sent or received-both from themselves and from the interlocutor, for up to 30 days. Any participant in a private chat can also completely clear the chat history of both participants, which will delete all messages in this chat, regardless of how many messages each participant has stored. 10.3. Deleting messages All correspondence and communication files will be deleted after 30 days of storage. Event.agency is not responsible for deleting files and correspondence between any of the parties. 10.4. Automatic deletion of placement in the catalog and account By default, if you do not log in to your account and do not use event.agency for at least 12 months, your profile is deleted along with all data, mediafiles, contacts, and other hosted data that you store in the event.agency service. You can't change the period after which an inactive account is automatically deleted. 11. Changes to the Privacy Policy We reserve the right to review this Privacy Policy and make changes to it as necessary. Any changes to this Privacy Policy will take effect as soon as the new version is published on this page at https://event.agency/en/docs/policy Please check the page from time to time to keep up to date with changes to the Privacy Policy. 24 December 24, 2025 The privacy policy for users has been updated.

12. Additional information You can read the answers to frequently asked questions in the Questions about event.agency section. You can also contact event.agency support. Currently, the event.agency catalog is running in test mode, where technical failures may occur during the update. We care about your reputation and will improve the catalog service for YOU. We apologize in advance for any inconvenience caused. Thank you for trusting the event. agency service