EVENT WHEEL / PRIVACY

Privacy Policy

Effective date: October 31, 2026

Event Wheel helps trade-show exhibitors run digital prize wheels, capture leads, verify draws, redeem prizes, and manage contacts and follow-up. This policy explains how information is handled when you use the site, app, API, or MCP access. It covers both account information and visitor details collected through an organizer’s wheel. Our Terms of Service describe the rules for using the service.

1. Account and sign-in information

You can create an account using an email address and password, a magic link, or Google or Microsoft sign-in where offered. When you use one of these providers, we receive your name, email address, and profile picture URL from that provider. We use account information to provide sign-in and access to your workspace.

Account confirmation and password reset messages are transactional emails used to help you access your account. The platform does not send marketing email. UTM campaign tags, when present, are stored with signup metadata to record the campaign associated with signup.

2. Visitor details and organizer responsibilities

Organizers are Event Wheel’s customers. They decide which visitor or lead details their wheels collect and how those details are used. This may include a visitor’s name, email address, company, and notes. Event Wheel processes this information on the organizer’s behalf so the organizer can capture leads, manage contacts, and handle follow-up.

The organizer is responsible for having a lawful basis or obtaining consent for collection and use, and for fulfilling prizes. If you entered a wheel and have questions about the form, follow-up, or a prize, contact the organizer. Their decisions about using your details are separate from Event Wheel’s handling of account information. You can also contact us with questions about how Event Wheel processes information.

3. Payments and subscription records

PayPal bills Event Wheel Pro as a recurring subscription at $15 per month or $120 per year. We never see or store payment card numbers. We store the PayPal subscription ID, subscription status, and paid-through date to manage subscription access.

Cancellation keeps access available until the end of the paid period. Expired or suspended accounts cannot run new spins, but existing data stays available to members. Billing and refund questions can be sent to billing@event-wheel.com; refunds are handled case by case.

4. Infrastructure and service providers

Event Wheel uses Supabase for authentication and its database. These are hosted in the United States, in the us-west-2 region. Vercel hosts the app. Cloudflare provides DNS and transactional email, including account confirmation and password reset messages. PayPal handles subscription payments.

Other providers may process information outside the Supabase hosting region. When you choose a sign-in provider or make a payment, you also interact with that provider.

5. Draws and public verification

Each spin uses a server commitment and a browser seed with HMAC-SHA256. The resulting fairness receipts are publicly verifiable. Public result pages never show contact details or prize redemption codes. This keeps the public verification of a draw separate from the visitor details and redemption information used by the organizer.

Organizers set the configured odds, which may be unequal. A verifiable receipt allows a draw to be checked; it does not mean that every prize has the same chance of being selected.

6. Browser storage and caching

Event Wheel uses browser local storage for the sign-in session and saved fairness receipts. A service worker caches the app shell. These browser features support account access, saved receipts, and loading the app; live spins still require an internet connection.

There are no third-party advertising trackers. Signup metadata can include UTM campaign tags as described above.

Vercel Web Analytics and Speed Insights collect anonymous, cookie-free page-view and performance data with tokens and codes redacted from URLs. Bot-detection signals are checked on spin requests to stop automated entries.

7. API access and audit logs

Event Wheel supports API and MCP access for working with the service. API tokens are stored only as SHA-256 hashes. Audit logs record actions, not payloads.

8. Retention and deletion requests

You can ask us to delete your account and workspace data by emailing support@event-wheel.com. Please explain which account or workspace your request concerns so we can understand its scope. Subscription expiry or suspension does not itself remove existing data: that data stays available to members.

Demo receipts are deleted after seven days. Expired pending draws are cleaned up daily. For questions about retention or an account and workspace deletion request, contact support.

9. Contact

For privacy questions or deletion requests, email support@event-wheel.com. For subscription, payment, or refund questions, email billing@event-wheel.com.