Privacy Policy

This Privacy Policy explains what information EventYield ("we," "us," "EventYield") collects from users of our website, mobile application, and connected services (collectively, the "Service"), how we use it, and what choices you have. By using the Service, you agree to this Policy.

If you do not agree with this Policy, do not use the Service.

1. Who We Are

EventYield is operated by The Soda Well LLC, a Georgia limited liability company. You can reach us at support@eventyield.live.

EventYield is a software-as-a-service product that helps mobile vendors (food trucks, beverage carts, mobile retailers, and similar small businesses) understand the financial performance of the events they work, plan future bookings, and grow their businesses.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use the Service, you may provide:

• Account information: name, email address, phone number, business name, business category, city, and state of operation
• Onboarding benchmarks: estimates of your average ticket size, transactions per hour, typical event duration, and target event types
• Payment information: collected and processed by our payment processor, Stripe. We do not store full credit card numbers on our systems.
• Item and cost data: menu items, prices, unit costs, and related catalog information you choose to enter
• Event information: events you book, attend, or are considering, including titles, dates, locations, organizers, fees, and notes
• Reviews and ratings (where applicable): when you choose to rate or review an event organizer or venue you have worked

2.2 Information We Collect Automatically

When you use the Service, we automatically collect:

• Usage data: pages or screens you view, features you interact with, time spent in different parts of the app
• Device information: device type, operating system, app version, IP address, approximate geographic location
• Diagnostic data: error logs and performance metrics

2.3 Information We Receive From Third Parties (With Your Authorization)

When you connect a third-party service to EventYield, we receive data from those services on your behalf. The specific data depends on the service:

• Square: transaction records, item-level sales, processing fees, tips, discounts, refunds, location identifiers, and customer information attached to transactions. We do not receive full payment card numbers.
• Clover (when supported): equivalent transaction and item-level data
• Google Calendar: event titles, dates, times, locations, descriptions, and attendee information for events on calendars you authorize
• Outlook / Microsoft Calendar: equivalent calendar event data

You authorize each connection through OAuth and may revoke access at any time.

3. How We Use Information

We use information to:

1. Provide and operate the Service: match transactions to events, generate revenue forecasts, compute profit projections, surface event opportunities, send notifications, and otherwise deliver the features you've signed up for
2. Improve the Service: analyze how features are used, identify bugs, and develop new features
3. Communicate with you: send service updates, security alerts, support replies, billing notices, and (with your permission) marketing communications you can unsubscribe from
4. Comply with legal obligations: respond to lawful requests, enforce our Terms of Service, prevent fraud, and protect the rights and safety of our users and the public
5. Power anonymized aggregate analytics (see Section 4 below)

We do not sell your personal information or share it with advertisers for cross-context behavioral advertising.

4. Anonymized Aggregate Data (The "Network Effect")

EventYield's value to mobile vendors increases as more vendors use the Service, because your event-performance data — once anonymized — helps every other vendor make better decisions about where to book, what to charge, and what to expect.

4.1 What Aggregates Contain

We compute statistical summaries across many vendors. These summaries:

• Always combine data from at least five (5) consenting vendors before being stored (a privacy practice known as k-anonymity)
• Include statistics like median revenue, revenue percentiles, median revenue-per-hour, and median margin percentage, grouped by region, business category, and event type
• Do not include any vendor name, business name, email, individual transaction, individual event, or any other identifier that could be linked back to a specific vendor or business

4.2 How Aggregates Are Used

Aggregates are used solely to provide cold-start projections to vendors who have not yet accumulated enough of their own history, surface comparable events, and improve the accuracy of forecast models for all users. Aggregates are never sold, licensed to third parties, or used for advertising purposes.

4.3 Your Choice

You may opt out of contributing to aggregates at any time in your account settings. Opting out removes your data from future aggregate computations and does not affect your ability to use the Service.

5. How We Share Information

We share personal information only as follows:

• Service providers: with vendors who help us operate the Service (Supabase for database hosting, Railway for application hosting, Stripe for payments, Resend for email delivery). These providers may only use your information to perform services for us and are bound by confidentiality obligations.
• Third-party integrations you authorize: when you connect Square, Clover, Google Calendar, or Outlook, we exchange data with those services on your behalf only.
• Legal requirements: when required to comply with a subpoena, court order, or other legal process, or to protect the rights, property, or safety of EventYield, our users, or others.
• Business transfers: if EventYield is acquired, merged, or sold, your information may be transferred as part of that transaction.

We do not share personal information with advertisers, data brokers, or for any commercial purpose other than as described above.

6. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS encryption in transit, encryption at rest for sensitive fields (OAuth tokens are stored encrypted), row-level security policies on our database, audit logging of administrative actions, and regular security review.

No system is 100% secure. If a security breach affecting your information occurs, we will notify you and applicable regulators as required by law.

7. Data Retention and Deletion

We retain your information for as long as your account is active. You can delete your account from within the app or by contacting support@eventyield.live. When you delete your account, we delete your personal data within 24 hours of the deletion request being processed, retaining only a minimal deletion log for fraud prevention. If you cancel your subscription without deleting your account, your data is retained for 30 days to allow you to resubscribe.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, and to opt out of marketing or aggregate contributions. To exercise these rights, contact support@eventyield.live. We will respond within 30 days. California residents have additional rights under the CCPA/CPRA; EventYield does not "sell" personal information as defined by the CCPA.

9. Children's Privacy

The Service is intended for users 18 years or older. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact support@eventyield.live and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Service at least 30 days before the changes take effect.

11. Contact Us

If you have questions, concerns, or requests regarding this Policy or your data, contact us:

EventYield (The Soda Well LLC)

Email: support@eventyield.live