Ewents Privacy Notice

This Notice applies to:

• Website Visitors. Anyone who visits or interacts with ewents.io.
• Job Applicants and Candidates. Anyone who applies for a role with Ewents, or whose personal data Ewents receives in connection with a possible role, whether or not that person is ultimately hired or engaged.
• Prospective Clients. Anyone who contacts Ewents, requests a quote, or otherwise expresses interest in Ewents' services, before a services agreement is in place.
• Ewents LinkedIn Extension Users and Outreach Contacts. Anyone who uses Ewents LinkedIn or Ewents LinkedIn (Dev), and people whose LinkedIn profile information is processed through the outreach features described in Section 19.

For current clients, the services agreement and related data processing terms govern processing in connection with the client engagement. This does not exclude extension users or outreach contacts from this Notice: Section 19 applies to the Ewents LinkedIn extension regardless of whether its user is a current client.

Ewents is the trading name of TechWents, LLC, a Delaware limited liability company, whose location is at 1111B S Governors Ave STE 20104, Dover, DE 19904, United States. For the purposes of the data protection laws described in this Notice, TechWents, LLC is the controller of the personal data this Notice describes.

Ewents' Data Protection Lead is its internal point of contact for privacy matters, and can be reached using the details in this Notice's Contact Us section.

The table below lists the categories of personal data Ewents collects about each group of individuals this Notice covers and examples of each category. See this Notice's Sources of Personal Data section for where that data comes from.

Ewents collects personal data through several different channels, including:

• The Site. When you fill out a contact form or otherwise interact with ewents.io.
• Email. When you write to Ewents directly.
• Ewents' social media accounts. Such as LinkedIn, including where you apply to or ask about a job opening Ewents has published there.
• Publicly Available Information. Such as your professional networking profile, a personal or company website, published articles, or other information about you that is publicly available on the internet, most often when Ewents is identifying and evaluating a potential candidate for a role or researching a prospective client's organization.
• Third-Party References. Where you are referred to Ewents by someone else, such as a colleague, contact, or another organization.

Ewents also collects personal data automatically, through your use of the Site, as described in this Notice's Personal Data We Collect section. Regardless of the channel, the categories of personal data Ewents collects about you are the ones described in this Notice's Personal Data We Collect section.

Ewents uses the personal data described in this Notice for the purposes below, and does not use it for any purpose incompatible with those purposes without informing you and, where required, obtaining your consent.

The table below sets out the legal basis for each purpose, and explains it in plain terms.

Required cookies help the Site function, remember your preferences, and keep it secure. Additional cookies and similar technologies support analytics and marketing and are loaded only after you accept them. Accept all enables both analytics and marketing; Reject all disables both. You can use the Site and submit forms without accepting these additional technologies.

With your acceptance, Google Analytics and PostHog help us understand visits and interactions. Meta Pixel measures campaign visits and accepted enquiries. These services receive browsing and device information, such as IP addresses, browser identifiers, page and referring URLs, campaign parameters, and interaction events. Our analytics event bridge excludes form values and email addresses, and our Meta configuration does not send form values or advanced matching data.

Leadpipe helps us identify prospective business contacts. After you accept additional cookies, its own script collects browsing information and may collect an email address as you enter or leave an email field, even if you do not submit the form or the submission fails. This collection is separate from our analytics event bridge. Marketing providers receive information directly from your browser under their applicable service terms and privacy policies.

You can withdraw consent at any time by opening Cookie settings in the footer and choosing Reject all. The page reloads to stop the loaded tracking scripts. Withdrawal stops future collection through these scripts; it does not undo data already sent. You can also control cookies through your browser settings, including blocking or deleting them, though doing so may affect how the Site functions.

Ewents shares personal data with the categories of recipients below, including analytics and marketing providers when you accept additional cookies, as described in Section 6.

Each of these recipients may use your personal data only for the purpose Ewents has shared it for, and Ewents maintains an agreement with each of its service providers consistent with the organization's own third-party risk management program.

Ewents is based in the United States, and some of the service providers described in this Notice may process personal data outside your own country. As a general rule, Ewents relies on data processing agreements with its service providers to protect your personal data whenever it is transferred internationally.

Regardless of where you are located, Ewents' practice is the same: you have the right to:

• Access. Know what personal data Ewents has collected about you, and access it.
• Rectification. Request that Ewents correct inaccurate or incomplete personal data.
• Erasure. Request that Ewents delete your personal data, subject to certain exceptions.
• Restriction. Request that Ewents restrict how it processes your personal data.
• Portability. Receive the personal data you have provided to Ewents in a portable, commonly used format.
• Objection. Object to how Ewents processes your personal data, including its use for direct marketing.
• Withdrawal of Consent. Withdraw your consent at any time, where a processing activity relies on it.
• Non-Discrimination. Not be discriminated against for exercising any of these rights.

You may also designate an authorized agent to make a request on your behalf. You can exercise any of these rights using the contact details in this Notice's Contact Us section. Ewents responds to your request within the timeframe required by applicable law, and may need to verify your identity before completing it.

Ewents does not make any decision that produces legal or similarly significant effects concerning you through automated processing alone, without human involvement.

The Site and Ewents' services are not directed to, and are not intended for, individuals under the age of 18. If you are under 18, please do not submit personal data to Ewents. If Ewents learns that it has collected personal data from someone under 18 without appropriate consent, it will delete that data.

Ewents implements technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction, including encryption, access management controls, and two-factor authentication on its internal systems. No method of transmission or storage is completely secure, and Ewents cannot guarantee absolute security.

If a breach affecting your personal data creates a high risk to your rights, Ewents will notify you and, where required by applicable law, the relevant supervisory authority, without undue delay.

Ewents uses the following terms throughout this Notice:

• Personal data. Any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual.
• Processing. Anything done with personal data, including collecting, recording, storing, using, disclosing, or deleting it.
• Controller. The organization that decides why and how personal data is processed. Ewents is the controller of the personal data this Notice describes.
• Service provider or processor. A third party that processes personal data on Ewents' behalf and under its instructions, such as one of the categories of recipients described in this Notice's How We Share Your Personal Data section.
• Cookie. A small text file placed on your device by a website you visit, used to remember information about you or your visit.
• Consent. Your freely given, specific, informed, and unambiguous agreement to a particular processing activity, which you may withdraw at any time where a processing activity relies on it.

Ewents may update this Notice from time to time. If it makes a material change, Ewents will post the updated Notice on this page with a new Last Updated date, and, where required by law, notify you directly. Ewents reviews this Notice at least once a year.

If you have questions about this Notice or how Ewents handles your personal data, contact Ewents using the details below.

If you are not satisfied with Ewents' response to a privacy request, you have the right to lodge a complaint with the data protection authority in your country or region.

This section covers Ewents LinkedIn and Ewents LinkedIn (Dev). The extension helps authorized Ewents users prepare LinkedIn connection invitations and messages with an Ewents outreach link, manage message templates, and track outreach activity. The user reviews and sends each invitation or message in LinkedIn. Starting with version 2.0.11, the extension displays its data-use disclosure and requires your affirmative acceptance before enabling sign-in, API requests, device fingerprint collection or LinkedIn outreach features, including for existing signed-in users. The following disclosures supplement the rest of this Notice and govern the extension where a website-specific description would otherwise be different.

• Account and authentication data. We process the email address, password and verification code you submit, or the passkey authentication response you choose to use, to sign you in to Ewents. We also process the resulting session token, account ID, name, email address, avatar, date of birth if provided, product access permissions, and lead generator profile ID. Profile edits and avatar uploads are sent to Ewents to update your account. The extension does not request or collect your LinkedIn password.
• LinkedIn page and outreach data. When you use the outreach features, the extension reads the relevant LinkedIn page to identify the contact name, profile identifier and profile URL, and the invitation or message composer and its status. It sends the contact name and profile reference, your Ewents account and lead generator identifiers, outreach time, draft/sent/cancelled status, attribution identifier, unique outreach link identifier, and chosen destination page to Ewents. A draft activity record is created when an invitation or message is prepared, before you send it. These records support your activity history, counts, duplicate avoidance, and outreach reporting available to authorized Ewents staff.
• Message templates and outreach links. Your template library is stored in the extension on your device. Saving or selecting the active template also sends its text and destination choice to Ewents, where it is stored with your lead generator profile and can be viewed by authorized staff. The extension combines a template with contact details and an Ewents link to prepare your invitation or message. Text inserted into the LinkedIn composer is available to LinkedIn, and the recipient receives it when you send it. Opening an outreach link lets Ewents associate the visit with its outreach record and record the first visit time and visit count. Website browsing and cookie practices after opening that link are described elsewhere in this Notice.
• Device and security data. To bind sessions to a device and prevent unauthorized use, the extension sends browser and device signals with requests to the Ewents API: user agent, language, time zone, screen resolution, color depth, pixel ratio, platform, processor concurrency, device memory and touch capability, and hashes generated from canvas, WebGL and synthetic audio rendering. The audio signal is generated by the browser; it is not a microphone recording. The API also receives your IP address and country derived from the network. Ewents stores a derived device fingerprint hash and session metadata, including IP address, country, browser, platform, time zone, language, screen resolution, and session creation, expiry and activity times. This security processing is separate from optional website marketing cookies.
• Local preferences and activity. The extension stores preferences, its template library and destination, pause and pacing state, daily counters, up to the 400 most recent contacted profile identifiers with timestamps, and whether an account birthday reminder has been shown. Version 2.0.11 also stores the accepted disclosure version and acceptance time locally. Device signals are cached in extension storage and popup local storage. These local records support the extension features and are not a general browsing history. The extension does not read unrelated websites or your full LinkedIn inbox.

How we use and protect extension data. We use the data above to authenticate users, maintain and protect sessions, update profiles, prepare the invitations and messages users request, synchronize the active template, apply outreach pacing and duplicate checks, and provide activity and link-visit reporting. The purposes described in Section 5 and the rights in Section 10 also apply where relevant; we obtain consent where required, including the in-extension acceptance described above. Requests to the Ewents service use HTTPS and account access controls. The extension does not embed advertising or marketing analytics scripts, and does not send its account, profile, template or device data to the website marketing providers described in Section 6.

Storage and recipients. Extension API requests are handled by Ewents at api.ewents.io (or api-dev.ewents.io for the development version). Cloudflare provides API hosting, security infrastructure and avatar image storage; Supabase provides the underlying account, session and outreach database. Avatar images are served through public image URLs. Vercel hosts the Ewents website that opens outreach links. These providers process the data needed to operate their part of the service on our behalf. With your explicit acceptance of the in-extension disclosure, authorized Ewents personnel may read your account profile, active template and outreach records for administration, support and outreach reporting. Access may also occur when necessary for security or to comply with applicable law. LinkedIn processes the page interaction and invitation or message content under its own privacy policy; recipients receive the information you choose to send. Cloudflare Email sends account invitation and password-recovery emails, with Google Gmail/Google Workspace SMTP as a delivery fallback; these providers receive the recipient address and message content needed for delivery. Google Workspace also supports Ewents email correspondence when you contact us. The legal and regulatory disclosures in Section 7 also apply. Our use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension data is not sold or used for advertising, creditworthiness or lending decisions.

Retention and your controls. The session token and cached account profile use browser session storage unless you choose to stay signed in, in which case they use persistent extension storage. Signing out clears those cached authentication records; it does not erase templates, preferences, local outreach history, or device caches. Persistent local data remains until replaced or cleared, or until you remove the extension. The contacted-profile list is limited to its most recent 400 entries; other local preferences do not have a fixed automatic deletion period. In version 2.0.11, use the privacy and data-use control in the popup to withdraw acceptance: this removes the local acceptance record, blocks subsequent API and fingerprint collection, and pauses outreach features. Withdrawal does not erase existing local or server records. Server sessions expire or are revoked, and expired session records are cleaned up by the service. Account, active-template and outreach records are retained as needed to provide the service and its activity history and to meet applicable obligations; they are not automatically deleted when you sign out or uninstall the extension. Request access, correction or deletion, including deletion of server records, at privacy@ewents.io. We handle those requests as described in Section 10, including any applicable legal exceptions. Disabling or removing the extension stops future collection by it.