Privacy Policy
MyEventFlow
By iRoxanne Studios, LLC, a North Carolina limited liability company
Effective Date: October 17, 2026
1. Agreement
This Privacy Policy is entered into between you and iRoxanne Studios, LLC, a North Carolina limited liability company ("Company," "we," "us," or "our").
iRoxanne Studios, LLC owns and operates various digital applications and platforms, including, without limitation, Bonded, NestFlow, Booked! Now What?, MyEventFlow, and MyBizzFlow (collectively, the "Services").
This Privacy Policy applies specifically to your access to and use of the MyEventFlow application, including through www.myeventflow.co and any related subdomains or associated mobile or web applications (the "Service").
Unless otherwise stated, references to the "Service" in this Privacy Policy refer to MyEventFlow. References to the "Services" refer collectively to all applications owned and operated by the Company.
2. Geographic Scope
The Service is intended solely for users located within the United States.
We do not intentionally market or direct the Service to individuals located outside the United States.
By using the Service, you represent that you are located in the United States at the time of account creation.
Temporary access while traveling internationally does not change the intended U.S.-only scope of the Service.
Service providers process information as needed to operate their services, subject to their applicable privacy and security terms.
3. Categories of Information We Collect
We collect information necessary to operate the Service.
Identifiers
- Name
- Email address
- Account credentials
Account and Profile Information
- User role
- Event preferences and settings
User-Generated Content
- Event details (titles, themes, notes, dates)
- Guest lists and RSVP information
- Task lists and checklists
- Shopping lists
- Budget and expense records
- Vendor information
Collaboration Data
- Collaborator email addresses
- Assigned roles and invitation status
- Inviter email address
Event Inputs
- Vendor references
- Event planning details
Technical Information
- Session cookies for authentication
- Local storage for user preferences and session state
- Device and browser type
- First-party analytics events
We do not use third-party advertising trackers.
We do not use cross-context behavioral advertising.
Location Information
We do not store your precise location.
If you tap "Use my location," your device asks for permission and shares its current location once. We send those coordinates to OpenStreetMap only to look up a street address, which fills in the address fields. The coordinates are not saved.
The Service allows users to enter location information (for example, venue name, street address, city, state and ZIP code) to describe event locations. This is stored as part of the event.
4. How We Use Personal Information
We use personal information to:
Provide and maintain the Service.
Enable AI-powered functionality.
Deliver notifications and collaboration invitations.
Improve system performance and security.
Provide customer support.
Prevent fraud and abuse.
Comply with legal obligations.
We do not sell personal information.
5. Artificial Intelligence Processing
Certain features use artificial intelligence technologies provided by OpenAI.
When AI-enabled features are used:
User-submitted event content (titles, themes, locations, guest counts, existing tasks, budgets, and vendor information) may be transmitted to OpenAI for processing.
OpenAI retains submitted content pursuant to its standard API retention policies (which may change over time).
AI-generated outputs are stored within user accounts for functionality.
AI-generated content may be inaccurate or incomplete.
We do not use user content to independently train proprietary AI systems.
6. Data Sharing
We share personal information only with service providers necessary to operate the Service, including:
OpenAI (AI processing).
Base44 (application hosting, authentication, data storage and integrated services).
Stripe (checkout, subscription management, payment processing and billing records).
Google, when you connect Google Calendar and publish event details to your calendar.
Event collaborators you authorize and invitation recipients you select.
Email delivery services (collaboration invitations and notifications).
We may also disclose personal information:
If required by law.
In response to subpoenas, court orders, or governmental requests.
To protect rights, property, or safety.
In connection with a merger, acquisition, or asset sale.
We do not sell or rent personal information.
7. Optional Google Calendar Connection
Connecting Google Calendar is optional. The connection is used to publish your MyEventFlow event title, date, time, location and notes to your connected calendar and to update linked events.
MyEventFlow does not import your personal Google Calendar events into the app through this connection.
Base44 manages the connection credentials, and MyEventFlow stores the identifier of linked calendar events.
You can revoke access in your Google Account permissions. Disconnecting does not automatically remove copies already created in Google Calendar. You can remove those copies in Google Calendar.
Google data is used to provide the calendar feature and is not used for advertising.
8. Payments and Billing Information
Stripe processes payment details. MyEventFlow stores account and subscription identifiers, plan and subscription status, and related billing dates needed to manage access and support.
We do not store full payment-card numbers in MyEventFlow. Billing records may be retained for accounting, fraud prevention and legal obligations.
9. Data Retention
We retain personal information while accounts remain active.
Upon account deletion:
Account records are removed from active systems.
Shared content may remain accessible to authorized collaborators.
Backup systems may retain residual copies for a limited period.
10. Security Measures
We implement reasonable safeguards, including:
HTTPS encryption.
Encrypted storage at rest.
Role-based access control.
Secure authentication procedures.
Access controls for event owners and their authorized collaborators.
No system is completely secure.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have rights to:
Request disclosure of personal information categories collected.
Access personal information.
Request deletion (subject to exceptions).
Request correction of inaccurate information.
Be free from discrimination for exercising rights.
We do not sell personal information.
Requests may be submitted to: info@iroxannestudio.com
We will respond within 45 days of a verified request.
We do not share personal information for cross-context behavioral advertising.
We do not use third-party advertising trackers.
12. Children's Privacy
The Service is not directed to individuals under eighteen (18) years of age.
We do not knowingly collect personal information directly from minors.
13. Third-Party Links and Vendors
The Service may reference or link to third-party vendors (for example, event vendors).
We are not responsible for the privacy practices of third parties.
Users should review third-party privacy policies before engaging with external services.
14. Data Breach Notification
In the event of a confirmed data breach involving personal information, we will:
Investigate promptly.
Take reasonable mitigation measures.
Notify affected users without unreasonable delay as required by U.S. law.
Notify regulatory authorities where legally required.
15. Changes to This Policy
We may update this Privacy Policy periodically.
Material changes will be posted with an updated effective date.
Continued use of the Service constitutes acceptance of revised terms.
16. Contact
For questions regarding this Privacy Policy or to exercise your privacy rights, please contact: info@iroxannestudio.com
Mailing address:
10612 Providence Rd STE D - PMB 747
Charlotte, NC 28277