Privacy Policy

Effective date: 17 September 2026

EventsFM (“we”, “us”) is an event-discovery service. You can use it through messaging apps such as WhatsApp and Telegram, from AI apps such as Claude or ChatGPT that you connect to EventsFM, and through your EventsFM account on the web. This policy explains what data we process when you use the service, why, and what rights you have.

Data controller: EventsFM, operated by Maksim Terekhin, Netherlands. Contact: [email protected]

What we collect

When you message the EventsFM bot, we process:

• Your messaging identity: on WhatsApp, your phone number and the profile name you set in WhatsApp; on Telegram, your Telegram user ID, username, and display name.
• Your messages to the bot: the text you send, including search queries, button taps, and reactions.

When you use EventsFM from an AI app, we process:

• The requests the app sends us: the searches it runs for you (what you are looking for, where and when) and, if you have signed in, the account details it asks for. We receive only what the app sends, not your conversation with it.
• The apps you connect: each app's name as the app gives it, what you allowed it to do, and when you connected it and it last used your account.

When you sign in on the web (at account.eventsfm.com), we process:

• Your sign-in: if you sign in with Telegram, the Telegram user ID, name, and username Telegram shares with us; if you sign in with a code from the bot, the code (stored only in a form that cannot be read back).
• Cookies: see Cookies below.

In all cases, we also process:

• Service data we derive: your subscriptions, saved preferences (such as your city, language, or notification settings), and interaction history with events (for example which events you viewed or reacted to).
• Technical data: timestamps, processing metadata, and logs needed to operate and debug the service, and your IP address, which we count for up to half an hour to limit how many requests one address can make.

We do not collect your contacts, your location in the background, or any messages you exchange with anyone other than the EventsFM bot.

How we use it

• To provide the service: answering your queries, showing events, managing your subscriptions and connected apps, signing you in, and sending you event notifications you asked for.
• To understand your requests: your messages to the bot and your searches are processed with the help of third-party AI providers (currently OpenAI) to interpret what you're looking for and to find matching events. These providers process the content to generate a response and are contractually restricted from using it to train their models.
• To keep the service secure: limiting request rates, protecting sign-in against guessing and forged requests, and detecting misuse of connected apps.
• To operate and improve the service: aggregate, non-identifying usage metrics help us understand how the service performs.

We do not sell your data, use it for advertising, or share it with third parties beyond the processors listed below.

AI apps you connect

When you add EventsFM to an AI app, your conversation happens in that app and is handled by its provider (for example Anthropic or OpenAI) under that provider's terms and privacy policy, not this one. EventsFM receives only the requests the app makes to us.

An app can use your EventsFM account only after you sign in and allow it, and only for what you allowed. You can see every connected app, and disconnect any of them, on your account page. A disconnected app cannot renew its access, and the short-lived access it already holds expires within an hour.

Cookies

The account site (account.eventsfm.com) sets only cookies that are strictly necessary for signing in:

• __Host-eventsfm_session keeps you signed in, for up to an hour.
• __Host-eventsfm_login ties a Telegram sign-in to the browser that started it, so another site cannot sign you in to someone else's account.

If you sign in with Telegram, the sign-in button is loaded from Telegram (telegram.org), which may set its own cookies under its privacy policy.

We use no analytics, advertising, or tracking cookies, on the account site or on eventsfm.com.

Legal bases (GDPR)

We process your data to perform the service you request (Art. 6(1)(b) GDPR) and, for service operation, security, and improvement, on the basis of our legitimate interest in running a reliable and secure service (Art. 6(1)(f) GDPR).

Who processes your data

• Meta Platforms (WhatsApp Business Platform) and Telegram deliver your messages to us and our replies to you, and Telegram confirms your sign-in if you sign in with Telegram, under their own terms and privacy policies.
• Hosting: our servers and database run on Hetzner infrastructure in the European Union.
• Cloudflare serves eventsfm.com and passes web and AI-app traffic to our servers, so it processes your IP address and the requests you make.
• Search index: event data and your search queries are processed by Weaviate Cloud, hosted on Google Cloud in the European Union.
• AI providers: message content and search queries are processed by OpenAI (United States) to interpret requests and match events, under data-processing terms with appropriate safeguards for international transfers.

Retention

We keep your account data, subscriptions, connected apps, and conversation history while your account is active. Sign-in data is short-lived: a web session lasts up to an hour, a sign-in code ten minutes, and a connected app's access ends after 30 days without use, or within an hour of you disconnecting it. Request counts used for rate limiting are kept for up to half an hour.

If you delete your account (see below), your data is removed from our production systems without undue delay; residual copies in backups expire on the backup rotation schedule.

Data deletion

You can delete your account and data at any time:

• In the bot: open Settings and choose Delete account, in Telegram or WhatsApp.
• On the web: sign in at account.eventsfm.com and choose Delete account.
• By email: write to [email protected] from any address, mentioning the phone number or Telegram username you used with the service.

Deletion removes your account, identifiers, preferences, subscriptions, connected apps, and conversation history from our systems, and every app you connected loses access to your account. Note that WhatsApp, Telegram, and the providers of AI apps keep their own copies of your conversations under their respective policies; deleting your EventsFM data does not delete those.

Your rights

Under the GDPR you have the right to access, rectify, erase, and receive a portable copy of your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority: in the Netherlands, the Autoriteit Persoonsgegevens.

You can see and change your settings, see and disconnect connected apps, and delete your account yourself on your account page. To exercise any other right, contact [email protected].

Children

EventsFM is not directed at children under 16, and we do not knowingly process their data. WhatsApp, Telegram, and AI apps apply their own minimum-age requirements.

Changes to this policy

If we change this policy, we will update this page and the effective date above. Material changes will be announced through the bot.