Privacy policy
What we collect, why, how long we keep it and who else sees it.
Last updated 3 September 2026.
Bonacube Oy
Saanakatu 20, 15840 Lahti, Finland
Business ID FI3119126-8
jesse@bonacube.com
What we collect
| Data | When | Why | Legal basis |
|---|---|---|---|
| Name, email | When you open a free test | To see who tests the tools and to answer you if you get in touch | Legitimate interest (Art. 6(1)(f)) — knowing who uses the free tests |
| Marketing consent | If you tick the box at the free test | To send you occasional email about the tools | Consent (Art. 6(1)(a)) |
| Campaign source, browser and device string | With the above | To see which ads and pages bring people who actually test | Legitimate interest (Art. 6(1)(f)) |
| Account email and your saved event data | If you buy a tool | To give you the licence and store your work | Contract (Art. 6(1)(b)) |
| Name, email, billing details | At checkout | To process the payment and issue the receipt | Contract and legal obligation (Art. 6(1)(b), 6(1)(c)) |
What the free test does not do
The free test runs the full tool on an example event. Nothing you type into it is saved anywhere, by us or by anyone else. Close the tab and it is gone. Nothing is installed on your machine.
What we do with your email
We use it to know who tested the tools and to reply if you write to us. If you ticked the consent box, we also use it to send occasional email about these tools. We do not sell it, rent it, or pass it to anyone for their own marketing. Every marketing email has an unsubscribe link, and you can also just reply and say stop.
Who processes data for us
- Supabase — database and accounts (hosted in the EU)
- SamCart and Stripe — checkout and payment; they hold the payment data, we never see your card
- Google (Analytics and Ads) — site statistics and ad measurement
- LinkedIn — ad measurement
- GoDaddy — web hosting
When you open a free test, a one-way hashed version of your email address is sent to Google Ads so it can match the visit to the ad that brought you. Google cannot read the address back out of the hash, and we do not send your name or anything you type into the tool.
Google and LinkedIn are US companies. Transfers rely on the EU-US Data Privacy Framework and standard contractual clauses.
Cookies and measurement
The site uses Google Analytics and the Google Ads and LinkedIn tags to measure which pages and which ads work. Your name and email are stored in your own browser so the free test does not ask twice. You can clear all of it by clearing site data for eventmanagement.shop in your browser, or by blocking these tags with any ad or tracker blocker.
How long we keep it
- Free test leads: three years from the last contact, then deleted.
- Customer accounts and saved event data: for as long as you have the licence, plus one year.
- Accounting records: six years, because Finnish accounting law says so.
Your rights
You can ask for a copy of what we hold on you, ask us to correct it, ask us to delete it, object to how we use it, or withdraw your marketing consent. Email jesse@bonacube.com and you get an answer within 30 days. No form, no fee.
If you think we handled your data badly, you can complain to the Finnish Data Protection Ombudsman: tietosuoja.fi.
Changes
If this policy changes, the date at the top changes with it.