How EventOS handles data

EventOS is a Valid8 event-operations service. It can be used independently or connected to an organisation's systems. Valid8 operates the EventOS application and its direct Google Workspace, Microsoft 365 and agent connections.

An organisation using EventOS may provide an additional privacy notice for the event, membership, employment or customer information it controls.

EventOS handles account and workspace identifiers, event briefs and plans, venue and programme records, attendee and operational records, approvals, audit evidence and service-usage information.

When you connect Google Workspace, EventOS receives your Google account identity and the permissions you approve. The current Google profile can search and read Gmail messages, search and read Drive files, read bounded Google Sheets ranges and create a Gmail draft for your review. EventOS does not expose a Gmail send action.

Google user data is used only to provide the EventOS feature you or an authorised workspace operator requests: finding event-related correspondence, reading a selected message or file, reading a bounded spreadsheet range, or preparing a draft in your Gmail account for human review.

EventOS does not sell Google user data, use it for advertising, or use it to train a general-purpose AI model. When an authorised EventOS feature uses an AI or infrastructure processor, only the data required for that visible feature is processed and remains subject to the workspace authority, provider consent and EventOS tenant controls.

EventOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Provider access and refresh tokens are kept in protected server-side secret storage. They are not returned to the browser, an AI assistant, a prompt or an EventOS domain record.

Data may be processed by infrastructure and service providers only as needed to operate an authorised EventOS feature, and by the organisation or event administrators permitted to access that workspace. EventOS does not permit a connected account, agent or administrator to bypass the Google permission you granted.

Bounded connector action results are retained for no more than seven days to make retries deterministic. Provider tokens remain only while the connection is active. Event and audit records are retained according to the workspace's applicable policy and legal obligations; immutable audit evidence does not include a reusable provider token.

You can disconnect the account in EventOS or revoke EventOS from your Google Account connections page. Revocation stops new provider actions. EventOS removes the reusable provider credential while retaining only the minimum security, billing or effect evidence required to prove what occurred.

For access, correction, export or deletion requests, contact the organisation that invited you to the EventOS workspace or email kim@valid8.xyz with the subject 'EventOS privacy request'. Include the workspace name and connected account, but never send a password, API key or OAuth token.

This notice is effective 23 August 2026 and was last updated on 23 August 2026. It will be updated when EventOS adds a provider, materially changes its use of connected data or admits a new production purpose.