Privacy Policy

Last updated: 30 September 2026

This is an English translation for convenience. In case of any discrepancy, the Turkish version prevails.

This policy explains how your personal data is processed when you use the EventhubX mobile app, the management panel panel.eventhubx.co and the website eventhubx.co.

1. Who is responsible?

EventhubX is a brand of Twice Yazılım Teknoloji Ltd. Şti. (Twice Apps); organisations use it for their own events. There are two different roles:

• The organisation running the event (the organiser) is the data controller for the data of its attendees: attendance details, group assignments, survey answers and feedback are processed for its event. Twice Apps processes this data on behalf of and on the instructions of the organiser (data processor).
• Twice Apps is the data controller for the data needed to run the app technically (device identifier, notification token), for panel user accounts and for this website.

2. What data do we process?

When you join an event

• First name, last name and e-mail address — only if the organiser chose a joining method that asks for them. They are not requested for anonymous access.
• E-mail verification code — for code-based joining; it expires shortly.
• The event you joined, when you joined and the group the organiser assigned you to.

When you use the app

• Device identifier: on Android the ID the device gives to apps, on iOS a random ID generated by the app and stored in the device keychain. It is used to recognise the same device (for example, to stop someone removed from an event from joining again); it is not an advertising ID.
• Notification token (push token), operating system and app version — to deliver announcements and to show update prompts on old versions.
• Survey answers and suggestion / feedback messages — forwarded to the organiser when you send them.
• What you write to the assistant — sent to the AI provider (OpenAI) together with the event information to generate an answer. We recommend not writing personal information to the assistant.

When you send a demo request

• Your name, company, e-mail, phone number (optional) and your answers about your event needs in the demo request form — to get back to you and prepare an offer. To protect the form against abuse, an irreversible digest (hash) of your IP address is stored.

Panel users

• Name, e-mail, the accounts and roles you belong to, sign-in details and activity logs in the panel.

What we do not process

We do not collect your location, contacts, photos or advertising ID. The camera only opens when you scan a QR code and no image is saved. Calendar permission is only used when you choose to add a session to your calendar; your calendar is not read or sent to us.

3. Why do we process it?

• To let you join an event and verify your identity when needed,
• to show you the programme, announcements, guide and other event content,
• to deliver the organiser's announcements as notifications,
• to apply the organiser's access decisions (for example, removal from an event),
• to forward surveys and feedback to the organiser and answer your assistant questions,
• to keep the service secure, prevent abuse and answer your support requests.

We do not sell your data and we do not use or share it for advertising.

4. Who do we share it with?

Event data is shared with that event's organiser and the panel users the organiser authorises. We use the following providers to deliver the service; they process data only on our behalf and for the stated purpose:

Data may also be shared with competent public authorities where required by law.

5. How long do we keep it?

• Attendance data is kept for the duration of the event and for the period set by the organiser; when the organiser deletes the event, the related data is deleted too.
• When you leave an event or delete your account via Profile → Delete my account, your link to those events is removed, your device's notification tokens are deleted and the app data on this device is cleared.
• E-mail verification codes expire shortly.
• Demo requests are kept for at most 2 years after we respond; if you become a customer, for the duration of the contract. You can ask us to delete them at any time.
• Statutory retention obligations take precedence over these periods.

If you want your records on the server deleted completely, follow the steps on the Account and Data Deletion page.

6. Your rights

Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to learn whether your data is processed, to request information and a copy, to rectification and erasure, to object to processing and to claim compensation for damage. Details are in the KVKK Privacy Notice.

You can send your requests to contact@twiceapps.co. For data belonging to an event you can also contact that event's organiser directly; we answer your request together with the organiser.

7. Security

All connections to the app, panel and website are encrypted (HTTPS). Access to the panel is authorised per account and role; each organisation only sees its own events. The database and files are kept on servers in Germany.

8. Children

EventhubX is designed for corporate events and is not aimed at children. If you are under 18, use the app with the knowledge of your organiser and your parent or guardian.

9. Changes and contact

We may update this policy; the current version is always on this page and the date above changes. Questions: contact@twiceapps.co.