Terms & Privacy

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you (the "Subscriber", "User", "you", "your") and Natasha Lee, an Independent Developer operating as Eventrost (referred to as the "Provider", "Company", "we", "us", "our"), governing your access to and use of the Eventrost platform, including all associated websites, applications, features, and services (collectively, the "Services").

By creating an account, accessing the platform, or using any part of the Services — whether as an organisation administrator, full-time staff member, or part-time worker — you accept these Terms in full. If you are using the Services on behalf of a company or organisation, you represent and warrant that you have the authority to bind that entity to these Terms.

These Terms apply to all users of the platform regardless of role, including administrators ("Admins"), full-time staff ("Full-timers"), part-time workers ("Parttimers"), and any external or temporary workers accessing events via shared links.

2. Definitions

3. The Services

Eventrost provides a workforce management and event rostering platform designed for event agencies and organisations. The Services include, but are not limited to:

• Worker registration, onboarding, and management
• Event creation, scheduling, and role management
• Worker application and approval workflows
• Attendance tracking and hours logging
• Reliability scoring and performance records
• Payout tracking and summary reporting
• Document and link management per event
• External worker onboarding via shareable event links

We reserve the right to modify, suspend, or discontinue any aspect of the Services at any time, with or without notice, and we shall not be liable to you or any third party for any such modification, suspension, or discontinuation.

Service Availability

We do not guarantee that the Services will be available at all times or without interruption. Planned or unplanned maintenance, system updates, force majeure events, or third-party service failures may affect availability. We will make reasonable efforts to provide advance notice of planned downtime.

4. Accounts, Access & Security

Account Creation

To access the Services, you must create an account. You agree to provide accurate, current, and complete information during registration, and to update that information as necessary to keep it accurate. Accounts created with false information may be suspended or terminated without notice.

Account Security

You are solely responsible for:

• Maintaining the confidentiality of your login credentials
• All activity that occurs under your account
• Notifying us immediately of any unauthorised access or security breach at support@eventrost.com

We shall not be liable for any loss or damage arising from your failure to maintain account security. We may require you to reset your password or take other security measures at any time.

Invite Codes

Subscriber Admins are responsible for the distribution and security of their workspace invite codes. We shall not be liable for unauthorised registrations resulting from a compromised or improperly shared invite code. Admins may refresh their invite code at any time via their settings.

Multiple Users

Each user account is personal and must not be shared with or transferred to another individual. You must not create multiple accounts for the same person.

5. Subscriptions, Billing & Plans

Subscription Plans

Access to certain features of the Services requires a paid subscription. Plan details, limits, and pricing are set out on our website and may be updated from time to time. We will provide reasonable advance notice of any price changes.

Free Trial

New Subscribers may be offered a free trial period. Upon expiry of the trial, continued access requires a paid subscription. We reserve the right to modify or discontinue the free trial at any time.

Payment

Fees are processed via the methods specified during the billing process (including PayNow, bank transfer, or other manual methods during the pilot phase). Access to the Service is provisioned upon successful verification of payment. When automated billing is introduced, you authorize us to charge your designated payment method on the agreed billing cycle. All fees are in Singapore Dollars (SGD) and are net of any taxes unless otherwise stated.

Renewal & Cancellation

Subscriptions automatically renew unless cancelled before the renewal date. You may request cancellation by contacting us at support@eventrost.com. Cancellation takes effect at the end of the current billing period.

Refunds

All fees are non-refundable except as required by applicable law (such as cases of total service failure) or as expressly stated in writing by us. We do not provide refunds or credits for:

• Partial billing periods or "change of mind" cancellations;
• Unused features or account inactivity;
• Plan downgrades.

If you believe you are entitled to a refund due to a technical error on our part, please contact us at support@eventrost.com within 7 days of the transaction.

Plan Limits

Your subscription plan includes usage limits (events per month, active workers, etc.). Exceeding these limits may result in temporary restriction of certain features. We are not liable for any disruption caused by exceeding plan limits.

Suspension for Non-Payment

We reserve the right to suspend or terminate access to the Services for non-payment. A grace period of three (3) days may apply before deactivation. Data is retained for a reasonable period following suspension to allow account reinstatement.

6. Acceptable Use Policy

You agree to use the Services only for lawful purposes and in accordance with these Terms. You must not:

• Use the platform for any unlawful purpose or in violation of any applicable laws or regulations
• Attempt to gain unauthorised access to any part of the Services or another user's account
• Transmit or distribute malicious code, viruses, or any software that could damage the platform
• Use automated scripts, bots, or crawlers to access or scrape the Services
• Impersonate any person or entity, or misrepresent your affiliation with any person or entity
• Upload, post, or transmit content that is defamatory, obscene, harassing, threatening, or discriminatory
• Interfere with or disrupt the integrity or performance of the Services or related infrastructure
• Reverse engineer, decompile, or disassemble any part of the platform
• Resell, sublicense, or commercially exploit the Services without our express written consent
• Use the Services to store or transmit personal data without appropriate legal basis
• Circumvent or manipulate reliability scores, attendance records, or payout data
• Share event access links, invite codes, or credentials in a manner that facilitates unauthorised access

7. Your Data & Content

Ownership

You retain ownership of all Content you submit to the Services. By submitting Content, you grant us a limited, non-exclusive, worldwide, royalty-free licence to store, process, display, and transmit your Content solely for the purposes of providing the Services.

Subscriber Responsibility

Subscribers are responsible for all Content submitted by users within their workspace. This includes ensuring that worker data is collected and processed in compliance with applicable data protection laws, including Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, the European Union's General Data Protection Regulation (GDPR).

Worker Data

Workers consent to the collection and processing of their personal information (name, contact details, attendance records, earnings, reliability scores) by the Subscriber and by Eventrost for the purposes set out in these Terms and the Privacy Policy. Admins are responsible for informing workers of their data rights.

Data Accuracy

You are responsible for the accuracy of all data entered into the platform, including hours, payout amounts, attendance records, and worker information. We shall not be liable for losses arising from inaccurate data.

No Sensitive Data

You must not submit sensitive personal data to the platform including, but not limited to, financial account numbers, government-issued identification numbers (NRIC, passport), medical information, or any other data whose collection or processing requires explicit legal authority, unless expressly agreed in writing with us.

8. Intellectual Property

All rights, title, and interest in the Services — including software, algorithms, designs, logos, trademarks, text, graphics, and any other proprietary materials — are and remain the exclusive property of Eventrost. Nothing in these Terms grants you any right, licence, or interest in our intellectual property except the limited right to use the Services as described herein.

The Eventrost name, logo, and all related marks are trademarks of Eventrost. You may not use them without our prior written consent.

Feedback, suggestions, or ideas you provide to us may be used by us without restriction or compensation to you.

9. Disclaimers

We do not warrant that:

• The Services will be uninterrupted, timely, secure, or error-free
• Any errors in the Services will be corrected
• The results obtained from use of the Services will be accurate or reliable
• The platform will be compatible with your systems or devices

Employment & Labour

Eventrost is a technology platform and is not an employer, staffing agency, or labour broker. We do not create, control, or take responsibility for any employment relationships, contracts, or obligations between Subscribers and Workers. Disputes regarding wages, working conditions, workplace safety, or employment law must be resolved directly between the relevant parties. We expressly disclaim any liability for such matters.

Payout Information

Payout summaries and earnings figures displayed on the platform are indicative only and subject to final review by the Subscriber. Eventrost does not process payments between Subscribers and Workers. Any discrepancies in payout amounts must be resolved directly between the Subscriber and Worker.

10. Limitation of Liability

In all cases, our aggregate liability to you for any claims arising out of or related to these Terms or the Services shall not exceed the lesser of:

• One hundred Singapore Dollars (SGD $100.00); or
• The total fees paid by you to the Provider in the one (1) month immediately preceding the event giving rise to the claim.

Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities. In such jurisdictions, our liability shall be limited to the minimum extent permitted by law. Nothing in these Terms limits our liability for death, personal injury, or fraud caused by our negligence.

11. Indemnification

You agree to indemnify, defend, and hold harmless Eventrost and its officers, directors, employees, contractors, agents, licensors, and suppliers from and against any claims, liabilities, damages, judgements, awards, losses, costs, expenses, or fees (including reasonable legal fees) arising out of or relating to:

• Your violation of these Terms
• Your use of the Services
• Your Content or data submitted to the platform
• Your violation of any applicable law or third-party right
• Any disputes between you and your Workers or between Workers
• Any employment, labour, or workplace claims involving workers managed through your workspace

12. Termination

By You

You may stop using the Services at any time. Subscribers may request account deletion by contacting us at support@eventrost.com.

By Us

We may suspend or terminate your access to the Services at any time, with or without cause and with or without notice, including if:

• You breach these Terms
• We are required to do so by law
• You fail to pay applicable subscription fees
• We reasonably believe your use poses a security or legal risk
• We choose to discontinue the Services

Effect of Termination

Upon termination, your right to access the Services ceases immediately. We may retain your data for a reasonable period following termination, after which it will be deleted in accordance with our data retention policy. Provisions of these Terms that by their nature should survive termination shall do so.

13. Disputes & Governing Law

Governing Law

These Terms shall be governed by and construed in accordance with the laws of the **Republic of Singapore**, without regard to its conflict of law provisions. Both parties agree to submit to the non-exclusive jurisdiction of the **Small Claims Tribunals** or the Courts of Singapore for any dispute arising out of or related to these Terms.

Dispute Resolution

In the event of any dispute, controversy, or claim arising out of or relating to these Terms or the Services, the parties shall first attempt to resolve the matter through good-faith negotiation. If the dispute cannot be resolved within thirty (30) days of written notice, it shall be submitted to the courts of Singapore, which shall have exclusive jurisdiction.

Waiver of Class Action

To the extent permitted by applicable law, you agree that any dispute resolution proceedings will be conducted on an individual basis and not as a class action, consolidated, or representative proceeding.

14. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify you of material changes by email or by posting a notice within the platform at least fourteen (14) days before the changes take effect. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Terms.

If you do not agree to the modified Terms, you must stop using the Services before the effective date of the changes.

1. Overview & Who We Are

Eventrost operates the workforce management platform accessible at eventrost.com and its subdomains. For the purposes of this Privacy Policy, Eventrost acts as both a data controller (for account and billing data) and a data processor (for worker data submitted by Subscribers).

This policy applies to all users of the platform, including Subscriber Admins, Full-timers, Part-timers, and External Workers. It covers data collected through our website, platform, and any related communications.

We process personal data in compliance with Singapore's Personal Data Protection Act 2012 (PDPA). Where users are located in the European Economic Area, we also comply with the General Data Protection Regulation (GDPR).

2. Data We Collect

Data You Provide Directly

• Account data: Full name, email address, phone number, password (hashed — never stored in plain text)
• Profile data: Job role, IC type classification
• Event data: Events created, roles defined, attendance records, hours worked, amendments
• Financial data: Payout amounts, payout method, payment references — we do not store credit card or bank account numbers
• Communications: Support requests, feedback messages, and email correspondence

Data Generated by Your Use

• Usage data: Pages visited, features used, actions performed, session duration
• Device & technical data: IP address, browser type, operating system, device identifiers
• Log data: Server logs, error reports, access timestamps
• Session data: Authentication tokens, session identifiers managed via our authentication provider

Data Received from Third Parties

• Payment processors: Subscription status, billing events (we do not receive full payment card details)
• Infrastructure providers: System performance and availability data from our hosting and database providers

Special Categories of Data

We do not intentionally collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, health information, or criminal records. You must not submit such data to the platform.

3. How We Use Your Data

We use personal data only for the purposes for which it was collected and as described in this policy:

Service Delivery

• Creating and managing your account
• Providing access to the platform and its features
• Processing event applications, approvals, and attendance records
• Calculating and displaying payout summaries
• Sending transactional communications (verification codes, invite emails, payout notifications)

Legitimate Business Operations

• Billing and subscription management
• Responding to support requests and enquiries
• Detecting and preventing fraud, abuse, or security incidents
• Enforcing our Terms of Service and Acceptable Use Policy
• Maintaining platform security and integrity

Platform Improvement

• Analysing usage patterns to improve features and performance (using aggregated and anonymised data where possible)
• Diagnosing technical problems and bugs
• Conducting internal research and product development

Legal Compliance

• Regulatory Obligations: We process data to comply with applicable laws, regulations, and lawful requests from authorities (such as the PDPC)
• Legal Defense: We may use data for establishing, exercising, or defending legal claims
• Data Roles (PDPA): For the purposes of Singapore’s Personal Data Protection Act (PDPA), the Subscriber is the 'Organisation' (Data Controller) and the Provider acts as a 'Data Intermediary' for any personal data uploaded by the Subscriber
• Marketing & Privacy: We will not use your personal data for direct marketing without your explicit consent, and we will never sell your data to third parties

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

Within the Platform

• Worker data (name, contact details, attendance, reliability score, payout records) is visible to Admins and Full-timers within the same Subscriber workspace
• Event details and role information are visible to workers within the Subscriber's workspace according to their role and event access settings
• Admins have full visibility of all data within their workspace

Service Providers

We use trusted third-party providers to operate the Services. These providers process data on our behalf subject to their respective security and data processing terms:

• Neon (database hosting): Stores all platform data in secure cloud infrastructure
• Resend (email delivery): Sends transactional emails including OTPs, invites, and notifications
• Cloudflare (Infrastructure & Hosting): CDN, DDoS protection, and serverless execution via Cloudflare Workers
• Payment Processors: Used to facilitate transactions (e.g., PayNow for manual billing or third-party gateways for future automated billing). These providers handle your sensitive financial data directly; we do not store your full bank account details or credit card numbers.

Legal Requirements

We may disclose personal data if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Protect and defend the rights or property of Eventrost
• Prevent or investigate possible wrongdoing in connection with the Services
• Protect the personal safety of users or the public

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our assets, personal data may be transferred to the successor entity. We will provide notice before personal data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain personal data for as long as necessary to provide the Services and comply with our legal obligations:

• Active accounts: Data is retained for the duration of the account
• Terminated or suspended accounts: Data is retained for up to twelve (12) months after termination to allow reinstatement and comply with legal obligations, then deleted or anonymised
• Event and hours records: Retained for seven (7) years from the event date to support audit and dispute resolution requirements
• Billing records: Retained for seven (7) years to comply with financial record-keeping obligations
• Log data: Retained for ninety (90) days
• Support communications: Retained for three (3) years

Where retention is required by law, we may retain data beyond these periods. Data that is no longer required is securely deleted or anonymised.

6. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All passwords are hashed using bcrypt with an appropriate work factor — plain text passwords are never stored
• All data in transit is encrypted using TLS 1.2 or higher
• Data at rest is encrypted by our database and hosting providers
• Session tokens are managed via our authentication provider with short expiry windows and secure cookie flags
• Access to production systems is restricted to authorised personnel only
• We implement rate limiting on sensitive endpoints including authentication and OTP delivery
• Subdomains are isolated — users in one workspace cannot access data from another

7. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you
• Correction: You may request correction of inaccurate or incomplete data. Profile data can be updated directly via your account settings
• Deletion: You may request deletion of your personal data. Note that we may retain certain data where required by law or for legitimate business purposes
• Portability: You may request your data in a commonly used machine-readable format
• Objection: You may object to the processing of your personal data in certain circumstances
• Restriction: You may request that we restrict processing of your data in certain circumstances
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing

How to Exercise Your Rights

To exercise any of the above rights, contact us at support@eventrost.com with your name, email address, and the specific request. We will respond within thirty (30) days.

Workers and Subscriber Data

Where your personal data is processed by a Subscriber (your employer or agency) using the Eventrost platform, Eventrost acts as a data processor. In such cases, your primary data rights should be directed to the Subscriber (the data controller). We will assist Subscribers in fulfilling such requests.

Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

8. Cookies & Tracking

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled without affecting core functionality
• Functional cookies: Remembering your preferences and settings
• Analytics cookies: Understanding how users interact with the platform to improve performance (we use aggregated, anonymised data)

We do not use advertising cookies or third-party tracking cookies. We do not share cookie data with advertising networks.

You may configure your browser to reject cookies, though this may affect the functionality of the platform, including the ability to log in.

9. Children's Privacy

The Services are not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from persons under 18. If you become aware that a minor has provided us with personal data without appropriate consent, please contact us immediately and we will take steps to delete such data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the platform at least fourteen (14) days before the changes take effect. The updated policy will include the revised "Last updated" date at the top of the page.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding these Terms or this Privacy Policy, please contact us: