Privacy

How we handle data

A plain summary of what Ulloo Events stores, for venues, their guests and camera screens. It describes the service during the invitation-only beta.

This website

Fonts and images are served from this site.
If you allow it, we use Google Analytics to count visits and see which pages are read. It sets Google cookies and sends your page views, browser details and IP address to Google, which says it doesn't store IP addresses. We don't use it for ads or share it with venues.
If you say no, or haven't chosen, the website sets no cookies and makes no requests to Google. Your choice is kept in this browser.
Analytics is only on this website, not in the venue app, the guest pages or on the screens.

Your analytics choice needs JavaScript to change.

Account: business name, team members' email addresses and roles. Passwords are stored only as salted hashes.
Signing in to the web app sets one session cookie, used only to keep you signed in.
Content you upload (photos, videos, notices) and your playlists, schedules and events.
A security log of staff actions such as pairing a screen or changing the team, with the IP address they came from.
If you ask the assistant to write a notice, your request is sent to Anthropic's Claude to write it.
Password reset emails are sent through an email provider.

Each TV reports what it played and when, its last error, and its hardware: model, Android version, memory, processor, display, video formats and whether a camera is attached.
Every few minutes it also reports its free storage, how much of the next day's content it has saved, its network type and Wi-Fi signal strength, how long it has been on, and its address on the venue's network. It never reports the Wi-Fi network's name or anything about other devices.
When the internet is down, a venue admin can control a screen from the phone app over the venue's Wi-Fi. Those requests are signed with a key only the venue's admins and screens hold, and what was done is added to the venue's security log once the screen is back online.

Guests don't create accounts. A voting page sets a cookie that tells one browser from another, so each guest votes once and nobody can flood a poll.
We store votes, song requests as typed, and photos guests choose to upload with an optional name.
IP addresses are used to limit how fast requests can be made.

Camera frames are analysed on the TV, in memory, and discarded. No picture or video is stored or sent.
Only counts leave the TV: how many people did a pose, how many hands were raised, and, if the venue switches it on, how many people were watching.
The screen shows "Camera on · nothing is recorded" whenever the camera is in use.

An event's content, guest photos, games and links are deleted a set number of days after the event ends: 30 by default, chosen by the venue.
Links given to a couple or planner stop working a day after their event.
A venue's everyday content is kept until the venue deletes it.

Guests with a question should ask the venue that is running the event.