Privacy Policy

Lilla is an event operations platform. This policy explains what we collect when you use the product, why we collect it, and how long we keep it. We do not sell personal data. A fuller field inventory for operators is maintained in the product's data map.

Who this covers

Organizers and their team members, people who register for events, venue and catering contacts who receive booking requests, and Lilla platform operators.

What we collect

• Account details: name, email and/or phone used to sign in with a one-time code (email by default).
• Organization profile: workspace name, contacts, brand colour, and team membership.
• Event and registration data: event content, custom form answers, attendance and check-in records, feedback, and uploaded media.
• Communication preferences: optional marketing consent for other events, and unsubscribe choices for organizer announcements about events you registered for (email, and SMS when a workspace enables it).
• Technical logs needed to run the service: authentication, audit actions by platform staff, and first-party event funnel counts when you accept analytics cookies.

How we use data

• To run registration, tickets, check-in, reminders, and organizer announcements for events you joined.
• To keep workspaces isolated from each other and to support organizers who ask for help.
• To improve reliability and prevent abuse (including moderation of reported content).

Sharing

Event organizers see the registration details people submit for their events. Platform operators can access cross-tenant records only when needed for support, moderation, or security, and those overrides are audited. We use infrastructure and delivery providers (hosting, email, and optionally SMS and object storage) as processors under our instructions. Named live vendors are recorded in the operator vendor register before public traffic.

Retention

Active workspace data stays available while the organization uses Lilla. When an organizer closes a workspace, we keep data for a 30-day grace period so they can cancel the closure, then delete it. When you delete your account, we soft-delete immediately and anonymize contact fields after a grace period so attendance history can remain without your email or phone. Legal holds or unresolved abuse investigations may extend retention.

Your choices

• Update your profile and communication preferences while signed in.
• Unsubscribe from event announcements via the link in those messages (ticket and door mail still arrive).
• Skip optional marketing about other events — registration never requires that checkbox.
• Choose Essential only to skip first-party funnel analytics, or Accept all to allow them.
• Ask an organizer to correct registration details for their event.
• Request account deletion from the signed-in account settings.
• Attendees who need a copy of their data can email support (address from the product config). Organizers can export their workspace from settings.
• Report harmful listings from the event page or via Safety & reporting.

Payments

Lilla does not process paid tickets in the current product. When payments ship in a later version, checkout and payout partners will be named here before that feature goes live.