Privacy policy
Last updated 14 October 2026
This policy explains what Business Event Space (businesseventspace.com) collects, why, how long we keep it, and how to contact us. Questions or requests: enquire@businesseventspace.com.
What we collect
- Account data: your name, email address, a hashed password, your role and account settings.
- Messages and enquiries you send through our forms: the fields you fill in, plus IP address and browser user agent for spam protection.
- Listings you submit (event tools, suppliers) and content added to venue packs.
- Cookies: a login cookie that keeps you signed in, a short-lived cookie that remembers where to return after login, your theme choice, and your cookie consent choice.
- AI-assisted searches: when you run a tool or supplier search, the search text is sent to xAI's API to produce results.
The Grok Bot connector
If you connect a Grok Bot (or another MCP client) at https://businesseventspace.com/mcp, the bot acts as your account with the permissions and action switches you choose. We store:
| Data | Why | Kept for |
|---|---|---|
| Client registration (client name, redirect URLs) | To recognise the connecting app | Until deleted on request |
| Pending sign-in requests and one-time codes | To complete sign-in | 60 minutes and 5 minutes |
| Access and refresh tokens (stored only as hashes) | To authenticate the bot | Access 15 minutes; refresh up to 30 days, or until you revoke |
| Connector settings and action switches | To enforce what the bot may do | While your account exists |
| Audit log of every change made through the connector (account, tool, target, time, undo id) | Security and undo | 12 months |
| Undo records and retry (idempotency) records | Undo and safe retries | 30 days and 7 days |
| Files uploaded through the connector | Attached to venue records | Until removed or on request |
| Feature feedback the bot sends with your agreement | To improve the product | Until no longer needed, or on request |
Tokens issued to the connector are only accepted by Business Event Space; we do not pass them to other services. We do not sell personal data or use connector data for advertising. You can see and revoke connected bots under Account → Connect your Grok Bot.
Who processes data
The site runs on our own server hosted by Hetzner in the EU. Email is sent through our own mail accounts. Search text for AI-assisted searches is processed by xAI.
Your rights
You can ask for a copy of your data, correction or deletion by emailing enquire@businesseventspace.com. Deleting your account removes your connector settings and revokes all tokens.