Is this safe?

Yes, and you stay in control the whole time. This page says what we expect to see, what we will not do, how we protect what you share and how you take access back.

What will you be able to see?

We only need your events: the title, date, place, description and ticket link of each one you publish as public. That is what appears on the 1EL global calendar.

What else the access could reach depends on how you share it. If you add us to your Eventbrite team, you give us a role with one permission, Edit event details. Eventbrite has no permission that only lets someone look at events. This one is the smallest access we found that lets us read them. It also lets us see more, for example your drafts and your private events. If you share an API key instead, it reaches everything your own Eventbrite account can reach. We go through both with you at your Discovery Call, before your chapter shares anything.

What will you not do?

• We will not change, cancel or delete your events.
• We will not sell tickets, contact your attendees or touch your payouts.
• We will not use the access for anything except showing your events on the 1EL global calendar.

Which way of sharing access is safest?

Adding us to your Eventbrite team. The other way is to share a long password made for a system rather than a person, which is called an API key. A team invite creates no key, so there is nothing to lose or leak, and you can remove us from the team yourself. The page Add us to your Eventbrite team shows how.

What if I share a key instead?

If you share an API key instead of adding us to your team, this is what happens to it.

• You paste it into your chapter portal. It never travels by email or chat.
• Our server encrypts it, which means scrambling it with a secret that is kept outside our database, before it is saved.
• Only our team can open it, to set up the access. Every time someone on our team opens it, that is recorded.
• Your chapter sees only its last four characters afterwards. Nobody can read it back from the portal.
• We keep it after we have checked that the access works, because the system the integration team uses to read your events needs it. That system uses it for nothing else.
• You can ask us to delete it at any time. The page Withdraw access shows how.

Can I take access back?

Yes, at any time and without asking first. The page Withdraw access shows how.