Avarice is a platform connecting event planners with AV suppliers, operated by CWB Events Ltd, a company registered in England and Wales (company number 13971083), registered office: Flat 6 Overhill Road, London, SE22 0NA, trading as Avarice. For the purposes of UK data protection law, CWB Events Ltd is the data controller for personal data processed through the platform and is registered with the Information Commissioner's Office under registration reference ZC171751. You can contact us at hello@avarice-av.co.uk
Avarice is a business platform intended for use by event professionals aged 18 or over.
When you use Avarice we may collect: account information you provide when signing up or completing your profile (name, email address, company name, phone number, job role, location); event and production information you enter when building specs or sending briefs, including free-text notes; supplier and venue application and profile information; messages you exchange with other users through the platform, including file attachments; documents you or the other parties upload to a confirmed booking's shared document area (for example floor plans, risk assessments and method statements, running schedules and other working files for the event); compliance documents suppliers upload to their compliance vault (insurance certificates, RAMS, test certificates, qualifications); booking and transaction records for payments made through the platform; reviews you submit and supplier responses; dispute submissions and responses where a payment or booking is disputed; suppliers' stated reasons for declining a brief (used by us to understand supply and matching, and never shown to the planner); bug reports you submit (your description, the page address, your browser's user-agent string and recent browser console errors); and communications between you and Avarice, including contact-form messages.
Questions you type to the Chip assistant are also stored by us in anonymous form — the first 300 characters of your message and the page you were on, with no account identifier or any other link to you, whether or not you are signed in. We use these records to see which questions come up repeatedly and to improve the platform's help content and features. Because they are anonymous, we cannot connect them back to you.
Payments are processed by Stripe. Your card or bank details are entered directly with Stripe and are never stored on our servers — we hold only transaction records (amounts, dates, booking references and payment status) and the issuing country of your card, which is used to apply the international card fee described in our Terms of Service.
Your IP address is used transiently for rate limiting to protect the platform from abuse; rate-limit records are held for up to one hour.
We use your data to operate the platform and connect planners with suppliers; to send you transactional emails (brief notifications, quote alerts, booking confirmations); to improve the platform and fix issues; to comply with legal obligations.
We also derive anonymous product signals from platform activity — for example, kit or services mentioned in brief notes, or named in supplier kit lists and kit-list imports, that our catalogue does not yet cover, or how often briefs request a category with few available suppliers. These signals are stored without any link to your account and are used only to decide what to add or improve on the platform.
We do not sell your personal data to third parties. We do not use your data for advertising.
When you send a brief to a supplier, your name, company, email address and event specification are shared with that supplier. Suppliers accept our terms and are bound by confidentiality obligations. Some notification emails set the other party's email address as the reply-to address so you can respond to them directly, and Stripe sends payment receipts directly to the email address on your account.
If you create a Client View link for a brief, anyone holding that link can view the brief (subject to the display settings you choose) without signing in — share links only with the people you intend to see them.
Where your event is at one of our venue partners, or your brief reaches suppliers through a venue's referral link, that venue can see your brief, your name and contact details, the quote totals received, the value and payment status of any resulting booking and any documents shared in that booking's shared document area, so it can support the event and administer its partnership with Avarice.
Documents uploaded to a confirmed booking's shared document area are visible to all parties on that booking — the planner, the supplier and, where the booking is at a venue partner, the venue.
Pricing on the platform is pooled into anonymous market benchmarks. The sources are supplier prices entered in the kit inventory, line prices on quotes submitted through the platform, and line prices in third-party quotes planners upload to the Quote Analyser. Only anonymous, aggregated benchmarks are ever shown to other users — individual prices, and the identity of whoever quoted them, are never disclosed.
Parts of the platform use AI models provided by Anthropic: the Chip assistant (your chat messages and a summary of your current event configuration), brief generation (your event details, including free-text notes), quote analysis and comparison (the full text of quotes you paste or upload), kit-list import for suppliers (pasted kit lists), automatic reading of expiry dates from uploaded compliance documents, and automatic screening of uploaded images before publication.
AI outputs are decision-support only and can be wrong — you are responsible for verifying them. Content you submit to these features is processed by Anthropic to provide the feature. We do not use your data to train AI models. Only paste or upload documents you are entitled to share, and only upload images you have the right to use.
Your data is stored securely and processed by a small number of service providers acting on our behalf: Supabase (database), Vercel (hosting and deployment), Clerk (account sign-in and authentication), Stripe (payment processing), Resend (transactional email delivery), Anthropic (AI features as described above), Sentry (error monitoring — error reports are stripped of personal data such as email addresses before sending, and users appear only as an anonymous identifier) and Upstash (rate-limiting infrastructure, which holds IP addresses for up to one hour).
Some of these providers process data outside the UK. Where personal data leaves the UK, the transfer is protected by safeguards recognised under UK data protection law, such as the UK's data-bridge arrangements or international data transfer agreements.
We keep your account data for as long as your account is active. Booking and transaction records — including the case records of any payment dispute or chargeback — are retained for six years for legal, accounting and tax purposes, including after your account closes. Briefs you delete are recoverable for 30 days and then permanently erased. Documents uploaded to a booking's shared document area are stored privately, are accessible to the parties on that booking only through time-limited links, can be deleted by their uploader at any time and are deleted when the booking they belong to is deleted. Applications, enquiries, bug reports and support records are kept for up to two years. Anonymous, aggregated records that contain no link to you (market-rate benchmarks, product-demand signals and stored Chip questions) are kept for as long as they remain useful.
We take reasonable technical steps to protect your data, but no system is completely secure. Please contact us immediately at hello@avarice-av.co.uk if you believe your data has been compromised.
Under UK GDPR you have the right to access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to processing; request restriction of processing; data portability.
To exercise any of these rights, contact us at hello@avarice-av.co.uk. We will respond within one month. Some transaction records must by law be kept for the statutory retention periods described above even after an erasure request — we will tell you if that applies. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk, or 0303 123 1113) if you are unhappy with how we have handled your data.
Avarice sets no cookies of its own. The cookies used on the platform are essential third-party cookies that are strictly necessary for it to work: authentication cookies set by Clerk to keep you signed in, and cookies set by Stripe during checkout for payment processing and fraud prevention.
We also use browser localStorage to keep your work between sessions: event configurations, brief drafts and history, kit selections, your name, email and company for pre-filling forms, Chip chat history, and quote text you paste into the analyser. This data stays on your device — clear your browser storage to remove it.
We do not use advertising cookies, analytics cookies or tracking scripts of any kind.
We may update this Privacy Policy as the platform evolves. Material changes will be communicated via email or a notice on the platform. Continued use of Avarice after changes constitutes acceptance of the updated policy.
For any privacy-related questions or requests: hello@avarice-av.co.uk