Privacy Policy | Eventals

1. Who we are

Eventals is an event vendor management platform operated in Nigeria. We help event vendors manage bookings, invoices, payments, and client records. Our contact email is support@eventals.app.

2. Data we collect

We collect only the data necessary to provide the service:

Account data: Your email address, business name, phone number, and address when you sign up or update your profile.
Client data: Information about your clients that you enter — name, email, phone, company, and notes.
Business data: Bookings, invoices, line items, payments, and receipts you create inside Eventals.
Usage data: Standard server logs (IP address, page visited, timestamp) for security and debugging.

We do not collect payment card details. Payment processing (when available) is handled by Paystack or Flutterwave under their own privacy policies.

3. How we use your data

To provide and operate the Eventals service
To send automated email reminders (event reminders and payment reminders) on your behalf
To send payment receipts to your clients
To authenticate your account and keep it secure
To diagnose errors and improve the platform

We do not sell your data. We do not use your data for advertising.

4. Data processors

We use the following trusted third-party services to process data on our behalf:

Supabase — database, authentication, and file storage (your data is stored in their infrastructure)
Resend — transactional email delivery (receipt emails and reminders)

Both processors are bound by data processing agreements and handle data only as instructed by Eventals.

5. Your rights under NDPR

Under the Nigeria Data Protection Regulation (NDPR), you have the right to:

Access — request a copy of the personal data we hold about you
Correction — ask us to correct inaccurate data
Deletion — request deletion of your account and associated data
Objection — object to certain uses of your data

To exercise any of these rights, email us at support@eventals.app. We will respond within 14 days.

6. Cookies

Eventals uses session cookies only — these are necessary to keep you logged in. We do not use tracking cookies or advertising pixels. We do not use Google Analytics or any third-party analytics service.

7. Data retention

Your data is retained for as long as your account is active. If you delete your account, your data will be deleted within 30 days, except where we are required to retain it for legal or regulatory compliance.

8. Security

All data is transmitted over HTTPS. Data at rest is encrypted by Supabase. Access to tenant data is enforced at the database level via Row Level Security (RLS) — no vendor can access another vendor's data.

9. Changes to this policy

If we make material changes to this policy, we will notify you by email. Continued use of Eventals after notification constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, email us at support@eventals.app.