Privacy policy
What personal data we collect, why, where it is kept, who processes it, how long we keep it and your rights under the Kenya Data Protection Act 2019.
The legal documents
Who is responsible
[Company legal name] ("we") is the data controller for the personal data described here, except where we process data for our customers (see "Data our customers put in the service" below). We are [ODPC registration number: registered with the Office of the Data Protection Commissioner]. Data protection officer: [Data protection officer], [Privacy contact email].
This policy follows the Kenya Data Protection Act, 2019 and its regulations, and gives the same rights to people in other countries, including those covered by the EU and UK GDPR.
What we collect
| Data | Examples | Why | Legal basis |
|---|---|---|---|
| Account | name, email, password (stored as a salted hash) | to create and secure your account | contract |
| Profile and onboarding | role, goals, company, team size, country, phone (optional) | to set up the product for you | contract; consent for optional fields |
| Organisation | organisation name, logo, colour, address, tax id | to brand your client views and proposals | contract |
| Projects | event names, dates, venues, layouts, proposals, activity | to provide the service | contract |
| Team invites | colleagues' email addresses you enter | to invite them (when cloud accounts launch) | legitimate interest |
| Contact and demo requests | what you write in an email to us | to reply | legitimate interest |
| Technical | browser type, errors, pages requested (hosting logs) | security and fixing problems | legitimate interest |
We do not use advertising trackers and do not sell personal data.
Data our customers put in the service
Planners, venues and ticketing partners may upload guest lists (names, tables, dietary notes, contact details) and sell tickets that collect ticket buyers' name, phone number and email. For this data the customer (the organiser or the ticketing partner) is the controller and we are their processor under the data processing addendum. Contact the organiser first about that data; we will help them answer you.
Where your data is kept today
In the current demo version, accounts, profiles, projects, guest lists, proposals, ticket holds and demo sales are stored in your own browser (localStorage and sessionStorage) and are not sent to our servers. The cookie and browser storage policy lists every key. Share links carry a project inside the link itself: anyone with the link can read what it contains. When cloud accounts launch, this policy will be updated before any of this data is stored on servers.
Processors and transfers
| Processor | Purpose | Location |
|---|---|---|
| Vercel Inc. | website hosting and delivery | United States and global edge network |
| Google Fonts | web fonts loaded by the pages | global |
| jsDelivr / CDN | 3D library files for self-contained pages | global |
| [Sub-processor list] | email, database and support tools when cloud accounts launch | [to be listed] |
Where data leaves Kenya we rely on the safeguards in section 48 of the Act (appropriate safeguards, adequacy or your consent) and contracts that protect it.
How long we keep it
- Account and project data: while your account is open, then deleted within 90 days of closure unless the law requires longer.
- Emails with us: up to 2 years.
- Hosting logs: up to 30 days.
- Data in your browser: until you delete it (clear site data, or Log out and remove the projects).
Your rights
You can ask to be informed about, access, correct, delete or move your personal data, object to or restrict its processing, and withdraw consent at any time. Write to [Privacy contact email]; we answer within the time the law sets (usually 7 to 30 days). You can also complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).
Children
The service is for event professionals and is not directed at children under 18.
Security
See the security overview for what is and is not in place in the demo.
Changes
We will post changes here and change the date at the top. Material changes will be announced in the product.