Privacy Policy
Last updated: February 24, 2026
1. Introduction
Eventtive, operated by InventiveLabs ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with the Nigeria Data Protection Regulation (NDPR) and other applicable data protection laws.
2. Data We Collect
We collect the following categories of personal data:
- Account Information: Name, email address, phone number, password (hashed), profile photo
- Event Data: Event details, venues, dates, descriptions, and images you create
- Payment Data: Bank account details for payouts, transaction records (card details are processed securely by Paystack/Flutterwave and never stored by us)
- Attendee Data: Ticket purchase information, check-in records, RSVP responses
- Usage Data: Pages visited, features used, device information, IP address, browser type
- AI Interaction Data: Event planning prompts and generated content
3. How We Use Your Data
We use your personal data to:
- Provide and maintain the Eventtive platform and services
- Process ticket sales and payments
- Generate AI-powered event plans and content
- Send transactional communications (confirmations, receipts)
- Send marketing communications (with your consent, which you can withdraw at any time)
- Improve our services and develop new features
- Prevent fraud and ensure platform security
- Comply with legal obligations
4. Legal Basis for Processing (NDPR)
We process your data based on:
- Consent: For marketing communications and optional features
- Contract Performance: To provide services you signed up for
- Legitimate Interest: For security, fraud prevention, and service improvement
- Legal Obligation: To comply with Nigerian laws and regulations
5. Data Sharing
We share your data only with:
- Payment Processors: Paystack and Flutterwave for transaction processing
- Cloud Providers: For secure data storage and processing
- Communication Services: Resend (email), Termii (SMS) for sending notifications
- AI Providers: Google (Gemini) for AI features (event data is anonymized)
- Event Organizers: Attendee data is shared with the event organizer whose event you registered for
We do not sell your personal data to third parties. We do not share data with advertisers.
6. Data Security
We implement appropriate technical and organizational measures:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing (bcrypt)
- Webhook signature verification for payment data
- Role-based access controls
- Regular security reviews and updates
- Redis-based rate limiting to prevent abuse
7. Your Rights (Under NDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Data Portability: Receive your data in a machine-readable format
- Withdraw Consent: Opt out of marketing communications at any time
- Object: Object to processing based on legitimate interest
- Complaint: Lodge a complaint with NITDA (National Information Technology Development Agency)
To exercise any of these rights, contact us at privacy@eventtive.com. We will respond within 30 days.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain data for up to 90 days for backup purposes, after which it is permanently deleted. Financial records are retained for 7 years as required by Nigerian tax law.
9. Cookies & Tracking
We use essential cookies for:
- Authentication and session management
- Theme preferences (light/dark mode)
- Security (CSRF protection)
We do not use third-party advertising cookies. Analytics cookies (if implemented) will require your explicit consent.
10. International Data Transfers
Your data may be processed on servers outside Nigeria (e.g., cloud infrastructure). We ensure appropriate safeguards are in place, including data processing agreements with all third-party providers.
11. Children's Privacy
Eventtive is not intended for use by children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or Platform notification. The "Last updated" date at the top indicates when this policy was last revised.
13. Data Protection Officer
For privacy-related inquiries, contact our Data Protection Officer:
- Email: privacy@eventtive.com
- Address: Lagos, Nigeria