Privacy Policy

1. Who we are

Eventcape Technologies Limited ("Eventcape", "we") operates the Eventcape platform. We are the data controller for the personal data we collect through the Platform. Our registered office is in Lagos, Nigeria.

Data Protection Officer email: hello@eventcape.com

2. What data we collect

Account data. When you create an account: full name, email address, phone number, account role (Host, Planner, or Vendor), and business name (if applicable).

Identity verification data. When you complete KYC: Bank Verification Number (BVN), date of birth, and identity document details. This data is collected and processed by our verification partner, Dojah. Eventcape stores a verification status (verified/not verified) and a reference ID. We do not store your BVN directly.

Financial data. Bank account details for payout purposes (account number, bank name, account name). Transaction records including payment amounts, dates, and counterparties. This data is processed by Paystack.

Event data. Event details you create or are associated with: event name, date, location, guest count, budget, vendor categories, timelines, task lists, and guest lists.

Contract data. Contracts created, signed, and stored on the Platform, including all clause text, milestone definitions, payment schedules, and signatures.

Communication data. Messages sent through the Platform's messaging system between users.

Usage data. IP address, device type, browser type, pages visited, features used, and timestamps. Collected automatically through cookies and analytics tools.

3. Why we collect it (legal basis)

Contract performance. We process your account, event, contract, and financial data because it is necessary to provide the Platform's services — you cannot use Eventcape without it.

Legal obligation. We process identity verification data to comply with anti-money laundering regulations and KYC requirements under Nigerian law.

Legitimate interest. We process usage data to improve the Platform, detect fraud, and ensure security. We process communication data to provide the messaging feature and to assist in dispute resolution.

Consent. We send marketing communications only with your explicit consent. You can withdraw consent at any time.

4. Who we share it with

Paystack — payment processing. Paystack receives your financial data to process payments. Paystack is a CBN-licensed payment processor and is independently responsible for the security of payment data it processes.

Dojah — identity verification. Dojah receives your BVN and identity data to perform KYC checks. Dojah is independently responsible for the data it processes.

Other users — within the context of an event. When you participate in an event on Eventcape, certain information is shared with other participants: your name, role, business name, and contact details are visible to other parties to a contract. Your BVN, bank account details, and financial data are never shared with other users.

Mediators — in the event of a dispute. If a dispute is escalated to a human mediator, relevant contract details, communications, and evidence submitted by both parties are shared with the mediator.

Law enforcement — if required by Nigerian law, court order, or regulatory request.

We do not sell your personal data. We do not share your data with advertisers.

5. Where your data is stored

Your data is stored securely on servers located in standard hosting infrastructure. Contract documents and financial records are encrypted at rest using AES-256 encryption. Data in transit is encrypted using TLS 1.2 or higher.

6. How long we keep it

Account data: retained for the duration of your account plus 7 years after account closure (to comply with Nigerian financial record-keeping requirements).

Transaction records: retained for 7 years after the transaction date.

Contract documents: retained for 7 years after the contract's last milestone payment.

Identity verification data: verification status retained for the duration of your account. BVN data is held by Dojah, not by Eventcape.

Usage data: retained for 24 months, then anonymised.

Communication data: retained for the duration of your account plus 12 months.

7. Your rights

Under the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023, you have the right to:

- Access your personal data held by Eventcape

- Correct inaccurate personal data

- Delete your personal data (subject to our legal obligations to retain certain records)

- Restrict processing of your data in certain circumstances

- Port your data to another service in a machine-readable format

- Object to processing based on legitimate interest

- Withdraw consent for marketing communications at any time

To exercise any of these rights, email hello@eventcape.com. We will respond within 30 days.

8. Cookies

We use cookies for: session management (essential), analytics, and security (fraud detection). We do not use advertising cookies. You can disable non-essential cookies in your browser settings.

9. Children

Eventcape is not intended for use by anyone under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We will notify you by email and through the Platform at least 14 days before material changes take effect.

11. Contact

Data Protection Officer: hello@eventcape.com

Regulatory authority: Nigeria Data Protection Commission (NDPC)