Privacy Policy

1. Introduction

Ceremoni ("we," "us," "our") provides an event management platform that helps organizers plan and run events, and allows guests to RSVP, view invitations, and share photos. This policy explains what personal data we collect, how we use it, and the rights you have over it, in accordance with the Nigeria Data Protection Act 2023 (NDPR) and applicable data protection laws.

2. Information we collect

We collect the following categories of data:

• Organizer account data — name, email, phone number, and password (stored securely, hashed — never in plain text) when you create a Ceremoni account.
• Event data — event details, guest lists, guest contact information (name, phone number) that you upload for the purpose of sending invitations and tracking RSVPs.
• Guest data — RSVP responses, dietary notes, and any photos guests choose to upload to a shared Memories gallery.
• Payment data — processed directly by Paystack, our payment processor. Ceremoni does not store your full card details on its own servers.
• Usage data — standard analytics data (pages visited, device/browser type) to help us improve the platform.

3. How we use your information

• To create and manage your Ceremoni account
• To deliver invitations to guests via WhatsApp
• To process RSVPs, seating, and guest management features
• To process payments through Paystack
• To provide the Memories photo-sharing gallery
• To communicate with you about your account or events
• To improve and secure the platform

4. Guest data and organizer responsibility

When you upload a guest list to Ceremoni, you confirm that you have a lawful basis to share that guest's contact information with us — typically because you have an existing relationship with them and are inviting them to your event. Guests can request removal of their data by contacting us directly or through the organizer.

5. Third-party services

We share data with the following processors, only as needed to provide the service:

• Paystack — payment processing
• WhatsApp Business API — invitation delivery
• Cloud storage providers — hosting uploaded photos and event assets

6. Data retention

We retain event and guest data for as long as your account is active, and for a reasonable period after an event to allow access to the Memories gallery. You can request deletion of your account and associated data at any time.

7. Your rights

Under the NDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to certain uses of your data
• Withdraw consent where processing is based on consent

8. Data security

We use industry-standard measures to protect your data, including encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our platform.

10. Contact us

For questions about this policy or to exercise your data rights, contact us at privacy@ceremoni.co.