Privacy Policy

1. Who we are

RSVPay is a group payment platform operated in Nigeria. We help organisers collect payments from multiple contributors through a single shared link. If you have questions about this policy, contact us at rsvpay.ng@gmail.com.

2. Information we collect

We collect information you provide directly when you use RSVPay:

• ·Name and contact details: Your full name, email address, and WhatsApp number when you sign up or make a payment.
• ·Payment information: Payment amounts, transaction references, and the status of each contribution. We do not store card numbers — payments are processed via a licensed payment processor.
• ·Bank account details: Account number, account name, and bank name if you request a refund and provide these for the transfer.
• ·Event details: Event titles, descriptions, dates, and items you create as an organiser.
• ·Device and usage data: Browser type, IP address, pages visited, and time spent on pages, collected automatically via analytics tools.

3. How we use your information

• ·Process and confirm payments made through RSVPay.
• ·Send transactional emails: payment confirmations, reminders, refund notices, and organiser notifications.
• ·Allow organisers to view their guest list and payment status.
• ·Provide customer support and respond to queries.
• ·Detect and prevent fraud and misuse of the platform.
• ·Improve RSVPay through aggregated analytics (we do not sell individual data).

4. Information shared with third parties

We do not sell your personal information. We share data only with the service providers necessary to operate RSVPay:

• ·Paystack: Payment processing. Your transaction is routed through Paystack's regulated infrastructure. Paystack handles card payment authorisation and settlement directly to the organiser's bank account.
• ·Supabase: Database and authentication. Your account data and event information are stored on Supabase's infrastructure.
• ·Resend: Transactional email delivery. We use Resend to send payment confirmations, reminders, and other notifications to your email address.
• ·Google Analytics (GA4): Website analytics. GA4 collects anonymised usage data (pages visited, session duration, device type) to help us understand how the site is used. No personally identifiable payment information is sent to Google.

5. Data shared between organisers and contributors

When you make a payment on an event page, the event organiser can see your name, contact details, payment amount, and any notes you leave. This is necessary for the organiser to manage their event and coordinate with contributors. By making a payment, you consent to this information being visible to the organiser who created the event.

6. Data retention

We keep your account information for as long as your account is active. Payment and transaction records are retained for a minimum of 7 years to meet financial record-keeping obligations. If you request account deletion, we will remove your personal data except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Your rights

You may contact us at rsvpay.ng@gmail.com to:

• ·Request a copy of the personal data we hold about you.
• ·Ask us to correct inaccurate information.
• ·Request deletion of your account and associated data.
• ·Object to how we use your data.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed credentials, and access controls to protect your data. Payment transactions are handled by licensed, regulated infrastructure. No security measure is perfect; if you believe your account has been compromised, contact us immediately.

9. Changes to this policy

We may update this policy as RSVPay evolves. Material changes will be notified by email or a notice on the platform. Continued use of RSVPay after a change takes effect constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, email us at rsvpay.ng@gmail.com.