Privacy Policy

PrivePas is a web-based event security and invitation management platform operating in Nigeria. We provide services to event organisers, event planners, and their guests. For privacy inquiries, contact us at privacy@privepas.com.

Account Information: When you register as an event owner or event planner, we collect your full name, email address, phone number, and a securely hashed password.

Event & Guest Data: We store event names, event dates, and guest lists (names and unique invitation tokens) that you upload or enter into our platform.

Payment Information: Payments are processed via Paystack, a PCI-compliant third party. PrivePas does not store your card number, CVV, or bank account details. We only retain the payment reference number and transaction amount for our records.

Usage Data: We collect anonymised analytics about how pages are used (page views, interaction patterns) to improve our service. No personally identifiable information is included in these analytics.

Communications: If you subscribe to our newsletter or contact us, we retain your email address and the content of your message.

We use your data to:

• Operate your account and provide our services
• Generate and deliver personalised QR-coded invitation cards
• Process payments and send access codes via email
• Send transactional emails (verification, password reset, access codes)
• Send platform updates if you have subscribed to our newsletter
• Improve and maintain the platform
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We share data only with:

• Paystack — payment processing. See Paystack's privacy policy at paystack.com/privacy.
• Email providers — for sending transactional emails (e.g. Gmail SMTP). We transmit only recipient email addresses and message content.
• Hosting & infrastructure — our hosting provider (Vercel) and database provider process data on our behalf under data processing agreements.
• Law enforcement — if required by applicable law or a valid legal order.

PrivePas uses strictly necessary HTTP-only cookies to maintain your login session. These cookies contain only an encrypted token and no personal information. They expire after 7 days or when you sign out.

We do not use advertising cookies or cross-site tracking. Our anonymous page-view analytics do not set third-party cookies.

We retain your account data for as long as your account is active. Guest lists and event data are retained until you delete them from your dashboard. Payment records are retained for 7 years as required by Nigerian financial regulations.

You may request deletion of your account and all associated data at any time by emailing privacy@privepas.com.

We protect your data with industry-standard measures including:

• HTTPS encryption for all data in transit
• bcrypt password hashing (no plaintext passwords stored)
• HTTP-only session cookies with SameSite protection
• Separate JWT secrets per user type
• Login rate limiting and account lockout protection

Despite these measures, no internet transmission is 100% secure. We encourage you to use a strong, unique password.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information via your account settings
• Delete your account and data (email us to request)
• Unsubscribe from marketing emails at any time (every email contains an unsubscribe link)
• Object to processing where we rely on legitimate interests

To exercise these rights, contact privacy@privepas.com.

PrivePas is not intended for children under 18. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be notified by email to registered users. The "Last updated" date at the top indicates when the policy was last revised. Continued use of PrivePas after changes constitutes acceptance of the revised policy.

Privacy questions or data requests: privacy@privepas.com

General support: support@privepas.com