Privacy Policy
Last updated: January 25, 2026
Event Parlour ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our event management platform, website, and services (collectively, the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
2.1 Information You Provide
- Account Information: Email address, username, password (hashed), profile picture/avatar
- Authentication Data: OAuth account information when you sign in with Google (including Google ID, email, name, profile picture)
- Event Information: Event details, descriptions, dates, locations, images, speaker information, ticket types and pricing
- Payment Information: Payment method details (processed securely through third-party providers), transaction history, billing information
- KYC Information: For organizers requiring verification: full name, phone number, date of birth, government-issued ID type and number, identification documents
- Workspace Information: Workspace name, description, member information, role assignments
- Channel Content: Posts, messages, reactions, and interactions within event channels
- Ticket Information: Purchased tickets, transfers, scan history
- Feedback: Feedback, bug reports, and feature requests submitted through our platform
2.2 Automatically Collected Information
- Device Information: IP address, browser type, device type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent, click patterns, search queries
- Session Information: Login sessions, session duration, location data (if enabled)
- Cookies and Tracking: See our Cookie Policy for details
We use the collected information for the following purposes:
- Service Provision: To provide, maintain, and improve our Service, including event creation, ticket sales, payment processing, and user management
- Authentication: To authenticate users, manage accounts, and provide secure access to the platform
- Payment Processing: To process payments, calculate fees, manage withdrawals, and handle refunds
- Communication: To send notifications, updates, event reminders, and respond to your inquiries
- Security: To detect, prevent, and address security issues, fraud, and unauthorized access
- Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights
- Analytics: To analyze usage patterns, improve user experience, and develop new features
- Personalization: To personalize your experience and provide relevant content and recommendations
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Payment Processors
We share payment information with third-party payment processors (Paystack, Stripe, M-Pesa) to process transactions. These providers have their own privacy policies and are PCI-DSS compliant.
4.2 Service Providers
We may share information with service providers who assist us in operating our platform, including hosting, analytics, email delivery, and customer support services.
4.3 OAuth Providers
When you sign in with Google, we receive information from Google in accordance with Google's privacy policy and OAuth scopes (profile, email).
4.4 Legal Requirements
We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.
4.5 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4.6 Public Information
Information you choose to make public (such as event details, public profile information, channel posts) will be visible to other users and the general public.
We implement industry-standard security measures to protect your information:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Secure password hashing (passwords are never stored in plain text)
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- PCI-DSS compliance for payment processing
- Secure session management and token-based authentication
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
You have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
- Portability: Request a copy of your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications (transactional emails may still be sent)
- Cookie Preferences: Manage cookie settings through your browser
- Account Settings: Update your profile, notification preferences, and privacy settings through your account dashboard
To exercise these rights, please contact us through the feedback feature in the platform or email us at the address provided in our Terms of Service.
We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:
- Account Data: Retained while your account is active and for a reasonable period after account deletion for legal and business purposes
- Payment Records: Retained for at least 7 years as required by financial regulations
- Event Data: Retained for the duration of the event and a reasonable period thereafter
- KYC Documents: Retained as required by applicable KYC and anti-money laundering regulations
- Legal Records: Retained as required by law or for dispute resolution
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by us
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access, rectify, or erase your personal data
- Right to restrict or object to processing of your personal data
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
If you have questions about this Privacy Policy or our data practices, please contact us through the feedback feature in the platform or refer to our Terms of Service for contact information.