Privacy Policy

Huvent Ltd is the data controller for personal data we collect about account holders and visitors to our marketing site. We are based in Kenya and handle personal data in line with the Data Protection Act, 2019 and regulations issued by the Office of the Data Protection Commissioner (ODPC).

For guest data that an organizer uploads and manages through their events, the organizer is the data controller and Huvent acts as a data processor on their behalf (see “Organizers and guests” below).

We collect the following categories of personal data:

• Account data — your name, email address, password (stored hashed), organization or professional role, and preferences you set.
• Event and guest data — information organizers add about their events and guests, such as guest names, emails, phone numbers, RSVP responses, seating, dietary notes and check-in status.
• Uploads and media — photos, cover images, guestbook entries, signatures and other files uploaded by organizers or guests.
• Payment data — plan and billing records. Card and mobile-money details are collected and processed directly by our payment provider, Paystack; we do not store full card numbers.
• Usage and device data — IP address, browser and device type, pages viewed, and diagnostic logs, collected to run and secure the Service.
• Communications — messages you send us for support and your email/notification preferences.

• To create and manage accounts and provide the Service.
• To deliver invitations, RSVPs, reminders and other event communications you configure.
• To process subscriptions and payments and issue receipts.
• To secure the Service, prevent abuse, and enforce our Terms.
• To provide support and respond to your requests.
• To improve features and understand how the Service is used.
• To send service and, where you have opted in, product updates.

Under the Data Protection Act, 2019 we rely on: performance of a contract (to provide the Service you sign up for); your consent (for optional communications and certain uploads); our legitimate interests (to secure and improve the Service); and compliance with legal obligations. You may withdraw consent at any time where processing is based on it.

We do not sell personal data. We share it only with service providers who process it on our instructions, including:

• Cloud hosting and database providers that run the Service.
• Object storage providers used to hold uploaded media.
• Paystack, our payment processor, for subscriptions and billing.
• Email and push-notification providers used to deliver messages.

We may also disclose data where required by law, to protect our rights, or in connection with a merger or acquisition, subject to this policy.

Some of our providers process data outside Kenya. Where personal data is transferred abroad, we take steps required by the Data Protection Act, 2019 to ensure it remains protected, including using providers that offer appropriate safeguards.

We keep account and event data for as long as your account is active. When you delete an event or close your account, we delete or anonymize the associated personal data and uploaded media within a reasonable period, except where we must retain records to meet legal, accounting or security obligations. Organizers can delete guest records and media from within their events at any time.

Under the Data Protection Act, 2019 you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where the law allows.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these rights, contact us at hello@huvent.com.

We use technical and organizational measures — including encryption in transit, hashed passwords, access controls and audit logging — to protect personal data. No system is completely secure, but we work to protect your information and to notify you and the ODPC of a breach where required by law.

When an organizer collects guest information through Huvent, the organizer decides what is collected and why, and is the data controller for that guest data; Huvent processes it on their instructions. Organizers are responsible for having a lawful basis to collect guest details and to invite guests, and for obtaining any consent needed to upload guests’ photos or personal information. Guests with questions about a specific event should contact that organizer; you may also contact us and we will help route the request.

We use strictly necessary cookies to keep you signed in and to secure the Service. When configured, we also use Google Analytics 4 (GA4) to understand how the marketing site and product are used (for example, page views and whether someone starts a free account or contacts us). GA4 may set cookies or use similar storage in your browser. You can control cookies through your browser settings; disabling essential cookies may stop parts of the Service from working. You can also use Google’s tools to opt out of Analytics measurement where available.

The Service is not directed to children under 18, and we do not knowingly create accounts for them. Organizers who collect data about minors as guests are responsible for obtaining the consent required by law.

We may update this policy from time to time. We will post the updated version here and revise the effective date above, and we will notify account holders of material changes.

Questions about this policy or your data? Email hello@huvent.com or reach our support team at hello@huvent.com. You also have the right to contact the Office of the Data Protection Commissioner of Kenya.