How EventVault collects, uses, stores, and protects your personal data.
EventVault Ltd is the data controller for personal data collected through this Platform. Registered in Nigeria. Contact: privacy@eventvault.com.
We process your data on the basis of contract performance to deliver the service you signed up for, legitimate interests for fraud prevention and platform security, and legal obligation to comply with Nigerian NDPR and other applicable laws.
We share data only with payment processors such as Paystack, Flutterwave, and Stripe; cloud infrastructure providers such as AWS who process data under data processing agreements; and law enforcement when required by law. We do not sell your data.
Account data is retained for the duration of your account plus 7 years for financial compliance purposes. You may request deletion of non-financial data at any time.
You have the right to access your personal data, correct inaccurate data, request deletion subject to legal retention requirements, object to processing, and request data portability. Contact privacy@eventvault.com to exercise these rights.
We implement TLS encryption in transit, AES-256 encryption at rest, VPC network isolation on AWS, and conduct regular penetration testing. Passwords are hashed using bcrypt with a cost factor of 12.