Privacy Policy

1. Who we are

Event Host is a digital invitation and RSVP platform operated by Kinpin Arts Media, registered in Zambia, with its registered office at Unit C11, Chamba Valley Shopping Plaza, Maposa Road, Lusaka, Zambia.

In this policy, "we" and "us" mean that company. "You" means whoever is reading it — a host with an account, or a guest who received an invitation from one.

2. What we collect

Account information

When you create a host account we store your name, email address, and optionally your phone number, company name and a profile photo.

Event content

Everything you enter when building an event: its title, description, date, venue and location, cover image, chosen invitation template and design settings, table layouts, and any photos uploaded to the event gallery.

Payment information

Event credits are purchased through our payment provider, Lenco. Card and mobile-money details are entered on their systems, not ours — we never see or store your full card number or mobile-money PIN. We keep a record of each transaction: amount, currency, reference, status and timestamp.

Technical information

We record the time and IP address of your most recent sign-in, and our servers keep standard access logs. API tokens issued to your account expire after seven days.

3. Guest data you upload

When you add or import a guest list, you give us other people's information — typically names, email addresses and phone numbers. When those guests respond, we also store their RSVP status, party size, dietary notes or other answers you asked for, their check-in time if you scan them at the door, and any photos they upload to your event gallery.

You are responsible for that data. You must have a legitimate reason to hold your guests' contact details and to pass them to us for the purpose of inviting them. We process that data on your instructions — to deliver invitations, collect RSVPs and run check-in — and for nothing else. We do not use your guest list to market to those guests, and we do not sell it.

4. How we use it

• To create, host and display your event invitation pages
• To deliver invitations and RSVP confirmations, and to collect responses
• To run guest check-in, QR badges and table photo uploads
• To process event credit purchases and keep a billing history
• To send service email you cannot opt out of — email verification, password resets, and notices when your account email is changed
• To send optional notification email, controlled by the toggles in your account settings
• To publish a review on our homepage, but only one you wrote and submitted yourself, and only after we approve it
• To keep the service secure, prevent abuse, and meet our legal obligations

5. Who we share it with

We do not sell personal information. We share it only with the service providers we need to run the platform:

• Lenco — payment processing for event credits
• Our email delivery provider — delivery of invitation and account email
• Our hosting provider — servers and database storage

We may also disclose information where we are legally required to, or where it is necessary to protect our rights or someone's safety.

Note that a published event invitation page is public. Anything you put on it — including the venue, the date and any photos in the gallery — can be seen by anyone with the link, and events listed on our Discover page can be found by anyone.

6. Cookies

We use a small number of strictly necessary cookies, and load some assets from third parties. This is set out in full in our Cookie Policy.

7. How long we keep it

• Account data — until you delete your account
• Event and guest data — until you delete the event, or delete your account
• Payment records — kept as long as required for tax and accounting purposes, even after account deletion

Deleting your account from account settings removes your profile, your events and their guest lists. Approved reviews you have published keep the name and context captured at the time you submitted them, because they are part of a public page.

8. Your rights

You can ask us to:

• Give you a copy of the personal information we hold about you
• Correct anything inaccurate — most of it you can edit yourself in account settings
• Delete your account and its data
• Stop sending you optional email, which you can also do from the notification toggles

If you are a guest rather than a host and want your details removed from an event, the fastest route is to ask the host who invited you, since it is their guest list. You can also email us and we will pass the request on.

To exercise any of these rights, email info@eventhostzm.com. We aim to respond within one business day.

9. Security

Passwords are stored hashed, never in plain text. Traffic to the site is encrypted in transit. Access to production data is limited to staff who need it. RSVP and check-in links use unguessable tokens, and sensitive actions are rate-limited.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as required by law.

10. Children

Event Host is not intended for children under 18, and we do not knowingly collect their information from them directly. A host may add a child to a guest list; where that happens, the host is responsible for having the permission of a parent or guardian.

11. Changes

We may update this policy as the service changes. The "last updated" date at the top of this page always reflects the current version. If a change materially affects your rights, we will tell you by email or with a notice in the app before it takes effect.