Celeventic Legal Center

Privacy Policy

How Celeventic collects, uses, and protects your personal data across InvitationOS and VendorOS.

Version 1.2.0 · Effective 12 Jul 2026, 1:35 pm

Effective Date This Privacy Policy applies to all users of Celeventic — organisers, vendors, guests, and administrators.

Data Controller Celeventic is the data controller for personal information processed through our platform. Primary place of business: Republic of Ghana.

Contact: Celeventic@gmail.com | Phone: 020 961 2770

Scope This policy covers data processed through:

Account registration and authentication (including NextAuth sessions and optional 2FA)
InvitationOS orders, guest portals, RSVP, and QR admission
VendorOS profiles, leads, media uploads, and marketplace interactions
Payments via Paystack (we receive references and metadata, not full card numbers)
Communications (email, SMS, WhatsApp where enabled)
Privacy Center consent records and cookie preferences

We design this policy with reference to the Ghana Data Protection Act, 2012 (Act 843).

Data We Collect

Category	Examples
Account	Name, email, phone, role, password hash
Event & invitation	Event title, date, venue, photos, messages, blocks
Guest data	Names, RSVP status, dietary notes, QR tokens (uploaded by organisers)
Vendor	Business name, category, portfolio media, verification documents
Payment	Paystack reference, amount, status, purpose
Technical	IP address, device type, browser, session logs
Consent	Terms version, privacy version, cookie choice, portfolio opt-in

How We Use Data We process data to: deliver invitation and event services; operate VendorOS; process payments; send service notifications; provide Celeventic Intelligence features; prevent fraud; maintain security audit logs; and comply with legal obligations.

Legal Basis Contract performance (fulfilling your order); legitimate interests (security, analytics, service improvement); consent (marketing, portfolio showcase, non-essential cookies); and legal obligation.

Data Sharing We share data with: Paystack and other payment processors; hosting providers; email/SMS/WhatsApp providers; designers assigned to your order; and authorities when required by law. We do not sell personal data.

Retention Account data is retained while active and for a reasonable period after closure. Payment and order records are kept for accounting, disputes, and legal compliance. Guest RSVP data may be retained per organiser settings and event lifecycle.

Your Rights Under Act 843 you may access, correct, delete, restrict, or object to processing, and withdraw consent. Exercise rights via [Data Rights](/legal/data-rights) or Dashboard → [Privacy Center](/dashboard/privacy-center).

Cookies See our [Cookie Policy](/legal/cookie). Manage preferences in Privacy Center or via the site cookie banner.

Security We use access controls, encryption in transit, audit logging, and staff confidentiality obligations. Report concerns to Celeventic@gmail.com.

Children's Data Services are not directed at children under 16 without guardian involvement. Organisers are responsible for lawful guest data collection.

Updates Material changes are published in the Legal Center and may require re-acceptance.

Contact Celeventic — Celeventic@gmail.com | 020 961 2770