Privacy Policy
Last updated: February 2025
1. Data We Collect
When you RSVP to an event or create an account, we may collect:
- Full name
- Email address
- Phone number
- Check-in timestamps and location
- Table reservation and payment details
We also collect standard usage data such as browser type, device information, and pages visited to improve the Platform.
2. How We Use Your Data
- To process RSVPs, check-ins, and table reservations
- To provide venue owners with guest intelligence and segmentation
- To provide organizers with aggregate event analytics
- To enable rep attribution and performance tracking
- To detect churn, identify loyal guests, and power venue CRM features
- To process payments through Paystack
- To communicate important updates about events you have RSVP’d to
3. Data Ownership Model
Signal operates a tiered data ownership model:
Venues — Full Guest Intelligence
Venues receive complete guest profiles including names, contact information, visit history, spending patterns, and engagement segmentation (Superfan, Loyal, At-Risk, Churned).
Organizers — Aggregate Metrics Only
Organizers see total RSVPs, check-in counts, show rates, and repeat attendance rates. They do not receive guest names, phone numbers, or any personally identifiable information across events.
Brands & Labels — Anonymised Insights
Brand partners and labels receive only anonymised, aggregate audience insights. They never receive individual guest profiles or contact information.
4. Third-Party Services
We use the following third-party services to operate the Platform:
- Clerk — Authentication and identity management
- Paystack — Payment processing for paid events and table reservations
- Vercel — Application hosting and deployment
- Supabase / PostgreSQL — Database hosting
Each service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.
5. Security
All data is transmitted over HTTPS. Access to guest data is authentication-gated and restricted based on account type. Door staff access is protected by venue-specific PINs and codes. We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Venue-owned guest data is retained until the venue deletes their account or requests data removal. You may request deletion of your personal data at any time by contacting us.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your personal data
- Object to processing of your data in certain circumstances
- Request a portable copy of your data
Venue owners may export their full guest database at any time.
8. Governing Law
This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Regulation (NDPR). Any disputes shall be subject to the exclusive jurisdiction of the courts of Lagos State, Nigeria.
9. Contact
For privacy-related enquiries or to exercise your rights, reach out via our contact page.