Privacy Policy

When an organization uses Flowvent to collect registrations, that organization is the data controller for the attendee data it gathers, and Flowvent acts as a processor on its behalf. For our own marketing site and account data (e.g. an organizer's login), Flowvent is the controller.

• Account data — name, email, password hash, and organization details for organizers.
• Registration data — the answers attendees submit on a form (e.g. name, email, phone, and any custom or subform fields the organizer adds, such as a child's name and date of birth).
• Payment metadata — amount, currency, status, and a payment reference. Card details are handled directly by our payment processor; Flowvent never stores card numbers.
• Activity data — check-in scans, ticket issuance, and basic technical logs needed to run and secure the service.

We use personal data to:

• Deliver the registration, payment, ticketing, and check-in features;
• Send transactional email (confirmations, tickets, password resets);
• Group and sort attendees as configured by the organizer (e.g. age-based classes);
• Protect the platform from fraud and abuse, and meet legal obligations.

We do not sell personal data, and we do not use attendee registration data for our own advertising.

We share data with the event organizer you registered with, and with the sub-processors needed to operate the platform:

• Paystack — payment processing;
• Resend — transactional email delivery;
• Cloud storage / hosting — to store uploads (e.g. event banners) and run the service.

We may also disclose data where required by law or to protect the rights, safety, and security of our users and the platform.

Some events (for example children's ministry registrations) collect a child's details. That data is provided by the registering parent or guardian, is controlled by the event organizer, and is used only to run the event and group children appropriately. Organizers must have the right to collect it.

We use strictly-necessary cookies to keep you signed in. Sessions are scoped per host (each organization subdomain has its own session), so signing in on one workspace doesn't sign you in on another. We do not use third-party advertising cookies.

We keep registration and payment records for as long as the organizer maintains the event, and as needed for legal, tax, and dispute-resolution purposes. Organizers can archive or request deletion of attendee records; deletion requests are honoured subject to records we must retain by law.

Depending on your jurisdiction you may have the right to access, correct, delete, or export your personal data, or to object to certain processing. Because the event organizer is the controller of attendee data, please contact them first; we will support them in fulfilling valid requests, and you can also reach us below.

We protect data with encryption in transit, hashed credentials, host-scoped sessions, and access controls. No system is perfectly secure, but we work to safeguard your information and to notify affected users of a breach where required by law.

We may update this Policy from time to time. When we do, we'll revise the "Effective" date above; material changes will be communicated by email or an in-app notice.

Questions about this Policy or your data can be sent to support@flowvent.app.

This Policy is provided for general guidance and may not substitute for advice from a qualified lawyer in your jurisdiction.