Attndly ("we", "us", or "our") operates the Attndly platform, an event management and ticketing service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
Account Information
When you create an account, we collect:
- Your name and email address
- Password (stored securely using industry-standard hashing)
- Profile photo (if you choose to upload one)
Social Authentication
If you sign in using Google, we receive your name, email address, and profile picture from Google. We also store authentication tokens necessary to maintain your session and, if you enable Google Sheets integration, to sync data on your behalf.
Event Information
When you create an event, we collect:
- Event details (name, description, dates, times, timezone)
- Event location (address, place name, and coordinates for physical events)
- Event images you upload
- Ticket and pricing configuration
Attendee and Buyer Information
When someone purchases tickets or registers for an event, we collect:
- Full name
- Email address
- Phone number
Payment and Payout Information
We collect payout details from event creators, including bank account information and business name, to facilitate payouts via our payment processor, Paystack. We do not store credit card or debit card numbers directly. All payment processing is handled by Paystack, and transaction data (such as payment references and amounts) is stored for record-keeping purposes.
Automatically Collected Information
- Session data: We store session information (including your IP address and browser user agent) in our database to maintain your login state.
- Geolocation: We use your IP address to detect your approximate country in order to set the appropriate default currency. This detection is cached for up to 24 hours and is not used for tracking purposes.
- Usage analytics: When you visit our public pages (such as the homepage, pricing, event pages and checkout, including checkout embedded on other websites), we record page views using Umami, a privacy-focused analytics tool that we host ourselves. This includes the page visited, the referring website, any campaign tags in the link you followed, your browser and device type, and your approximate location (country, region and city) derived from your IP address. Analytics are not used to identify you, and pages you visit while logged in are not tracked.
- Checkout activity: We record when a visitor opens checkout and when they complete the attendee details step, so event creators can see where visitors drop off before buying a ticket.
- Session recordings and heatmaps: For a sample of visits to our public pages, we record how the page is used (scrolling, clicks, mouse movement and page changes) to understand and improve the experience. Anything you type into a form field is masked in your browser before it is recorded. Pages that show personal details, such as tickets, order confirmations and logged-in account pages, are excluded from recordings.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Attndly platform
- Process ticket purchases and facilitate payouts to event creators
- Send event reminders to attendees (24 hours and 30 minutes before an event)
- Verify your identity and manage your account
- Generate QR codes and check-in codes for event attendance
- Enable team collaboration features (invitations, shared event access)
- Communicate with you about your account, orders, or events
- Provide event creators with analytics about visits to their event pages, such as page views, traffic sources, locations, devices and checkout drop-off
- Understand how the platform is used and improve its usability
- Detect and prevent fraud or abuse
3. How We Share Your Information
With Event Creators
When you purchase a ticket or register for an event, your name, email, and phone number are shared with the event creator so they can manage their event and communicate with attendees.
Event creators can also see aggregated analytics for their event pages, such as the number of visitors, where they came from and their approximate location. These analytics do not identify individual visitors.
With Payment Processors
We share order and buyer information with Paystack to process payments. Paystack's handling of your data is governed by their own privacy policy.
With Google (if enabled by the creator)
If an event creator enables Google Sheets integration, attendee data (name, email, phone, ticket type, order reference, and registration date) is synced to a Google Sheets spreadsheet in the creator's Google Drive account.
As Required by Law
We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.
4. Data Retention
- Account data is retained for as long as your account is active. You may request deletion of your account at any time.
- Order and transaction data is retained for accounting, tax, and legal compliance purposes, even after account deletion.
- Session data expires automatically after 120 minutes of inactivity.
- Session recordings are deleted automatically after 30 days.
- Deleted events are soft-deleted and may be retained in our systems for a limited period before permanent removal.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Password hashing using industry-standard algorithms
- HTTPS encryption for all data in transit
- Database-level locking during sensitive operations (e.g., ticket purchases) to prevent data inconsistencies
- Access controls and authorization checks throughout the platform
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and personal data
- Withdraw consent for optional features (e.g., Google authentication, Google Sheets sync)
- Export your data (event details, attendee lists)
To exercise any of these rights, please contact us at the email address provided below.
7. Cookies and Session Storage
We use session cookies to keep you logged in and to maintain your preferences while using the platform. These cookies are essential for the operation of the service. We do not use cookies for advertising or cross-site tracking.
Our analytics do not use cookies. During checkout, we store a small marker in your browser's session storage so the same checkout step is not counted twice. It contains no personal information and is cleared when you close the tab.
8. Third-Party Services
Our platform integrates with the following third-party services:
- Paystack: for payment processing and payout management
- Google: for social authentication and optional Google Sheets integration
Our analytics, session recordings and heatmaps run on Umami, open-source software that we host on our own infrastructure. This data is not shared with Umami's developers or any other third party.
Each of these services has its own privacy policy governing their handling of your data. We encourage you to review them.
9. Children's Privacy
Attndly is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at hello@attndly.co.
