Provydr Technologies Ltd ("Provydr", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect data when you use the Provydr platform, including our Event Portal, Vendor Portal, main website, and related services.
By using Provydr, you agree to the practices described in this policy. If you do not agree, please discontinue use of our platform.
1. Information We Collect
Information you provide directly:
- Account registration: Name, email address, organisation name, and password when creating an account.
- Event registration: Name, email, phone, and any custom fields defined by the event organiser.
- Vendor profiles: Business name, contact information, service descriptions, portfolio images, and location.
- Payment details: Payment processing is handled by Paystack. We do not store full card numbers or bank account details.
- Communications: Messages sent through contact forms, support requests, and enquiries.
Information collected automatically:
- Usage data: Pages visited, features used, and time spent on the platform.
- Device information: Browser type, operating system, and device type.
- IP address: Used for security, fraud prevention, and rate limiting (hashed, not stored as plain text).
- Cookies: See section 6 below.
2. How We Use Your Information
- To create and manage your account and organisation profile
- To process event registrations and issue tickets and certificates
- To process payments via Paystack
- To send transactional emails (registration confirmations, payment receipts, certificates)
- To enable organisers to manage their events and communicate with attendees
- To provide vendor profiles and enable tender applications
- To provide customer support
- To maintain platform security and prevent fraud
- To improve our platform and services
- To comply with legal obligations
We do not use your data for unsolicited marketing without your consent. Platform-related notifications (new tenders, event updates) can be disabled in your Settings.
3. Sharing of Information
We do not sell your personal data. We share data only in the following circumstances:
- With event organisers: When you register for an event, your registration data is shared with the organiser who created the event on Provydr.
- With Paystack: Payment information is processed by Paystack in accordance with their own Privacy Policy.
- With Firebase (Google): Our database and authentication infrastructure is provided by Google Firebase. Data is stored in accordance with Google's security standards.
- As required by law: We may disclose data to comply with legal obligations, court orders, or government requests.
- Business transfers: In the event of a merger or acquisition, data may be transferred as part of that transaction.
4. Data Storage & Security
Your data is stored in Google Firebase (Firestore) which is hosted on Google Cloud infrastructure. We implement the following security measures:
- HTTPS encryption for all data in transit
- Firestore security rules restricting access to authorised users only
- Input sanitisation to prevent injection attacks
- Rate limiting to prevent brute-force attacks
- CSRF token validation on form submissions
- IP-based rate limiting (hashed) on email relay
Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and to protect your account credentials.
We retain your data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days, except where retention is required by law.
5. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated data.
- Portability: Request your data in a machine-readable format.
- Objection: Object to certain uses of your data.
- Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@myprovydr.com. We will respond within 14 business days.
6. Cookies
Provydr uses minimal cookies. We use session storage for CSRF token management and local storage for saving your portal preferences (such as language settings and theme).
We do not use advertising tracking cookies. If you use browser settings to block storage, some portal features may not function correctly.
7. Payment Data
All payment processing on Provydr is handled by Paystack. Provydr does not store full payment card numbers, CVV codes, or bank account credentials on our servers. When you make a payment, you are interacting directly with Paystack's secure payment infrastructure.
We store only the transaction reference, amount, status, and Paystack transaction ID for record-keeping and reconciliation purposes.
8. Children's Privacy
The Provydr platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately at privacy@myprovydr.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where material changes are made, notify users by email or prominent notice on the platform. Continued use of Provydr after changes constitutes acceptance of the updated policy.
For privacy-related enquiries, requests, or concerns:
