Privacy Policy

Last updated: Draft — [date]

Draft for counsel review. Aligns to NDPR (Nigeria) and GDPR (EU/UK) principles. — This document is not a substitute for legal advice.

This Policy explains how [Legal Entity Name] ("Konvener", "we", "us") collects, uses and protects personal data when you use Konvener.

Data we collect

Organizers: name, email, hashed password, organisation, and the workshops you create.
Participants: first name, institution, and the questions, comments, feedback, expectations and evaluation you submit during a workshop.
Technical: IP address and user-agent for security (rate limiting, abuse detection) and error diagnostics.

Cookies

Konvener uses one essential, first-party, httpOnly cookie to keep an organizer signed in, and a short-lived first-party cookie to identify a participant within their workshop. We set no advertising, analytics or third-party tracking cookies.

How we use data

To provide the service (run workshops, show the live agenda, route questions and feedback), to secure it (prevent abuse), and to comply with law. We do not sell personal data or use it for behavioural advertising.

Legal bases

Performance of a contract (providing the service), our legitimate interests (security and service integrity), and consent where required (e.g. push notifications). Organizers act as controllers for the participant data in their workshops; Konvener acts as processor (see the DPA).

Sharing

We share data only with sub-processors that help us run the service (hosting/database, payment processing, and — if enabled — a push-notification service and error-monitoring tool), each under contract. A current list is available on request.

Retention & deletion

We keep personal data only as long as needed to provide the service. On a deletion request we deactivate the data immediately, provide a full data report within 24 hours, and permanently erase it after a 60-day retention window.

Your rights

Subject to applicable law you may access, correct, export or delete your data, and object to or restrict certain processing. Contact us to exercise these rights.

International transfers

Where data is processed outside your country, we use appropriate safeguards as required by applicable law.

Contact

Data protection queries: legal@konvener.app. If you are in a region with a supervisory authority, you may also lodge a complaint with it.