Privacy policy

Last updated: July 2026 · Draft for legal review before public go-live

Passly ("we") processes personal data to operate event ticketing at passly.rw. This policy explains what we collect, why, and your choices.

Data we collect

• Account data — name, email, phone, password hash, role memberships
• Order & ticket data — events purchased, payment status, ticket codes, check-in timestamps
• Registration answers — optional fields requested by organizers (e.g. occupation for conferences)
• Technical data — IP address, browser type, device identifiers, and logs needed for security and reliability

How we use data

• Issue tickets and send order confirmations
• Enable organizers to manage attendees, exports, and door check-in
• Process payments through licensed payment partners
• Prevent fraud, enforce terms, and improve platform reliability
• Send account-related messages (e.g. password reset) when you request them

Sharing

Order and registration details are shared with the event organizer you buy from so they can run the event. Payment card and mobile-money data is handled by our payment partners; Passly does not store full card numbers. We may disclose data when required by law or to protect rights, safety, and security.

Retention

We retain account and transaction records while your account is active and as needed for legal, tax, and dispute purposes. Organizers may export attendee data for their events according to platform settings. You may request account deletion by contacting support — some records may be retained where required by law.

Security

We use industry-standard measures including TLS in transit, hashed passwords, and access controls. No online service is perfectly secure — use a strong unique password and report suspected breaches to support@passly.rw.

Your rights

Depending on applicable law, you may request access, correction, or deletion of your personal data. Contact support@passly.rw with your account email. We will respond within a reasonable timeframe.

Cookies & local storage

The web app uses browser local storage for session tokens and preferences (such as language). We do not use third-party advertising trackers on passly.rw v1.

Final privacy policy will be reviewed by counsel and published before public go-live on passly.rw.