Privacy policy

The organization that invited you, or that you are visiting, entered your details. It decides how your data is used and is responsible for it; Jikū processes it on its behalf, only to:

• send you the invitation, ticket, reminders and changes (cancellation, postponement);
• record your answer, your answers to the organizer's questions and any payment you declared;
• check your ticket at the entrance or call you in the queue;
• produce anonymous attendance statistics for the organization.

We do not sell your data and never use it for our own advertising.

You can erase your personal data at any time with the "Request deletion of my data" button on your invitation or ticket page. Erasure is immediate and permanent; only an anonymous record that a guest was invited remains. For any other request, contact the organization, or write to us and we will pass it on.

For organizations' and users' accounts, and for the public website: MRVIN100 SARLU, Kaporo Rails, commune de Ratoma, Conakry, République de Guinée. Privacy contact: [email protected].

• Account: name, email, phone, password (stored as an irreversible hash), role, language.
• Organization: name, logo, colors, country, payment methods shown to its clients, settings.
• Guests and clients (on the organization's behalf): name, email and/or phone, answer, ticket category, answers to questions, attendance, declared payment status.
• Payments to Jikū: amount, reference, status. Card and Mobile Money details stay with the payment provider.
• Usage: technical logs (IP address, browser, errors), feedback and messages sent to support.
• Conversations with the Jikū team: when you write to us on WhatsApp or through the site's form, your name, number, business and messages.

• Providing the service and performing the contract: account, events, sends, tickets, entrance checks, invoicing.
• Security and abuse prevention: logs, rate limiting, fraud detection (legitimate interest).
• Improving the service: cookieless, non-identifying audience measurement, and feedback given voluntarily (legitimate interest).
• Meeting our legal obligations: invoices, accounting, answers to authorities.
• Answering your questions and presenting Jikū (legitimate interest): when you write to Jikū on WhatsApp, an automated assistant may answer first. It says so, makes no decision about you, and hands over to a person on the team as soon as you ask.
• Informing you of significant changes to the service (contract); Jikū news and tips are only sent if you ticked the box at sign-up or turned the option on in your account settings. We keep the date and the wording you accepted, and you can withdraw this consent at any time from the settings or in one click from each message.

Only authorized people at the organization concerned and at Jikū can access it. Our technical providers process it on our instructions:

• Hosting: Contabo (servers and database, European Union).
• Website delivery, network protection and encrypted backup storage: Cloudflare.
• Email: useSend, which delivers through Amazon Web Services (Amazon SES), Resend and Brevo, or the email provider the organization configured.
• WhatsApp: Meta Platforms (WhatsApp Business Platform).
• SMS: Nimba SMS (Guinea), only when SMS sending is turned on.
• Payments to Jikū: DEXPAY (DEXCHANGE PAY), for online Mobile Money payments, and our bank, for the transfers you send us.
• Error tracking: Sentry.
• Audience measurement: Umami, cookieless, on an instance we operate.
• Conversations with the Jikū team (sales and support): Chatwoot and n8n, on instances we operate; Anthropic (Claude), for an automated assistant that answers first messages and hands over to a person on the team; Cal.com, to book a meeting with us. These tools only receive messages sent to Jikū, never the data of the organizations' guests and clients.

We disclose data to an authority only on a lawful request.

Several of these providers are located in the United States or the European Union. These transfers are necessary for the service; they rely on each provider's contractual data protection commitments, and connections are encrypted.

• Guests and ticket buyers: during the event, then automatic anonymization twelve months after the event; immediately at the guest's request.
• Service clients (appointments, day line): their name and number are removed automatically twelve months after the appointment or ticket.
• Accounts: while the account is open. On closure, requested by email, we send you an export of your data and then delete the account within thirty days.
• Professionals who contact us and conversations with the Jikū team: twelve months after the first contact.
• Invoices and accounting records: ten years, as OHADA accounting law requires.
• Technical logs: twelve months at most.

Encrypted connections (HTTPS), hashed passwords, session tokens in secure cookies, each organization's data kept separate, limited and logged staff access, regular backups. In the event of a data breach, we inform the organizations concerned within 72 hours, and the competent authority within the time limits set by law.

You can ask to access, correct or erase your data, object to processing based on our legitimate interest, and ask for an export in a common format.

Write to [email protected] stating your request; we may ask you to prove your identity. We reply within one month. If you are not satisfied with our answer, you can contact the Guinean personal data protection authority.

Jikū uses only necessary cookies: the sign-in session, the chosen language and the currency chosen to show prices. No advertising or cross-site tracking cookies. Audience measurement works without cookies and without storing IP addresses, so it does not require consent.

Organizer accounts are for adults only. An organization that invites minors (a school, a family event) makes sure it has their legal guardians' consent.

We update this policy when the service or the law changes. The date at the top of the page shows the version in force; significant changes are announced to organizations by email.