Privacy policy

The organization that invited you, or that you are visiting, entered your details. It decides how your data is used and is responsible for it; Jikū processes it on its behalf, only to:

• send you the invitation, ticket, reminders and changes (cancellation, postponement);
• record your answer, your answers to the organizer's questions and any payment you declared;
• check your ticket at the entrance or call you in the queue;
• produce anonymous attendance statistics for the organization.

We do not sell your data and never use it for our own advertising.

You can erase your personal data at any time with the "Request deletion of my data" button on your invitation or ticket page. Erasure is immediate and permanent; only an anonymous record that a guest was invited remains. For any other request, contact the organization, or write to us and we will pass it on.

For organizations' and users' accounts, and for the public website: [Dénomination sociale], [Adresse du siège], Conakry, République de Guinée. Privacy contact: [confidentialite@domaine].

Declaration with the data protection authority: [Référence de la déclaration auprès de l'autorité de protection des données].

• Account: name, email, phone, password (stored as an irreversible hash), role, language.
• Organization: name, logo, colours, country, payment methods shown to its clients, settings.
• Guests and clients (on the organization's behalf): name, email and/or phone, answer, ticket category, answers to questions, attendance, declared payment status.
• Payments to Jikū: amount, reference, status. Card and Mobile Money details stay with the payment provider.
• Usage: technical logs (IP address, browser, errors), feedback and messages sent to support.

• Providing the service and performing the contract: account, events, sends, tickets, entrance checks, invoicing.
• Security and abuse prevention: logs, rate limiting, fraud detection (legitimate interest).
• Improving the service: cookieless, non-identifying audience measurement, and feedback given voluntarily (legitimate interest).
• Meeting our legal obligations: invoices, accounting, answers to authorities.
• Informing you of significant changes to the service (contract); any commercial newsletter requires your consent and can be turned off in one click.

Only authorized people at the organization concerned and at Jikū can access it. Our technical providers process it on our instructions:

• Hosting: Vercel (website), Render (application server), Neon (database).
• Email: Resend or Brevo, depending on the organization's configuration.
• WhatsApp: Meta Platforms (WhatsApp Business Platform).
• SMS: Nimba SMS (Guinea).
• Payments to Jikū: CinetPay.
• Error tracking: Sentry.
• Audience measurement: Umami, cookieless, on an instance we operate.

We disclose data to an authority only on a lawful request.

Several of these providers are located in the United States or the European Union. These transfers are necessary for the service; they rely on each provider's contractual data protection commitments, and connections are encrypted.

• Guests and clients: during the event or relationship, then automatic anonymization twelve months after the event (adjustable by the organization); immediately on an erasure request.
• Accounts: while the account is open, then thirty days for export before deletion.
• Invoices and accounting records: ten years, as OHADA accounting law requires.
• Technical logs: twelve months at most.

Encrypted connections (HTTPS), hashed passwords, session tokens in secure cookies, each organization's data kept separate, limited and logged staff access, regular backups. In the event of a data breach, we inform the organizations concerned and the competent authority within the time limits set by law.

You can ask to access, correct or erase your data, object to processing based on our legitimate interest, and ask for an export in a common format.

Write to [confidentialite@domaine] stating your request; we may ask you to prove your identity. We reply within one month. If you are not satisfied with our answer, you can contact the Guinean personal data protection authority.

Jikū uses only necessary cookies: the sign-in session and the chosen language. No advertising or cross-site tracking cookies. Audience measurement works without cookies and without storing IP addresses, so it does not require consent.

Organizer accounts are for adults only. An organization that invites minors (a school, a family event) makes sure it has their legal guardians' consent.

We update this policy when the service or the law changes. The date at the top of the page shows the version in force; significant changes are announced to organizations by email.