Festiva Privacy Policy

1. Information We Collect

Account information: When you sign up, we collect your name, email address, phone number, and the institution/campus you select. If you sign in with Google, we receive your name, email, and profile picture from your Google account.

Vendor information: If you apply to sell on Festiva, we collect additional information to verify your identity, including a government-issued ID, and bank account details for receiving payouts.

Transaction and payment information: We record your orders, wallet balance and transaction history, and payment references. Payment card details are processed directly by Flutterwave, our payment processor — we do not store your full card number.

Location/campus data: We use your selected institution to show you relevant vendors and events.

Usage data: We may collect information about how you use the app (pages visited, features used) to improve the service.

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Process orders, payments, and payouts
• Verify vendor identity and prevent fraud
• Send transactional emails (order confirmations, receipts, sign-in links, password resets)
• Respond to support requests and disputes
• Improve and maintain the platform

3. How We Share Your Information

We share information with:

• Flutterwave, to process payments and payouts
• Resend, to deliver transactional emails
• Google, if you choose to sign in with Google
• Other users, in limited ways necessary for transactions (e.g., a vendor sees a buyer's order details to fulfill it; a buyer sees a vendor's storefront information)
• Administrators of your institution, for approving vendor applications and resolving disputes

We do not sell your personal information to third parties.

4. Data Retention

If you delete your account, we clear your profile information (name, phone, avatar, and similar identifying fields) and sign you out. However, we retain order history, wallet transaction records, and related financial records even after account deletion, as required for accounting, dispute resolution, and legal compliance. This information is retained in a de-identified or access-restricted form where possible.

5. Data Security

We use industry-standard measures to protect your data, including encrypted connections, database-level access controls, and restricted access to sensitive documents (such as vendor identity documents), which are only accessible to authorized administrators.

6. Your Rights

You can access and update most of your account information directly in the app. You can request account deletion at any time, subject to the retention described in Section 4. To make a request regarding your data, contact us at support@festiva.site.

7. Children's Privacy

Festiva is intended for use by university students and is not directed at children under 13. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date.

9. Contact Us

If you have questions about this policy or how your data is handled, contact us at support@festiva.site.