Privacy Notice

Depending on how you use Sambazah, we may collect:

• Account and contact information, such as your name, email address, optional phone number, profile preferences, city, and state.
• RSVP and attendance information, including event selections, party size, account-claim status, and check-in status.
• Organizer and event information, including organization profiles, verification material, event details, images, venues, and roster activity.
• Safety and support information, such as reports, moderation records, support correspondence, and security audit records.
• Technical and usage information, such as device and browser details, pages viewed, feature interactions, error diagnostics, and approximate location derived from an address or a location request you choose to allow.

Please do not send sensitive information through event descriptions, public profiles, reports, or ordinary support email unless it is necessary for us to address your request.

• Provide event discovery, free RSVP, organizer, check-in, and moderation features.
• Authenticate accounts, secure the service, prevent abuse, and investigate incidents.
• Send account, RSVP, security, and service messages.
• Review organizations, events, and reports and enforce our guidelines.
• Measure product reliability and improve the Sambazah experience.
• Comply with law and protect Sambazah, our users, and the public.

We do not currently use your contact information to enable paid ticketing or WhatsApp-based event ingestion. If those services are introduced and require materially different processing, we will update this notice and obtain any consent required by law.

We share information only as needed to operate Sambazah, fulfill your requests, protect the service, or comply with law. This can include:

• Event organizers. When you RSVP through Sambazah, the organizer of that event can access relevant roster details, including your name, email, party size, and check-in status.
• Service providers. We use providers such as Supabase for database, authentication, and storage; Render for application hosting; Resend for transactional email; PostHog for limited product analytics; Sentry for error monitoring; and Mapbox for maps and location search. They process information for us under their own service terms and privacy commitments.
• Legal and safety recipients. We may disclose information when reasonably necessary to comply with law, enforce our terms, respond to abuse, or protect rights, safety, and property.
• Business transfers. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale, subject to applicable law.

We do not sell personal information for money or use it for cross-context behavioral advertising. Public event and organizer information is visible to anyone who visits the service.

Some events send you to an organizer-selected third-party site. Sambazah does not receive the registration or payment details you submit on that site. The external provider and organizer control their own data practices. Review the destination and its notices before continuing. See our External Registration Notice.

Sambazah uses limited browser storage and similar technology to maintain sign-in state, remember service preferences, prevent abuse, and measure approved product interactions. Current analytics are designed to avoid names, email addresses, authentication material, and other direct personal identifiers.

If you allow browser location access, your browser provides coordinates so Sambazah can help find nearby events. You can deny or revoke that permission in your device or browser settings and use location search instead.

We retain information for as long as reasonably needed to operate the service, maintain event and RSVP records, meet legal obligations, resolve disputes, enforce agreements, and protect users. Retention can vary by record type. We use technical and organizational safeguards appropriate to the nature and sensitivity of the information, but no system can guarantee absolute security.

You may update available profile information in account settings. You may also request access, correction, export, or deletion of your personal information. Some information may be retained when required for security, fraud prevention, legal compliance, or the rights of others.

Email privacy@sambazah.com from the address associated with your account. We may need to verify your identity before acting on a request.

Sambazah is a general-audience event service. Sambazah accounts are for people 18 or older. Adults may manage RSVPs for family members and guests. We do not knowingly permit children to create accounts. If you believe a person under 18 controls an account, email privacy@sambazah.com so we can review it. Adults remain responsible for any minors in their RSVP party. Do not submit a minor's name, email address, phone number, precise location, photo, or other personal information through a Sambazah RSVP or account.

We may update this notice as Sambazah changes. We will post the revised notice and update its effective date. Material changes may also be communicated through the service or by email when appropriate.