Privacy Policy

Last updated: 28 September 2026

Northline Events ("we", "us") provides event organizers with tools to manage guest lists, send invitations, and track RSVPs and check-ins. This page explains what personal data passes through the platform and how it is handled.

Two kinds of accounts

An organizer creates an account, sets up events, and uploads or enters guest details. A guest never creates an account — their name, phone number and RSVP are entered by the organizer, or submitted by the guest themselves on their personal invitation card page. In data-protection terms, the organizer is the controller of their guests' data, and Northline Events acts as a processor providing the platform they use.

What we collect

For organizer accounts: name, email address, organization name, and a securely hashed password (we never store your password in plain text). For guests: name, phone number, an optional prefix and email, RSVP status, card type, check-in / entrance-scan timestamps, and any contribution amount an organizer records against them. We also keep a log of messages sent (WhatsApp/SMS) for delivery troubleshooting, and standard technical logs (IP address, timestamps) generated by the web server.

How it's used

Guest data is used only to run the event it was collected for: generating personal invitation cards and QR entrance passes, sending invitations, reminders and thank-you messages, recording RSVPs, and enforcing entrance scan limits at check-in. We do not sell guest data, and we do not use it for advertising.

WhatsApp and SMS delivery

Messages are sent through WhatsApp and/or SMS using the organizer's own connected number or an approved messaging provider. Guest phone numbers are shared with that provider solely to deliver the message.

How long we keep it

Event and guest data is kept for as long as the organizer's account is active, so past events remain available to them, plus a reasonable backup retention window (currently up to 14 days of rolling backups) for disaster recovery. An organizer can ask us to delete their account and associated guest data at any time; contact details are below.

Your rights (guests)

If you're a guest and want to know what an event organizer holds about you, correct it, or have it deleted, the fastest route is to ask that organizer directly — they control the data. If you can't reach them, contact us using the details below and we'll assist where we're able to as the platform provider. Depending on where you're located, applicable data protection law (for example, Tanzania's Personal Data Protection Act, 2022, overseen by the Personal Data Protection Commission) may give you additional rights to access, correct, or request deletion of your personal data.

Security

Passwords are hashed with bcrypt and never stored in plain text. The site is served over HTTPS. Access to any event's guest list is restricted to that event's own organizer and the team members they've explicitly granted permission to.

Contact

Questions about this policy, or a request relating to your data, can be sent to info@northline-consultancy.co.tz.

This is a general-purpose policy provided as a starting point and is not a substitute for advice from a qualified lawyer familiar with your specific business and the jurisdictions your guests are in.