The short version
- A host uploads a guest list and Ekaabo Invites delivers the host's invitation to it. The host decides who is messaged. We deliver and report back.
- We collect what we need to run your account, send your messages and show you the results. We do not sell personal data and we do not use it for advertising.
- Anyone who receives a message can stop it. Tap the stop link or reply STOP, and no host can message that number or email address again through Ekaabo Invites on that channel. Every email also has a Report this email link, for anything that looks like a scam or spam.
- You can ask us to show, correct, export or delete your data. Write to privacy@ekaabohq.com.
1. Who we are
Ekaabo Invites is a product of 1908 Hub Limited ("Ekaabo", "we", "us"). Our address is 13 Ladipo Avenue, Lonlo Bus Stop, Iju-Ishaga, Lagos, Nigeria. For privacy questions write to privacy@ekaabohq.com.
We follow the Nigeria Data Protection Act 2023 and the regulations made under it.
Two roles matter in this policy. For your account details, sign-in security and the do-not-message list, we decide why and how the data is used. For the guest contact details a host uploads, the host decides why and how they are used, and we handle them on the host's behalf and on the host's instructions.
2. Who this policy covers
- Hosts and their team members: people and organisations that create an Ekaabo Invites account to send invitations.
- Guests: people whose phone number or email address a host has added, and who may receive a message.
- Visitors: people who browse this website.
3. What we collect
From hosts and team members
Your name, your email address and your password. We store the password only as a one-way hash, so no one at Ekaabo can read it. If you invite a team member, we keep their email address and the role you give them. We also keep your IP address when you sign in or use public forms, to limit abuse and protect accounts.
What hosts add to the service
- Guest lists: first name, last name, phone number and email address, and the names of your lists. You can add people by typing them in, by uploading a CSV file, or by connecting a Google Sheet. If you connect a sheet, we read the sheet you choose to keep your list up to date.
- Campaigns: the message text, your RSVP link, any image you attach, the audience and the schedule, including reminders.
Results of sending
For each guest and message we keep whether it was accepted, delivered or read, whether the guest tapped the RSVP link and when, and any reply the guest sends back. Replies appear in the host's inbox. We also keep a record of opt-outs. Every email we send has a Report this email link. If a guest uses it, we keep the report, the time and the campaign it came from, and we stop all further emails to that address. We also count, for each host, how many emails were sent, delivered, bounced or reported as spam.
Reply addresses and sender names
A host can set a reply address and a sender name for its emails. We send a link to the reply address and use it only after its owner opens the link, so nobody can have replies sent to an address that is not theirs. We keep the address, whether it was confirmed and when.
Payments
Credits are bought by bank transfer. We keep the top-up request, the amount, the payment reference, the status and a ledger of credits added and used. We do not collect or store card details.
Technical information
The records any online service needs to run and stay secure, such as server logs and the sign-in cookies described below.
4. If you are a guest
If you received a message from Ekaabo Invites, a host gave us your phone number or email address. We got it from the host, not from you.
- We use it only to deliver that host's message and to show the host whether it was delivered, read or answered.
- Each message carries a personal link. When you tap it we record that you tapped and when, then send you to the host's own RSVP page. We do not control that page, so its privacy practices are the host's.
- To stop messages, tap the stop link in the message where one is shown, or reply STOP to a WhatsApp message. We add your number or email address to a do-not-message list. After that, no host can message it again through Ekaabo Invites on that channel.
- To see or correct what a host holds about you, ask the host. You can also write to us at privacy@ekaabohq.com and we will help.
5. Why we use it
- To create and run your account, and to sign you in securely.
- To send the messages hosts ask us to send, to show delivery and RSVP results, and to deliver replies.
- To sell and track credits, and to keep the financial records the law requires.
- To prevent abuse, fraud and spam, and to keep the do-not-message list working. This includes limiting how many emails a new account can send each day, and checking sender names, links and wording in emails against lists of what is not allowed.
- To switch off a host's email sending, automatically or by our team, when guests report its emails as spam, when many of its emails bounce, or when our checks find signs of a scam. We look at the reports and the sending figures for that host to decide.
- To answer questions, fix problems and improve the service.
Our legal grounds are: performing our contract with you, the legitimate interests described above (security, preventing abuse, honouring opt-outs), meeting legal obligations, and consent. The host must have the consent of the people on their list before messaging them. See the Terms of Service.
We do not sell personal data. We do not use it for advertising.
7. Data outside Nigeria
Some of these providers process data in other countries. When data leaves Nigeria we rely on the safeguards the Nigeria Data Protection Act allows.
8. How long we keep it
- Account data and what you add: while your account is open. Hosts can delete contacts, lists and campaigns in the app at any time.
- Payment and credit records: for as long as the law requires.
- The do-not-message list: for as long as needed so that an opt-out keeps working.
- After you ask us to close your account: we delete or anonymise your account data within 30 days, except what the law requires us to keep.
9. Your rights
You can ask to see the data we hold about you, correct it, delete it, receive a copy, object to how it is used, or withdraw consent you gave us. Write to privacy@ekaabohq.com. We reply within 5 business days.
If you are not satisfied you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
10. Security
- Passwords are stored only as one-way hashes, and new passwords are checked against lists of passwords known to have been breached.
- Data is encrypted in transit with TLS.
- Sign-in tokens are kept in cookies that page scripts cannot read.
- Access is limited by role, and public links are personal to each guest.
- If we find a breach that puts personal data at risk, we will tell the people affected and the Commission within 72 hours, as the law requires.
12. Children
Ekaabo Invites is for people aged 18 and over. We do not knowingly collect a child's data to create an account. If you believe a child has an account, tell us and we will remove it.
13. Changes to this policy
If we make a material change, we will email account holders at least 14 days before it takes effect. The date at the top of this page always shows when it was last updated.
14. Contact us
Privacy: privacy@ekaabohq.com
General: hello@ekaabohq.com
Address: 1908 Hub Limited, 13 Ladipo Avenue, Lonlo Bus Stop, Iju-Ishaga, Lagos, Nigeria