Privacy Policy
Last updated July 2026
This policy explains how EverAfter handles personal data. We are registered with the Data Protection Commission and follow Ghana's Data Protection Act, 2012 (Act 843).
1. Who is responsible for your data
For a couple's account, EverAfter is the data controller. For the guest lists a couple uploads, the couple is the controller and EverAfter is the processor, acting only on the couple's instruction.
2. What we collect
- Couple account details: name, email, phone, and login credentials.
- Guest details a couple provides: name, phone, email, seats, and RSVP responses.
- Payment references from our payment provider (no card numbers).
- Mobile Money references and amounts (never wallet credentials).
- Security logs of who did what and when.
3. How we protect it
Personal data is encrypted in transit and at rest, isolated per event so no couple can ever see another's data, and access is logged. Passwords are stored only as strong one-way hashes.
4. How long we keep it
Guest personal data is purged or anonymised a set period after the event unless the couple keeps an active gallery tier. Couples can request earlier deletion at any time.
5. Your rights
You may request access to, correction of, or deletion of your personal data. Guests can exercise these rights through the couple who invited them, or by contacting us; we will route the request appropriately.
6. Messaging opt-out
Every invitation message includes a way to opt out of further messages for that event.
7. Contact
To exercise your rights or ask about this policy, contact our support team.