Privacy Policy

zefesta is an app for planning celebrations: customers find and book event vendors, and vendors receive and answer booking requests. This policy explains what personal information we collect, why, who sees it, and the choices you have.

zefesta is operated by Zefesta Inc., 17015 121 NW, Edmonton, AB T5X 0H4, Alberta, Canada ("zefesta", "we", "us").

Questions or requests: privacy@zefesta.com.

1. What we collect

Information you give us

If you use Continue with Google, Google gives us your name and email address. We do not receive your Google password.

Information created when you use zefesta

• Bookings: requests, vendor replies, statuses, deposit and balance amounts and due dates.
• Payments: amounts, dates, method (for example e-transfer or cash), a reference, and receipts. Payments are recorded by our team. We do not collect or store card numbers or bank details in the app.
• Notifications: the notifications we send you, and whether you have read them.
• Device push token: an identifier that lets us send notifications to your phone.
• Agreement record: when you agreed to the Terms and which version.
• Account status: if an account is paused, suspended or banned, the reason is recorded for our team.

What we do not collect

• We do not collect your precise location. The city for an event or service is whatever you type.
• We do not read your contacts, calendar, microphone or camera. Vendors can choose photos from their own gallery to upload; we only receive the photos they pick.
• We do not use advertising trackers and we do not show ads.

2. How we use your information

• To run the service: create accounts, send booking requests, show listings, deliver messages and notifications.
• To record payments and send receipts by email.
• To send reminders, for example that a request is waiting for a reply or a payment is due.
• To keep zefesta safe: review new vendors, handle disputes and cancellations, and act on misuse.
• To meet legal duties, such as keeping financial records.
• To understand, in total numbers only, how the service is used (for example how many requests are sent).

We do not sell your personal information, and we do not use it for advertising.

3. Who sees your information

Other people on zefesta

• Vendors see the event name, type, date, city and your contact name when you send them a request, and your messages. They see your phone number and email only after the booking is confirmed (the deposit has been received). Vendors do not see what you paid.
• Customers see a vendor's public listing: business name, logo, services, packages, prices and photos. They see the vendor's phone number and email only after the booking is confirmed.
• Our team can see accounts, bookings, messages and payments in order to run the service and help with problems.

Companies that process information for us

These companies may only use the information to provide their service to us. Some of them are outside Canada, so your information may be processed in other countries and be subject to their laws.

When the law requires it. We may disclose information if a law, court order or government request requires it, or to protect someone's safety or our legal rights.

If zefesta changes hands. If the business is sold or merged, your information may pass to the new operator, who must continue to protect it under this policy.

4. How long we keep it

• Your account and listing: until you delete your account.
• Past bookings, payments and receipts: kept after an account is deleted, without your personal details, because we must keep financial records (in Canada, generally six years).
• Notifications: removed 30 days after you read them, or 90 days after they were sent if unread.
• Backups: deleted information can remain in secure backups for a short period before it is overwritten.

5. Deleting your account

You can delete your account in the app (Profile → Delete account) or by email. Your name, phone number, email, sign-in, photos and messages are removed. See Delete your zefesta account for the full details.

6. Your choices and rights

You can:

• See and correct your details in the app under Profile.
• Ask for a copy of the personal information we hold about you, or ask us to correct it.
• Turn off push notifications in your phone's settings. The in-app notification list keeps working.
• Withdraw consent by deleting your account. Some records are kept as described in section 4.
• Complain. If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

To make a request, email privacy@zefesta.com from the address on your account. We reply within 30 days.

7. How we protect it

• Information is encrypted when it travels between your phone and our servers.
• Access rules in our database limit each person to their own information and to the bookings they are part of.
• Phone numbers and emails are shared between a customer and a vendor only once a booking is confirmed.
• Only authorised team members can access the admin tools.

No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell the people affected and the regulators as the law requires.

8. Children

zefesta is for adults. You must be at least 18 to create an account. We do not knowingly collect information from anyone under 18. If you believe a minor has an account, contact us and we will remove it.

9. Changes to this policy

If we make an important change, we will tell you in the app or by email before it takes effect. The date at the top shows when the policy was last updated.

10. Contact