Privacy Policy

Last updated 1 November 2026

Kwa ufupi: Tunatumia taarifa zako na za wageni wako kwa ajili ya tukio lako tu: kutengeneza kadi, kutuma mialiko, kupokea majibu, kufuatilia michango na kupokea wageni mlangoni. Hatuuzi taarifa zako na hatuzitumii kwa matangazo. Pesa za michango haziingii kwetu. Unaweza kuomba kuona, kurekebisha au kufuta taarifa zako kwa kutuandikia events@envelopbox.com.

This policy explains what personal data EnvelopBox ("EnvelopBox", "we", "us") collects when you use envelopbox.com, why we use it, who we share it with and the choices you have. It is written to meet the Personal Data Protection Act, 2022 of Tanzania and its regulations.

1. Who we are

EnvelopBox is a digital invitation and event service operated by EnvelopBox, Dar es Salaam, Tanzania. For any privacy question or request, email events@envelopbox.com.

2. Hosts, guests and our role

Hosts are people and organizations who create events on EnvelopBox. For your own account, EnvelopBox decides how your data is used.
Guests are people a host invites. A host gives us their guests' names and contact details so we can provide the service for that host's event. We use guest data only on the host's behalf and for the purposes in this policy.
Hosts are responsible for having a lawful reason to share their guests' details with us and to contact them about their event.

3. The data we collect

Host account: name, email address, password (stored only in scrambled, hashed form), organization name and logo if you add them. If you sign in with Google, Google tells us your name and email address and confirms the email is yours; we do not receive your Google password.
Events: title, type, date, time, venue and other details you enter, the card wording, colours and any photos or artwork you upload.
Guests: name, phone number and, where given, email address, the guest's category or group, whether the invitation was sent, opened and answered, the reason given for not attending, and the time of check-in at the event.
Contributions (michango): pledge amounts, amounts reported or recorded as paid, payment references and the payer's name or phone number. Contribution records are financial information; we record them only when a guest reports a payment or a host records one.
Payments to EnvelopBox: the amount, method, reference and status of payments for our services. Card and mobile money details are handled by the payment provider; we do not store mobile money PINs or card numbers.
Technical data: IP address, browser type and the times you use the service, kept in server logs and, for EnvelopBox staff actions, in an audit log, to keep the service secure.

4. Why we use it and our legal basis

Purpose	Legal basis
Creating and running your account and events; designing and showing each guest's personal card	Performing our contract with the host
Sending invitations, reminders and thank-you messages by SMS, email or WhatsApp; recording replies and check-in	Performing our contract with the host, who has a relationship with their guests
Recording pledges and contributions	The guest's consent, given when they make a pledge or report a payment, and the host's instructions for payments they record
Taking payment for our services and keeping accounting records	Contract and our legal obligations
Keeping the service secure, preventing abuse and fixing problems	Our legitimate interest in a safe, working service
Service messages to hosts, such as sign-in codes and "your card is ready"	Performing our contract

We do not use guests' details for our own marketing, we do not sell personal data, and we do not use it for advertising or automated decisions about people.

5. Who can see it

The host and the people the host adds to their event team see that event's guests, replies and contributions.
Each guest sees only their own invitation, reply and contributions, through a personal link that cannot be guessed. Guests never see each other's details.
EnvelopBox staff see what their role requires: support staff to check and send invitation lists, designers to prepare cards (designers do not see guests' contact details) and finance staff for payments. Staff sign in with two-factor authentication and their actions are logged.

6. Service providers we use

We share personal data only with providers that help us run the service, only as much as they need, and under their obligations of confidentiality and security:

Render (hosting and database), with servers in Frankfurt, Germany.
Brevo (email delivery), based in the European Union.
Beem Africa (SMS delivery), in Tanzania, when we send SMS on a host's behalf.
Payment providers such as Beem or Snippe, in Tanzania, when you pay EnvelopBox online.
Google: Google Fonts supplies the typefaces on some of our pages and receives your IP address when they load; if you choose to sign in with Google, Google handles that sign-in under its own privacy policy.

When a host sends invitations by WhatsApp or SMS from their own phone, the message goes through the host's own WhatsApp or mobile account, under that service's terms.

We may also disclose data where the law requires it, for example to a court or regulator, and only as far as required.

7. Data stored outside Tanzania

Our database and email provider are located in the European Union, so personal data is transferred outside Tanzania. The European Union has comprehensive data protection law. We transfer data only for the purposes in this policy, to the providers named above, with contractual safeguards, and in line with the conditions for cross-border transfers under the Personal Data Protection Act, 2022 and the requirements of the Personal Data Protection Commission.

8. How long we keep it

Account and event data are kept while your account is open. You can delete guests before they are invited, and you can ask us to delete an event or your whole account at any time.
When an account is closed, we delete its events, guest lists, cards and contribution records within 30 days, except records we must keep by law, such as records of payments to EnvelopBox, which we keep for as long as tax and accounting law requires.
Security logs are kept only as long as needed to protect the service and investigate problems.

9. How we protect it

All connections to EnvelopBox are encrypted (HTTPS).
Passwords are stored only in hashed form; sign-in codes expire after 10 minutes.
Our database cannot be reached from the internet, only from our application.
Staff access needs a password and an authenticator code, is limited by role and is recorded in an audit log.

If a breach affects personal data, we will notify the Personal Data Protection Commission and, where required, the people affected.

10. Your rights

Under the Personal Data Protection Act, 2022 you may ask us to:

tell you what personal data we hold about you and give you a copy;
correct data that is wrong, out of date or misleading;
delete your data, or stop or restrict how we use it;
withdraw a consent you gave, such as for contribution records, without affecting what was done before.

Hosts can see, download and correct most of their data in the app. Guests can contact the host of the event, or email us at events@envelopbox.com with the phone number or email the invitation was sent to. We reply within 30 days and may ask you to confirm who you are. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commission (Tume ya Ulinzi wa Taarifa Binafsi).

11. Children

EnvelopBox accounts are for adults (18 years and older). Hosts should not add children's contact details as guests; invite a parent or guardian instead.

12. Cookies

We use only the cookies needed to run the service: one that keeps you signed in and one that protects forms against forgery. We do not use advertising or tracking cookies.

13. Changes to this policy

We may update this policy as the service changes. We will show the date of the latest version at the top of this page and tell hosts by email about important changes.

14. Contact

EnvelopBox, Dar es Salaam, Tanzania. Email: events@envelopbox.com.