Privacy policy
Last updated 25 October 2026
The 36th Solutions Ltd (Abuja, Nigeria) runs Odogwu and is responsible for your personal data under the Nigeria Data Protection Act 2023. We collect as little as we can, we never see card details, and we never sell your data.
What we collect
From hosts
- Celebration name, date and who it's for.
- The payout bank and account number. Paystack uses the full number to confirm the account name and pay you; we only store the bank name, the confirmed account name and the last 4 digits.
- Your email, to send you your private host link and sign-in codes. We don't send marketing.
- An optional phone number.
From guests
- The name you choose to show on the wall (or none, if you spray anonymously).
- An optional email for your receipt, and the country you're spraying from if you choose one.
- What you paid and sprayed, with the payment reference.
- We never see or store your card or bank login details. Paystack handles those.
From everyone
- Security data: a scrambled (hashed) version of your internet address, used only to stop abuse such as bots. We don't store the address itself.
- Basic, anonymous usage statistics (pages visited, country). Private links and payment references are removed first.
- Your phone remembers a few things locally, like your name and celebrations you host, so you don't have to retype them. This stays on your device.
Why we use it
- To provide Odogwu (our contract with you): take payments, show sprays on the wall, pay celebrants, produce the spray report.
- To keep it safe (legitimate interest): prevent fraud, abuse and offensive names.
- To meet the law: keep payment records where required.
Who sees it
- Everyone at the event sees names and amounts on the spray wall, unless you spray anonymously.
- The host sees the full list of who sprayed, emails guests chose to give, and private names of anonymous guests who gave one.
- Venue partners see only the name, date and total of celebrations created through their link.
- Our service providers, only to run Odogwu: Paystack (payments), Supabase (database) and Vercel (hosting). Some of their servers are outside Nigeria; we use providers with strong security and contractual protections for these transfers.
- Authorities, only where the law requires it.
How long we keep it
Unfinished payments are deleted after 7 days. Celebration records are kept for up to 24 months after the event so hosts can download their reports, then deleted, unless the law requires us to keep payment records longer. You can ask us to delete your data sooner.
Your rights
You can ask to see, correct, delete or receive a copy of your personal data, object to how we use it, or withdraw consent. Email the36thltd@outlook.com and we'll respond within the time the law requires. If you're unhappy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).
Children
Hosts must be 18 or over. We don't knowingly collect data from children.
Changes
We'll update this page and its date if anything changes. See also our Terms of use.