Data Processing Agreement

Introduction

This Data Processing Agreement establishes the terms under which Nozzia processes personal data of guests for events created by our users.

Nozzia is developed by Survivors Labs (NIT: 1020831979), based in Bogotá, Colombia.

Definitions

• User: Person who creates and manages events on the Nozzia platform.
• Guests: Persons whose personal data is provided by the User to receive invitations.
• Personal Data: Any information that allows identifying a natural person.
• Processing: Any operation performed on personal data, such as collection, storage, use or deletion.

Data Collected

We process the following personal data of guests:

• Guest's full name
• Email address
• Phone number (optional)
• RSVP confirmation response
• Information related to the event they were invited to

Legal Basis

Data processing is based on:

• Consent from the User who confirms having authorization from their guests
• Execution of the service contract with the User
• Legitimate interest for providing digital invitation services

Processing Purposes

• Sending digital invitations via email or WhatsApp
• Managing attendance confirmations
• Event-related communications
• Aggregated and anonymous statistical analysis

Sharing Data with Third Parties

We share data only with necessary service providers:

• Mailgun: For sending emails
• Twilio: For sending WhatsApp messages
• MercadoPago: For payment processing (transaction data only)
• Firebase: For secure data storage (Google Cloud)

Retention Period

Guest data is retained while the event remains active in the User's account.

When the User deletes an event, all related data is automatically deleted.

Data Subject Rights

Guests have the right to:

• Access: Know what personal data we have about them
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of their personal data
• Portability: Receive their data in structured format
• Objection: Object to the processing of their data

Security Measures

We implement technical and organizational measures to protect data:

• Data encryption in transit and at rest
• Role-based access control
• Continuous security monitoring
• Regular and secure backups

Consents for Sending Invitations

Before sending invitations, the User must grant the following explicit consents:

Contact Information

To exercise your rights or make inquiries about data processing:

Modifications

We reserve the right to modify this agreement. Changes will be notified through the platform.