Privacy Policy

Last updated: July 24, 2026

This Privacy Policy describes the policies and procedures of Alantis Systems Limited ("the Company", "We", "Us", or "Our") on the collection, use, and disclosure of your information when you use our mobile applications—including the Creator App, Staff App, Diner App, and Host App (collectively referred to as the "Application" or "Service").

We are committed to protecting your personal data in full compliance with applicable data protection legislation, including the Nigeria Data Protection Act 2023 (NDPA) and international app platform guidelines.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

While using Our Service, We may ask You to provide Us with certain personally identifiable information, including:

• Account Information: First and last name, email address, phone number.
• Mailing Address: Physical address, state, province, ZIP/postal code, city.
• User Support & Abuse Reporting: Communications, feedback, or dispute/abuse reports submitted regarding inaccurate ratings or platform misuse via in-app support or our website.

To power location-dependent features across our apps, we collect location data (precise or approximate, based on device permissions):

• Job Broadcasts & Proximity Alerts: Location data is used to match job openings posted by Creators with nearby Staff, sending real-time notifications/alerts to qualified Staff within geographical proximity.
• Location-Filtered Staff Search: Creators can search, filter, and discover available Staff based on specified geographic locations or proximity to an event/establishment.

A Creator may create and manage Staff profiles for one or more employees operating within their establishment:

• Data Collected: The Creator inputs the Staff member's name, phone number, location, and job designation, and assigns initial credentials (password).
• Data Ownership & Responsibility: The Creator (account holder) remains the primary owner and controller of any managed Staff profiles created under their account and is legally responsible for ensuring they have obtained proper consent from their employees before submitting their personal data to the Application.

To maintain service quality and facilitate hiring across the platform:

• Staff Ratings & Feedback: Ratings and performance reviews submitted by users of the Creator App and Diner App regarding staff performance are collected and processed.
• Visibility: Aggregated ratings are displayed to Staff within the Staff App and are visible to other Creators searching for staff to hire.
• Retention: Ratings and feedback records are maintained and updated continuously for as long as the Staff account remains active. All associated rating history is removed upon account deletion.

When you process orders, purchase subscriptions, or pay one-off event fees within the Application (such as in the Creator App):

• Order History & Content Data: We collect and store details of all processed orders, including order item contents, total values, order status, timestamps, and customer/event order histories. This data is retained to allow users of the Creator App to manage operations, view analytics, and export order records directly into spreadsheet format (e.g., CSV/Excel).
• Payment Processing: Payment card details (e.g., credit/debit card numbers, expiration dates, security codes) are not stored or processed on our servers. All card information is collected and processed securely by PCI-DSS compliant third-party payment processors.

Usage Data is collected automatically when using the Application, including:

• Device IP address, unique device identifiers (such as IDFV on iOS or Android Advertising ID).
• Mobile operating system type and version, browser type, and app session durations.
• Crash logs, performance metrics, and diagnostic data.

To support specific app features, the Application may request access to:

• Location Data: Used for staff broadcasts, job opening alerts, and location-filtered hiring searches.
• Camera & Photo Library: Access to take or upload photos and videos directly within the Application.

Note: You can grant, review, or revoke these permissions at any time through your mobile device's system settings (Settings $\rightarrow$ Privacy / Apps $\rightarrow$ [App Name]).

You may create an account or log in through Third-Party Social Media Services (such as Google, Facebook, Instagram, X/Twitter, or LinkedIn). If you choose to do so, we may collect profile data already associated with that account (e.g., your name, email address, profile picture, and friend/contact lists if authorized).

Under the Nigeria Data Protection Act (NDPA 2023), we process your personal data under the following lawful bases:

• Consent: Where you have given explicit consent for specific processing operations (e.g., location permissions, marketing notifications, or media access). You may withdraw consent at any time.
• Performance of a Contract: Where processing is necessary to execute terms of service between you and the Company (e.g., processing order transactions, account creation, executing job broadcasts).
• Legal Obligation: Where processing is required for compliance with statutory obligations, tax reporting, or lawful government orders.
• Legitimate Interests: Where necessary for platform security, fraud prevention, service analytics, and improving application performance, provided such interests do not override your fundamental rights.

We do not sell your personal data. We only share information under the following circumstances:

• Within Platform Ecosystem (Location, Ratings & Profiles): Approximate location data and ratings assigned to staff are shared with Creators searching for staff to hire within their area, as well as displayed to the Staff member directly within the Staff App.
• With Service Providers & Payment Processors: Third-party entities that perform payment processing, cloud hosting, analytics, push notifications, or customer support on our behalf (bound by strict confidentiality and NDPA-compliant data processing agreements).
• For Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition of all or part of our business.
• For Legal Obligations: When required by law, court orders, or governmental authorities (including NDPC directives).
• With Other Users: Information shared in public areas of the Application (e.g., user profiles or shared event media) will be visible to other users.

Under the Nigeria Data Protection Act 2023, as well as Apple and Google developer policies, you possess the following rights regarding your personal data:

• Right to Access & Rectification: Request copies of your personal data or demand corrections to inaccurate or incomplete information.
• Right to Withdrawal of Consent: Withdraw previously granted consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Object & Restrict Processing: Object to or request restriction of data processing for specific purposes, such as direct marketing or automated profiling.
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format (e.g., spreadsheet or JSON export).
• Right to Account & Data Deletion: Request the complete erasure of your account and personal data.
• Right to Lodge a Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data privacy rights have been infringed.

Depending on which Application you are using, you can initiate account deletion directly within the app:

• Creator App: Go to Settings $\rightarrow$ Profile $\rightarrow$ Delete Account.
• Staff App: Go to Profile $\rightarrow$ View $\rightarrow$ Delete.
• Diner App: Go to View $\rightarrow$ Edit Profile $\rightarrow$ Delete Account.
• Host App: Host accounts are managed directly through the Creator App. To delete a Host App account, log into the associated Creator App and navigate to Settings $\rightarrow$ Profile $\rightarrow$ Delete Account.

Note on Managed Staff Accounts: When a Creator deletes their account or removes a managed Staff profile, the associated profile details, access credentials, location logs, and rating histories linked to that profile are permanently removed or anonymized within 30 days.

If you have uninstalled the application or cannot access your account, you can submit an explicit data deletion or privacy request by emailing privacy@alantissystems.com or visiting http://www.ceremonyten.com.

Upon receipt of a deletion request, we permanently erase or anonymize your personal data within 30 days, except where retention is required by applicable law (e.g., preserving statutory financial records).

• Retention: We retain order logs, location histories, performance ratings, financial records, and personal data only for as long as necessary to fulfill operational purposes set forth in this policy or to comply with statutory legal and accounting obligations. Managed Staff profiles and ratings associated with a staff account are deleted upon complete removal of the account.
• Security: We employ industry-standard technical and organizational security measures (such as HTTPS/TLS encryption) to safeguard data against unauthorized access, loss, or alteration. All financial interactions are routed through secure, PCI-DSS compliant payment pathways.

Our Service is not directed to anyone under the age of 18 (or 13 depending on local jurisdiction guidelines). We do not knowingly collect personal information from children without verified parental/legal guardian consent. If you become aware that a child has provided us with personal data without proper consent, please contact us immediately to remove such information.

Your information may be transferred to—and maintained on—servers located outside Nigeria where our cloud infrastructure providers operate. In accordance with the NDPA, any cross-border transfer of personal data relies on standard contractual clauses, adequacy determinations, or explicit consent to ensure your data remains protected under equivalent standards.

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy and, where appropriate, displaying an in-app notification or sending an email update.

If you have questions regarding this Privacy Policy, wish to exercise your legal rights under the NDPA, or need to report inaccurate information or abusive ratings, please contact our designated Data Protection Contact:

• Company: Alantis Systems Limited
• Data Protection Contact: Barrister Chukwudi Adiukwu (SAN)
• In-App Support: Navigate to the Support section within any of our applications.
• Email: privacy@alantissystems.com
• Website: http://www.ceremonyten.com