Privacy Policy
Version 1 · last updated 24 October 2026
Plain words about your information: what we keep, why, who sees it and how you stay in control.
Who we are
SkillsBomba (“we”, “us”) runs this website and its tools for invitations, event guest management, venues, service providers and business advertising in Tanzania and beyond. For your own account and your use of the website we decide how information is used (we are the “controller”). For the guest lists and contribution records that a host or a business keeps in their events, the host or business decides what is collected and why, and we only store and process it for them (we are their “processor”).
What we collect
| Information | When | Notes |
|---|---|---|
| Account: name, email, phone, password | You register | Your password is stored securely and never in readable form. If you sign in with Google or GitHub we receive your name, email address, profile picture and that service’s account id. |
| Event content: invitation text, photos, music, programme, budget | You create an event | Published invitations can be opened by anyone who has the link. |
| Guest information: name, phone number, RSVP answers, company, entry pass | A guest answers an RSVP, or the host adds or imports guests | Phone numbers are stored securely and shown partly hidden in lists. |
| Contributions: contributor name, phone, pledge and payments | The host records them | Receipts are kept; mistakes are cancelled with a reason, not erased. |
| SMS: message text, recipient, delivery status | You send an SMS | Sent through our SMS provider (Beem Africa) or your own account with them. |
| Business records: business name, registration/TIN, customers, bookings, payments, expenses, staff | A business registers | Visible only to the business and the staff it chooses. Sender-ID documents are kept in private storage. |
| Payments: plan or SMS-credit requests, amounts, references, mobile-money phone for AzamPay | You pay us | Card and mobile-money details are handled by the payment company (Pesapal, AzamPay); we do not store card numbers. |
| Messages to our assistant | You chat with the assistant | Kept for up to 90 days to improve answers and to follow up requests for a person. |
| Security and service logs: action history (sign-ins and changes, with the network address), error logs, short-lived request counters | Automatically | Used to protect accounts, stop abuse and fix faults. Short-lived counters help us limit abuse and expire within hours. |
| Anonymous daily visit count | You open the website | We count visitors per day in a way that cannot identify you or follow you from one day to the next. No consent is needed because nothing personal is kept. |
| Invitation views: device type, browser, approximate network, time | Someone opens an invitation | The host sees how many people viewed their invitation. Counted once per visitor per 30 minutes. |
| Website activity: pages viewed, searches, filters, device, how you arrived | Only if you allow it in the cookie notice | See the Cookie Policy. No address is stored with these events. |
Why we use it
- To give you the service: create and show invitations, take RSVPs, issue and check passes, send SMS, record bookings and payments, show your dashboards. (Contract)
- To keep the service safe: prevent fraud, spam and break-ins, limit abuse, keep records of money. (Legitimate interest, legal duty)
- To improve the website: understand which pages and searches are useful, fix what confuses people. (Your consent: analytics)
- To suggest things you may like, such as venues, providers or guides similar to what you looked at. (Your consent: personal suggestions)
- To contact you about your account, payments, bookings and important changes. Marketing messages only if you opted in.
We do not sell personal information and we do not use your guests’ phone numbers for our own marketing.
Where it is processed
Our servers and some of the companies above are outside Tanzania. When information leaves the country we rely on the provider’s own safeguards and share only what is needed.
How long we keep it
- Account and event records: while your account exists, then deleted or anonymised within 30 days of a deletion request, except records we must keep by law (for example payment and receipt records).
- Website activity events and invitation views: up to 13 months.
- Assistant chats: up to 90 days.
- Password-reset codes: 2 days. Request counters: a few hours.
- Money records (receipts, payments, cancelled payments): kept as required for accounting.
How we protect it
We use technical and organisational safeguards that match the sensitivity of the information: secure connections, restricted access, and extra protection for passwords, phone numbers and payment details. No system is perfectly safe; if a breach affects you we will tell you and the authorities as the law requires.
Your choices and rights
- Cookies: change your choice any time on the Cookie Policy page, and delete your recorded activity there.
- Access, correction, deletion, objection, a copy of your information: write to us (see below). We reply within 30 days. We may ask you to prove who you are.
- Withdraw consent: at any time, without affecting what was done before.
- If you are a guest and want your details removed from an event, ask the host first; we can help.
- Stop SMS: reply as instructed in the message, or ask the sender to add your number to their do-not-SMS list.
- Complaints: you may complain to us, and to the Personal Data Protection Commission of Tanzania.
Children
The service is for adults. We do not knowingly collect information from children under 18; if you think we have, tell us and we will delete it.
Changes
When we change this policy in a way that matters, we update the date and version above and, for account holders, tell you in the app or by email.
Contact us
Questions about this page, or a request about your information: info@skillsbomba.com, phone or WhatsApp +255 746 645 417, Mihama, Mwanza, Tanzania.