Privacy Policy

Heyvently is designed to let people share thoughts without creating a public account.

Anonymous to the public does not mean technically unidentifiable. A vent does not display your name, email address, account, or other public profile information. However, operating a secure internet service can involve technical information such as IP addresses, device/browser information, timestamps, security events, and other operational records. We may process such information where necessary for security, abuse prevention, troubleshooting, legal compliance, or the operation of the service.

Do not include your real name, address, phone number, email address, passwords, financial information, or another person's private information in a vent unless you are comfortable making that information public.

Depending on how you use Heyvently, we may process:

A. Vent content

When you submit a vent, we process the text you choose to publish and associated service metadata needed to publish and moderate it.

B. Country information

Heyvently automatically infers a country for a post for the Wall's country-based experience. You are not required to manually select a country when posting.

C. Deletion and security information

A private management token is generated to allow the person who created a post to request deletion. We store the information necessary to validate that token securely; we do not publish the token.

D. Reports and moderation

When a post is reported, we process the selected report reason and information needed to prevent duplicate abuse of the reporting system, investigate reports, moderate content, and maintain moderation records.

E. Feature suggestions and votes

If you submit or vote on a feature suggestion, we process the information needed to receive, prevent abuse of, and administer the suggestion and voting systems.

F. Technical and security information

Depending on the request and our infrastructure, we may process information such as IP address or derived requester identifiers, browser/device characteristics, timestamps, request information, security events, rate-limit records, and diagnostic information. These records are used primarily for security, abuse prevention, reliability, and legal compliance.

G. Payment and transaction information

If you make a donation or sponsorship payment, Heyvently may receive transaction information such as payment status, amount, currency, transaction/reference identifiers, and information you choose to provide in the payment flow.

Payment processing is provided by Paystack. Heyvently does not intentionally collect full card numbers, CVV/security codes, or full bank credentials through its own application forms. Paystack processes payment information under its own terms and privacy documentation and may be subject to statutory retention obligations. Paystack's current merchant terms state that, for Nigerian merchants, the merchant is the controller for merchant data processed under its DPA and Paystack acts as processor for that processing.

H. Communications

If you email us or otherwise contact us, we process the information you provide, including your email address and the content of your communication.

I. Cookies and similar technologies

Heyvently may use essential browser storage, cookies, or similar technologies where necessary to operate the service, maintain security, remember required state, or provide requested functionality. We do not use the anonymous posting experience as a reason to build a public advertising profile of you.

We process personal data only for legitimate and disclosed purposes, including:

• providing and maintaining Heyvently;
• publishing and displaying vents;
• automatically associating posts with a country for the Wall;
• enabling private post deletion;
• preventing spam, abuse, fraud, and technical attacks;
• receiving and investigating reports;
• enforcing our Terms and Community Guidelines;
• administering feature suggestions and votes;
• processing donations and sponsorships;
• maintaining financial and transaction records;
• communicating with people who contact us;
• maintaining security, logs, backups, and operational records;
• diagnosing and fixing technical problems;
• complying with legal, regulatory, court, law-enforcement, or governmental requirements;
• establishing, exercising, or defending legal claims; and
• protecting the rights, safety, and property of Heyvently, users, and others.

Where required by applicable law, we rely on an appropriate lawful basis such as consent, performance of a contract or steps requested before a contract, compliance with a legal obligation, protection of vital interests, public interest, or legitimate interests, subject to applicable requirements and your rights.

A vent is public content. Once published, it can be read, copied, screenshotted, indexed, or redistributed by people outside Heyvently.

The fact that a post is displayed without your name does not make its contents confidential.

Do not submit information that could identify or endanger you or another person unless you intentionally want that information to become public.

We may disclose personal data when reasonably necessary for the purposes described above, including to:

• infrastructure, hosting, database, security, monitoring, email, and other service providers acting on our behalf;
• payment providers such as Paystack;
• professional advisers where reasonably necessary;
• regulators, courts, law-enforcement agencies, or other authorities where required or permitted by law;
• another party where necessary to establish, exercise, or defend a legal claim; or
• a successor to Heyvently in connection with a lawful business transfer, subject to applicable privacy requirements.

We do not sell your personal data.

We do not disclose private management tokens or security credentials publicly.

Because Heyvently is globally accessible and relies on third-party infrastructure and service providers, personal data may be processed in countries outside Nigeria.

Where Nigerian law applies, international transfers will be handled in accordance with applicable NDP Act and regulatory requirements, including applicable adequacy mechanisms, safeguards, contractual protections, or other lawful transfer grounds. The NDP Act regulates transfers of personal data from Nigeria and requires an adequate level of protection or an applicable statutory exception.

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including security, moderation, financial, legal, and operational requirements.

Retention does not necessarily mean continued public visibility.

• Vents: normally public for up to 72 hours. After expiry they cease to be publicly displayed, but related records may be retained for moderation, security, legal, backup, or operational purposes.
• Deleted vents: deletion removes the post from public display and may remove associated content from active systems, but security, audit, moderation, or backup records may remain for the period reasonably required for those purposes.
• Reports and moderation records: retained as reasonably necessary to investigate abuse, enforce policies, protect users, maintain auditability, and comply with law.
• Security and technical records: retained according to operational and security needs and applicable legal requirements.
• Payment records: retained as required for accounting, dispute handling, fraud prevention, and applicable legal or provider requirements. Paystack states that it has statutory transaction-record retention obligations that can extend for years.
• Backups: information may remain in encrypted or otherwise protected backups until those backups are rotated or overwritten.

We use technical and organisational safeguards intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

No internet service can guarantee absolute security. You should therefore avoid submitting sensitive personal information in public vents.

If we identify a personal-data breach, we will assess and handle it in accordance with applicable law and regulatory requirements.

Subject to applicable law and any lawful limitations, you may have rights including:

• to be informed about processing;
• to request access to personal data we hold about you;
• to request correction of inaccurate personal data;
• to request deletion in appropriate circumstances;
• to request restriction of processing in appropriate circumstances;
• to object to certain processing;
• to receive or request portability of eligible data where applicable;
• to withdraw consent where processing relies on consent; and
• to lodge a complaint with the relevant supervisory authority.

The NDP Act establishes rights and remedies for data subjects, and the Nigeria Data Protection Commission is the supervisory authority in Nigeria.

To exercise a right, email heyvently@gmail.com. Because Heyvently is designed to minimise account identity, we may need enough information to determine what records relate to a request. We will not ask you to send a password or private management token by ordinary email unless necessary for a specific supported process.

If you believe we have not adequately addressed a privacy concern, you may also contact the Nigeria Data Protection Commission through its applicable complaint channels.

Heyvently is intended for people 18 years of age or older.

This is an eligibility requirement, not a statement that Heyvently performs reliable age verification.

We do not knowingly design the service to solicit personal data from children. If you believe a person under 18 has submitted personal information or content in circumstances requiring action, contact us at heyvently@gmail.com.

Third-party services may have their own terms and privacy policies. Heyvently is not responsible for privacy practices that are outside our control.

In particular, payment processing is handled through Paystack. Paystack publishes its own terms and privacy information, including information about its processing and retention practices.

We may update this Privacy Policy when our service, legal obligations, providers, or processing practices change.

The current effective date will be displayed at the top of the policy. Material changes will be reflected in the published policy.

Privacy and legal contact: heyvently@gmail.com

Operator: Ademola Gbadamosi, Nigeria

This Privacy Policy is intended to describe Heyvently's current practices. It is not a substitute for legal advice.