Privacy Policy

We collect information in three ways: what you give us, what we generate as you use the Service, and what our service providers give us.

• Account information — name, email address, and phone number when you sign up, buy a ticket, vote, or contact us.
• Organizer information — company/organization name, contact phone, KYC (identity verification) details, and bank account details used to receive payouts.
• Event and Campaign content — anything you upload to publish an Event or Campaign, including flyers, logos, and descriptions.
• Payment information — handled directly by Paystack, our payment processor. We receive confirmation that a payment succeeded and the amount, but we do not receive or store your full card number or bank login credentials.
• Ticket and vote records — which tickets or votes are associated with your email, their QR codes, and their check-in status.
• Usage and device information — pages visited, browser/device type, and similar technical data, collected automatically as you use the Service.
• Local/offline data — the check-in scanner keeps a local copy of an event's ticket list on the gate device so scanning keeps working without internet, syncing back once reconnected.

• To create and manage your account and authenticate you when you log in.
• To process ticket purchases and votes, issue QR-coded tickets, and verify them at check-in.
• To pay Organizers out to their registered bank account.
• To send transactional email — ticket confirmations, vote receipts, payout notices, and event-change notifications to ticket-holders.
• To detect and prevent fraud, abuse, and violations of our Terms of Service.
• To provide customer support and respond to your requests.
• To improve and maintain the Service.

We don't sell your personal information. We share it only where necessary to run the Service:

• The Organizer of an Event or Campaign you buy a ticket for or vote in — they can see the ticket/vote information needed to run their Event or Campaign (e.g. buyer name, email, ticket tier, check-in status).
• Paystack — to process payments and payouts.
• Google Firebase — for account authentication and as our database/hosting infrastructure.
• Cloudinary — to host uploaded images (event flyers, organizer logos).
• Resend — to deliver transactional email (ticket confirmations, receipts, notices).
• DiceBear — to generate placeholder avatar images from a non-identifying seed; no photo is uploaded to or by this service unless you separately provide one.
• Law enforcement or regulators, where we're required to by Nigerian law or a valid legal process.

Some of these providers may process data outside Nigeria as part of their global infrastructure. We only work with providers who apply appropriate safeguards for cross-border data handling.

We process your information under the Nigeria Data Protection Act, 2023 (NDPA), on the basis that it's necessary to perform our contract with you (e.g. issuing a ticket you bought), to comply with a legal obligation, for our legitimate interests in operating and securing the Service, or with your consent where we ask for it.

We rely on our infrastructure providers' security controls (including Google Firebase's access controls and encryption in transit) and restrict access to personal information to what's needed to operate the Service. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

We keep account, ticket, vote, and transaction records for as long as your account is active and for a reasonable period after, to meet accounting, tax, dispute-resolution, and legal obligations. You may ask us to delete information we're not legally required to keep, as described in Section 7.

Under the NDPA, you have the right to:

• Ask what personal information we hold about you and get a copy of it.
• Ask us to correct information that's inaccurate or incomplete.
• Ask us to delete your information, subject to our legal and accounting retention obligations.
• Object to or ask us to restrict certain processing.
• Withdraw consent, where we rely on consent, without affecting processing already carried out.

To exercise any of these rights, email us at getticketng@gmail.com. We may need to verify your identity before acting on a request.

We use cookies/local storage strictly to keep you signed in, remember your session, and — on the gate check-in scanner — to cache an event's ticket list for offline scanning. We don't use third-party advertising or tracking cookies.

The Service is not directed at children under 18. If you believe a child has given us personal information, contact us and we'll take steps to remove it.

We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Effective" date above. Continuing to use the Service after a change takes effect means you accept the updated policy.

Questions about this Privacy Policy or your data? Reach us at getticketng@gmail.com or 74 Etta Agbor Road, Calabar, Cross River State, Nigeria.