Your data stays yours.

Tixkarios, Inc. ("Tixkarios", "we", "us") runs a platform where people discover events, buy tickets and sell tickets. This policy explains what personal information we collect, why we collect it, who we share it with and what choices you have.

It applies when you visit our website, create an account, buy a ticket, create an event or scan guests in. We follow the data protection laws that apply to us, including the Nigeria Data Protection Act 2023.

The information we collect depends on how you use Tixkarios.

• Account details: your username, full name, email address, phone number, password (stored in a protected form, never as plain text), bio, profile photo and social links if you add them.
• Order details: the events and ticket types you buy, quantities, the name and email of each ticket holder, discount or referral codes used, and your order history.
• Payment details: we get limited information from our payment provider, such as the payment reference, status and channel. Your card details are entered with the provider and we do not store full card numbers.
• Organizer details: event information you publish, your country, and the bank details we need to pay you.
• Check-in records: when a ticket is scanned, we record that it was used and when.
• Messages: emails you send us, and notices you send to your guests through the platform.
• Technical data: your IP address, browser, device type, pages visited and error logs, collected automatically when you use the site.

• To create and run your account and to sign you in securely.
• To process orders, take payment, issue tickets and send them to you by email.
• To let organizers manage events, see sales, check guests in and receive payouts.
• To send service messages such as receipts, tickets, event changes, password resets and security alerts.
• To prevent fraud, abuse and duplicate or fake tickets, and to keep the platform secure.
• To answer your questions and resolve disputes or refund requests.
• To understand how the platform is used so we can fix problems and improve it.
• To meet our legal, tax and accounting duties.

We do not sell your personal information. We only send you marketing messages if you have agreed to them, and you can opt out at any time.

We rely on these grounds under data protection law:

• Contract: we need your details to sell you a ticket or run your event.
• Legitimate interests: we use data to keep the platform secure, prevent fraud and improve our service, where this does not override your rights.
• Legal obligation: we keep some records because the law requires it.
• Consent: where we ask for it, for example for marketing messages. You can withdraw consent at any time.

We share personal information only where it is needed, and only with:

• Event organizers: when you buy a ticket, the organizer of that event receives your name, email, ticket type and check-in status so they can run the event.
• Payment providers: such as Paystack, which process your payment and help us detect fraud.
• Service providers: companies that host our platform, store our data and files, send our emails and help us run the service. They may only use your data to work for us.
• Authorities and advisers: when the law requires it, when we respond to a valid legal request, or to protect the rights, safety and property of our users and Tixkarios.
• A buyer of our business: if Tixkarios is merged with or sold to another company, your information may move with it, and we will tell you if your rights change.

Organizers can view the attendee list for their events, export it as a file and send messages to their guests through Tixkarios. They can also see how many tickets each referral link sells.

Organizers are responsible for how they use attendee information. They must use it only for running and communicating about their event, keep it safe, and follow the law. If you think an organizer has misused your details, email us.

Payments are handled by third-party payment providers. They collect your card or bank details on their own secure pages and under their own privacy policies. We receive confirmation that a payment worked, along with the reference and related details, so we can issue your ticket and keep a record of the sale.

We use cookies and similar technologies to keep you signed in, protect your account and remember your settings. We may also use basic analytics to see which pages are used and where things break.

You can block or delete cookies in your browser settings. If you block essential cookies, parts of Tixkarios such as signing in and checkout may stop working.

We keep your information for as long as your account is active and as long as we need it for the reasons above. Order, payment and payout records are kept for as long as tax, accounting and fraud-prevention rules require, even after you close your account.

When we no longer need information, we delete it or remove anything that identifies you.

We use technical and organizational measures to protect your information, including encrypted connections, protected password storage and limited access to our systems. No service is completely secure, so please use a strong, unique password and keep your ticket QR codes private.

If a breach affects your personal information and the law says we must tell you or the regulator, we will.

Our service providers may store or process information in countries other than your own. When that happens, we take steps to make sure your information stays protected in line with the law.

Depending on where you live, you have the right to:

• Ask what personal information we hold about you and get a copy.
• Ask us to correct information that is wrong or out of date.
• Ask us to delete your information, unless we need to keep it for legal or fraud-prevention reasons.
• Object to or ask us to limit certain uses of your information.
• Withdraw your consent where we rely on it, and unsubscribe from marketing at any time.
• Complain to the data protection regulator. In Nigeria this is the Nigeria Data Protection Commission.

You can update most account details yourself in your account settings. For anything else, email us at the address below. We may need to confirm who you are before we act on a request.

Tixkarios is not meant for anyone under 18 and we do not knowingly collect information from children. If you think a child has given us their details, email us and we will delete them.

Our site and event pages may link to other websites, including organizers' own pages and social media. We do not control them and this policy does not apply to them.

We may update this policy from time to time. When we make an important change, we will change the date at the top of this page and, where it makes sense, tell you by email or on the platform.