This Privacy Policy is issued by Spotix Technologies ("we", "us", "our"), a company duly registered in the Federal Republic of Nigeria. It governs the collection, use, storage, and disclosure of personal data through our product, the Spotix Event platform — a service for discovering, listing, booking, and managing events across Nigeria and other African countries.

By accessing or using Spotix Event — whether as an event organizer or as an attendee — you acknowledge that you have read and understood this Policy. If you do not agree, please discontinue use of the platform.

Spotix Technologies is the data controller responsible for your personal information. We operate the Spotix Event platform and the Spotix Integrated Wallet Settlement System (IWSS).

• Legal name: Spotix Technologies
• Product: Spotix Event
• Registered in: Federal Republic of Nigeria
• Privacy contact: support@spotix.com.ng

We collect personal data in three ways: directly from you, automatically through your use of the platform, and from third parties where applicable.

A. Data collected from Event Organizers

• Identity: Full name and email address
• Contact: Phone number
• Profile: Profile photo or avatar
• Demographics: Date of birth and gender
• Business verification: Government-issued ID and/or CAC (Corporate Affairs Commission) registration documents to verify your identity as a legitimate organizer
• Business details: Business name and registered address
• Financial: Bank account details provided for payout settlements via the IWSS wallet system

B. Data collected from Attendees

Attendees may purchase tickets without creating a Spotix account. In doing so, we collect their name, email address, and phone number to process and confirm the booking.

C. Event-specific data

• Event location coordinates: GPS coordinates submitted by organizers when creating event listings, used to display accurate venue maps to attendees.

D. Automatically collected data

• Device data: Device type, operating system, device identifiers
• Browser data: Browser type, version, language settings, and screen resolution
• Usage data: Pages visited, events browsed, actions taken, session duration
• Network data: IP address and approximate location derived from it
• Cookies and tracking data: See Section 8 for full details

We process your personal data only for lawful, specific, and legitimate purposes:

• Account creation & verification: To register and verify organizer accounts, including identity and business verification via Government ID / CAC documents.
• Event management: To allow organizers to create, publish, and manage event listings.
• Ticket sales & bookings: To process ticket purchases, issue digital tickets, and send booking confirmations to attendees.
• Event discovery: To display relevant events based on location, preferences, and browsing activity.
• Payments & settlements: To facilitate payments via card, bank transfer, USSD, and the IWSS wallet, and to process payouts to organizers.
• Customer support: To respond to enquiries and resolve disputes via in-app chat (Tawk.to) and email.
• Marketing communications: To send promotional emails and push notifications about new events and platform updates — with your consent, and with the ability to opt out at any time.
• Platform security & fraud prevention: To detect and prevent fraudulent transactions, spam, and abuse.
• Analytics & improvement: To understand how the platform is used, identify bugs, and improve features and performance.
• Legal compliance: To fulfil obligations under Nigerian law and respond to lawful requests from regulatory or law enforcement authorities.

We share your personal data only in the specific circumstances below. We do not sell, rent, or trade your data.

• Payment processors (Paystack / Flutterwave): We share necessary payment data with our licensed payment partners to process card payments, bank transfers, and USSD transactions.
• Event organizers: When an attendee purchases a ticket, the event organizer receives the attendee's name, email address, and phone number through their organizer dashboard for the purpose of managing attendance and event operations only.
• Business partners and affiliates: We may share certain data with trusted business partners and affiliates as part of our commercial operations. Where this occurs, we ensure appropriate contractual safeguards are in place. You have the right to opt out — see Section 11.
• Service providers: We engage third-party vendors for cloud hosting (AWS/GCP/Azure), analytics, crash reporting (Sentry), live chat (Tawk.to), and push notifications. These vendors act as data processors under our instruction and are contractually bound to data protection obligations.
• IWSS API partners: Where your wallet is used within a third-party application integrating with the IWSS API, transactional data necessary for settlement may be shared with that application. See Section 5.
• Legal & regulatory authorities: We may disclose data to courts, regulators, or law enforcement in Nigeria or other jurisdictions where required by applicable law or court order.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. You will be notified via email in advance.

Event organizers on Spotix Event have access to the following attendee data for events they have created and published:

• Attendee full name
• Attendee email address
• Attendee phone number
• Ticket type and booking reference
• Check-in status

Spotix Technologies is not responsible for an organizer's misuse of attendee data. If you believe an organizer has misused your data, please contact us immediately at support@spotix.com.ng.

Spotix Event uses cookies and similar technologies (such as local storage and session tokens) to operate the platform and improve your experience.

• Essential / session cookies: Required for core functionality such as keeping you logged in and processing secure transactions. These cannot be disabled without breaking the platform.
• Analytics cookies: Used to understand how users navigate the platform — which events are viewed, how long sessions last, and where users drop off. This data is aggregated and used solely to improve platform performance.
• Push notification tokens: If you opt in to push notifications, we store a device token to deliver event alerts and platform updates to you.

You can manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of Spotix Event. You may withdraw consent to push notifications at any time through your device or browser settings.

We use the following third-party tools to operate and improve the Spotix Event platform. Each may collect or process your personal data as part of its operation:

• Sentry (Crash & Error Reporting): Automatically captures technical errors and crash logs. Sentry may collect device data, browser information, and anonymised user identifiers.
• Tawk.to (Live Chat & In-App Messaging): Powers our in-app customer support chat. When you initiate a chat, Tawk.to collects your name, email, IP address, browser type, and the content of your conversation.
• Push Notification Provider: Delivers alerts and updates to your browser or device, requiring a notification token linked to your device. You can opt out at any time in your account or device settings.
• Cloud Infrastructure (AWS / GCP / Azure): All data is hosted on enterprise-grade cloud infrastructure with encryption at rest and strict access controls.
• Payment Processors (Paystack / Flutterwave): Handle all card, bank transfer, and USSD payment transactions. These providers are PCI-DSS certified and maintain independent privacy policies.

We retain personal data only for as long as necessary for the purpose it was collected, or as required by Nigerian law:

• Account data: Retained for the lifetime of your account, plus up to 12 months after deletion for dispute resolution.
• Transaction & financial records (including IWSS): Retained for a minimum of 6 years under Nigerian financial and tax regulations.
• Event data: Retained for 3 years post-event for audit and dispute purposes.
• Marketing data: Retained until you unsubscribe or withdraw consent.
• Support conversations (Tawk.to): Retained for up to 2 years after the last interaction.
• Analytics and usage data: Aggregated and anonymised after 26 months.

When data is no longer required, we securely delete or irreversibly anonymise it so that it can no longer be linked back to you.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All data in transit is encrypted using TLS/HTTPS.
• Sensitive data at rest is encrypted using AES-256 or equivalent standards.
• Access to personal data is restricted to authorised Spotix staff on a strict need-to-know basis.
• All infrastructure is hosted on enterprise-grade cloud platforms (AWS / GCP / Azure) with built-in redundancy and security controls.
• We conduct regular security assessments and vulnerability testing.
• Payment data is handled exclusively by PCI-DSS certified processors — we do not store raw card or bank credentials.

You are responsible for keeping your Spotix account password secure. If you suspect unauthorised access to your account, contact us immediately at support@spotix.com.ng.

Spotix Event is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18.

If you believe a minor has registered on our platform or provided personal data, please contact us at support@spotix.com.ng and we will take prompt action.

We may update this Privacy Policy periodically to reflect changes in our services, business practices, or legal obligations. When we make material changes, we will:

• Update the effective date at the top of this page.
• Notify registered organizers via email and/or a prominent in-app notification at least 14 days before significant changes take effect.
• For minor clarifications, we may update the policy without separate notice, so we encourage you to review it periodically.

Your continued use of Spotix Event after changes are published and the notice period has elapsed constitutes your acceptance of the updated Policy.