Privacy policy

Who this applies to

This policy applies to organizers, attendees, gate staff, support operators, and visitors who use Tixer during the Kenya pilot.

Tixer is not yet operated through a registered company. Until that changes, privacy questions and data requests should be sent to sup@tixer.live.

Information we collect

• Organizer account details, including name, email, and login data.
• Event details, ticket tiers, posters, venue, dates, and organizer names.
• Attendee checkout details, including full name, email, phone, order items, ticket records, and check-in status.
• Payment references, amounts, provider status, provider fee estimates, settlement routing checks, and related support metadata.
• Settlement account details needed to create or verify provider routing, such as account holder name, destination type, and masked account identifiers.
• Support messages, audit logs, device/browser information, security logs, and error reports.

Payment data

Tixer uses payment providers such as Paystack for payment collection and settlement routing. Tixer does not ask for or store full card numbers, card security codes, M-PESA PINs, or equivalent payment credentials. We store the references and status information needed to verify orders, issue tickets, support organizers, and reconcile event records.

How we use data

• Create accounts and keep organizer access secure.
• Publish event pages and process ticket orders.
• Verify payment status before issuing tickets.
• Generate QR tickets and support gate check-in.
• Prepare attendee, sales, transaction, check-in, and payment status reports.
• Investigate duplicate scans, payment exceptions, failed jobs, support requests, abuse, and security issues.
• Improve the pilot product without using attendee data for unrelated marketing.

Who receives data

Attendee order and ticket information is visible to the organizer of the event and to authorized gate staff for that event. We may also share necessary data with payment providers, email providers, hosting services, storage services, monitoring tools, professional advisers, and authorities where legally required.

Retention

We keep personal data only for as long as reasonably needed for event operations, attendee support, organizer reports, payment reconciliation, security, accounting, dispute handling, legal obligations, and pilot improvement. We do not aim to keep attendee data beyond what the service needs.

As the pilot matures, we will tighten retention schedules by data type. When data is no longer needed, we will delete it, anonymize it, or aggregate it so it no longer identifies a person, unless a legal or security reason requires retention.

Your rights

Kenyan data protection law gives data subjects rights including being informed about use of personal data, access, objection, correction, and deletion of false or misleading data. To exercise a data right, contact sup@tixer.live.

Security

We use practical technical and organizational measures for the pilot, including authenticated organizer access, event-scoped gate links, payment webhook verification, audit logs, and limited support access. No system is perfect, so please report suspected misuse or exposure to sup@tixer.live.