Privacy Policy

We only collect data that is strictly necessary to deliver our ticketing services:

TixNaija does not store, process, or have access to your payment card details. All payments on the platform are handled securely by Paystack, a PCI-DSS compliant payment gateway.

When you make a purchase, your card or bank transfer details are entered directly on Paystack's secure infrastructure and are subject to Paystack's Privacy Policy. TixNaija only receives a transaction reference and confirmation status from Paystack to issue your ticket.

Your data is used strictly for the following purposes:

• To generate, deliver, and validate your QR-coded event tickets.
• To process payouts to event organizers after successful ticket sales.
• To send critical event notifications — including cancellations, postponements, or venue changes.
• To provide customer support and respond to inquiries or disputes.
• To detect and prevent fraudulent activity on the platform.
• To comply with our legal and regulatory obligations under Nigerian law.

We do not sell, rent, or trade your personal data to third-party advertisers under any circumstances.

TixNaija uses cookies and standard analytics tools to understand how users interact with our platform and to improve the experience over time. The types of cookies we use:

• Essential Cookies: Required for the platform to function — managing your session, authentication state, and security tokens.
• Analytical Cookies: Anonymized data (e.g., Google Analytics) that helps us understand traffic patterns and feature usage.

By continuing to use TixNaija, you consent to our use of these cookies. You may disable non-essential cookies through your browser settings at any time.

TixNaija shares your personal data only in the following limited circumstances:

• With the Event Organizer — your name and contact details are shared so the organizer can manage check-in, notify you of updates, and resolve disputes.
• With Paystack — your transaction details are processed under Paystack's data governance framework.
• With Supabase — our backend infrastructure provider, which stores your data securely under their data processing terms.
• With law enforcement or regulatory authorities — only when required by a valid court order or Nigerian regulatory directive.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, to maintain your account, or to comply with applicable legal obligations.

If you delete your TixNaija account, your personal data will be removed from our active systems within 30 days, except where retention is required by law (e.g., transaction records for tax or regulatory purposes, which may be retained for up to 7 years).

Under the Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your personal data held by TixNaija:

To exercise any of these rights, contact us at the details in Section 10 below. We will respond within a reasonable timeframe in accordance with the NDPR.

We implement industry-standard security measures to protect your personal data:

• All data is encrypted in transit using TLS/HTTPS.
• Database access is restricted using row-level security (RLS) policies.
• Authentication is managed through Supabase Auth with secure session tokens.
• Payment credentials are never stored on TixNaija's servers.

While we take all reasonable precautions, no online system is 100% secure. We encourage you to use a strong, unique password for your TixNaija account and to report any suspicious activity immediately.