Privacy Policy

Last updated 12 October 2026

This policy explains how EventMe processes personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). EventMe is the responsible party for the information described here.

1. What we collect

• Your account: first name, surname, email address, password (stored only as a secure hash), country, gender and age, and any profile photo or details you add.
• Tickets and RSVPs: the events you attend, your ticket or pass QR code, the amount paid and when you were checked in, and by which team member.
• Payments: the payment reference and amount from Paystack. Your card or bank details are entered on Paystack’s page and never reach EventMe.
• Organisers: event details, the bank account name, bank and the last 4 digits of your account number. The full account details are held by Paystack to pay you.
• Things you post: events, talent profiles, comments, posts, votes and messages sent through the contact form.
• Basic usage: pages viewed, likes and shares, used only to improve EventMe. We do not use advertising networks or tracking pixels.

2. Why we use it

• To create and secure your account and let you sign in.
• To sell and deliver tickets, send confirmations and QR codes, check you in and process refunds.
• To pay organisers their ticket income through Paystack.
• To show events, talent and voting results you choose to publish.
• To send emails about your account, tickets and events you attend. Newsletters are sent only if you sign up, and you can unsubscribe at any time.
• To keep the platform safe, prevent fraud and meet legal and tax duties.

We process your information because it is needed to provide the service you asked for, because you consented, to meet legal obligations, or for our legitimate interest in running a safe platform.

3. Who we share it with

• Event organisers and their team: when you buy a ticket or RSVP, the organiser of that event sees your name and email and can download the guest list to run the event. Organisers may use it only for that event.
• Service providers who process information for us under contract: Paystack (payments), Railway (hosting and database), Cloudinary (images), Resend (email) and GitHub (private nightly backups).
• Authorities when the law requires it.

Some providers store information outside South Africa. We use only providers that protect it to a standard similar to POPIA, as section 72 of POPIA requires.

4. How we protect it

Passwords are hashed and never stored in plain text. Connections use HTTPS. The database is private and not reachable from the internet. Admin sign in is protected and security events are logged. Private backups are kept for 30 days and then deleted. If a breach ever affects your information we will tell you and the Information Regulator as POPIA requires.

5. How long we keep it

We keep your account information while your account is open. Ticket and payment records are kept for 5 years for tax and accounting purposes. When you delete your account we remove or anonymise your personal information within 30 days, except records we must keep by law.

6. Your rights

You may ask to see the information we hold about you, correct it, delete it, or object to how we use it. Email privacy@eventme.fit and we will respond within 30 days. If you are not happy with our answer you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

7. Children

EventMe is for people aged 18 and over, or younger with a parent’s or guardian’s permission. We do not knowingly collect information from children without that permission.

8. Cookies and storage

We use your browser’s storage only to keep you signed in and remember choices such as language and theme. We do not use advertising cookies.

9. Information Officer and contact

Information Officer: Ilyas Mboula Moro, privacy@eventme.fit. Postal and physical address: to be completed. See also our Terms of Use and Ticket and Refund Policy.