Privacy Policy

Eden Cloudwave Technology, operator of Zivotix, is the data controller for the information described here. For anything in this policy, or to make a request about your data, write to support@zivotix.site.

If you buy a ticket: your name, email address, the tickets and events you bought, the amount and currency charged, the exchange rate applied, and a payment reference from Paystack. We also store the unique QR token for each ticket and whether it has been scanned.

If you organize events: your name, email, phone, business or brand name, event listings and images you upload, and the bank account details we need to pay you.

If you post in a community feed: the text and images you post, and your likes and comments.

Automatically: basic technical data such as IP address, browser type and pages visited, kept for security, fraud prevention and debugging.

We never receive or store your full card number, CVV or PIN. Those go directly to Paystack on their own hosted checkout page and never touch Zivotix servers.

To process your purchase and deliver your ticket; to let organizers check tickets at the door; to pay organizers and verify their bank details; to send transactional email such as tickets, receipts, password resets and community access links; to detect and prevent fraud, chargebacks and abuse; to meet our accounting, tax and legal obligations; and to keep the platform working and improve it.

Our legal bases are: performing the contract with you (your ticket, your organizer account), our legitimate interests (security, fraud prevention, improving the service), and compliance with legal obligations (tax and financial records).

We do not sell your personal data, and we do not use it for third-party advertising.

When you buy a ticket, the organizer of that event can see your name, email address and what you bought, so they can run their event and contact you about it. They are separately responsible for how they use that information. If an organizer misuses your details, tell us at support@zivotix.site.

We share the minimum necessary with the services that run Zivotix:

• Paystack — payments, refunds and payouts.
• Supabase — database, authentication and file storage.
• Resend — transactional email delivery.
• Vercel — application hosting and logs.
• Google (Gemini) — only the text an organizer chooses to send to the AI writing tools. Buyer data is never sent to it.
• An exchange rate provider — we send currency codes only, never personal data.

We may also disclose data where the law requires it, or to establish or defend a legal claim. If Zivotix is ever sold or merged, data may transfer as part of that, and we would notify you.

Zivotix serves buyers and organizers in several countries, and the providers above operate globally, so your data may be processed outside the country you live in. We only use providers that offer appropriate safeguards for international transfers.

Account and event data is kept for as long as your account is open. Transaction records are kept for at least seven years after the transaction, because tax and accounting law requires it. Technical logs are kept for a short period, typically no more than 90 days. Community posts remain until you or the organizer delete them.

Data is encrypted in transit. Access to production data is limited to people who need it. Database access is governed by row-level security rules so that one organizer cannot read another organizer's data. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the relevant regulator as required.

Depending on where you live — including under Nigeria's NDPA, Thailand's PDPA and the GDPR — you may have the right to access the data we hold about you, correct it, delete it, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent where we relied on it.

Email support@zivotix.site and we will respond within 30 days. Deleting your account does not erase records we are legally required to keep, such as completed transactions. You also have the right to complain to your local data protection authority.

Zivotix uses essential cookies only: they keep you signed in and keep checkout secure. We do not use advertising or cross-site tracking cookies, so there is no consent banner to click through.

Zivotix is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will remove it.

We may update this policy; the date at the top shows when it last changed. Questions or requests: support@zivotix.site or the contact form.