Privacy policy.

01 Who is responsible

EventYard is an event discovery, booking and hosting service. This policy covers its website, mobile apps and related account services.

The organisation responsible for this service is SYNTAX LIMITED, at Road 1, Anifalaje, Akobo. For privacy questions or requests, contact hello@eventyard.africa.

02 Account and sign-in information

We use your email address, name, username and account identifier to create and manage your account. You may also provide a profile photo, contact phone number, interests and account preferences.

When you choose Google sign-in, Google sends basic identity information, which may include your name, email address, profile picture and a Google account identifier. EventYard uses the identifier and verified email to authenticate you and stores your name for profile setup. The current integration does not copy your Google profile picture into your EventYard avatar. You can upload a photo separately.

When you choose Apple sign-in, Apple supplies an account identifier and an email address. If you choose Hide My Email, that address is an Apple private relay address. Apple may also send the name you choose on first consent, which we use to prefill a new profile. You can enter or edit your EventYard profile name during setup.

We do not receive your Google or Apple password. We do not request access to your Gmail messages, contacts, Drive files or calendars through sign-in. A provider account is connected to your EventYard account using its provider identifier; a matching email alone does not silently connect accounts. You can review connected options in Account details and manage a provider authorisation in your Google or Apple account.

03 Information from using EventYard

Depending on the features you use, we process event listings, venue details, ticket selections, registrations, attendance and check-in records, saved events, followed hosts, invitations, messages, notifications and support correspondence.

Hosts may supply business, identity, banking or payout information for verification and payment services. The information required depends on the relevant country, payment method and verification process. Verification providers may receive identity details you submit, while EventYard retains the evidence and status needed for account security, verification and financial records.

Device permissions such as camera access for ticket scanning, photo access for an upload, or location access are requested in context. Location and venue searches can involve map and place-search providers. You can decline optional permissions, although the related feature may then be limited.

Push delivery uses Firebase Cloud Messaging, which processes an app-installation identifier, notification token and app-version information. The Android QR-scanning library uses Google ML Kit and sends technical diagnostics such as device and app versions, scanning-library usage, error codes and performance metrics. QR image processing takes place on the device; EventYard separately sends the scanned ticket credential to its server when an online admission check is requested. These services support notification delivery, scanning and service reliability; this does not enable an advertising or general behavioural-analytics service.

Shorebird-enabled mobile releases check for software patches in the background. The updater sends Shorebird an anonymous installation identifier, app and patch versions, platform, CPU architecture and update diagnostic events. It does not send your EventYard account information, payment details or ticket contents. Downloaded updates apply on a later app launch.

04 Why we use information

We use information to authenticate accounts, deliver tickets and event communications, provide discovery and hosting features, process and reconcile transactions, verify eligible hosts, support check-in, resolve disputes, and protect the service against fraud and misuse.

We process account, booking and hosting information to perform the services you request; retain required financial and compliance records to meet legal obligations; and use necessary security, fraud-prevention and service-administration information for legitimate interests, taking your rights into account. Where an activity requires consent, including optional permissions or marketing where applicable, we seek that consent separately. You may withdraw consent without invalidating processing that was lawful before withdrawal.

05 Who receives information

Event hosts and their authorised staff receive the registration and admission information needed to run their events. Other users can see the profile or event information made available through the relevant feature and its visibility settings.

We use infrastructure and mail-server providers to run the application, database and email delivery; Cloudflare R2 for file storage; Apple and Google for the sign-in options you choose; and Google Places and other configured place-search services for venue searches. Payment and related verification services can include Paystack, Flutterwave and Bachs, depending on the country, currency and payment or payout method. We share the information needed for the relevant service.

These providers may process information outside Nigeria. International transfers must use a basis permitted by applicable data-protection law, including adequate protection, appropriate safeguards or another applicable legal condition. Contact hello@eventyard.africa for information about the recipients and safeguards relevant to your use of EventYard.

We may disclose necessary information to respond to a lawful request, protect people or the service, investigate fraud, or handle a business reorganisation with appropriate safeguards. We do not sell account or Google sign-in information to data brokers or use Google sign-in data for unrelated advertising. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including applicable Limited Use requirements.

06 Payments and financial information

Payment providers handle the payment details required by the method you choose. EventYard uses transaction references, payment status, order and refund records, and relevant wallet or payout details to provide the service and maintain accounting records.

Card or bank authorisation information should be entered only in the designated payment-provider flow. Financial records and identity evidence can have different retention and disclosure requirements from ordinary profile information. Closing an account may not require immediate deletion of records that must be retained for legal, fraud-prevention or reconciliation purposes.

07 Cookies, storage and security

The website uses an HttpOnly session cookie to keep you signed in and a short-lived cookie to complete provider sign-in. Preferences and authorised offline check-in features may use local browser or device storage. The mobile app uses platform secure storage for session credentials.

We use access controls and other technical and operational safeguards appropriate to the information. Authentication secrets remain on the API, provider responses are verified, and EventYard session credentials are not placed in callback URLs. No service can guarantee that every security incident will be prevented.

We keep account and profile information while your account is active and as needed to provide the services you request. We retain booking, payment, refund, payout and verification records for applicable accounting, legal, dispute-resolution and fraud-prevention needs. Authentication attempts, security logs and support records are retained only as needed for their operational or security purpose. Retention depends on the record, an unresolved transaction or dispute, and applicable legal requirements.

You may request account deletion in Settings → Delete account or at https://app.eventyard.africa/delete-account. You can cancel a pending request before deletion is completed. Your account remains active while outstanding tickets, wallet funds, payments and refunds are resolved. You may also contact hello@eventyard.africa for help. After verifying the request and resolving outstanding obligations, we delete or anonymise information that is no longer needed and explain any records that must be retained and why. Backup copies can remain until their normal replacement or deletion cycle and are restricted from ordinary use. Event staff should remove offline admission copies when no longer needed for the event or a related support issue. Removing an app or a local browser copy does not itself delete server records.

08 Your choices and rights

You can edit supported profile fields, change preferences, sign out, and control optional permissions. To request access, correction, deletion, a copy of your information, a restriction, or an objection to processing, email hello@eventyard.africa, preferably from your account email, and describe your request. Do not send passwords, sign-in codes or unnecessary identity documents. We may request proportionate information to verify that the request concerns your account.

We review requests, respond within the period required by applicable law, and explain any lawful restriction or refusal and the available complaint route. Your rights depend on the applicable law and can have exceptions. In Nigeria, these include rights concerning information about processing, access, correction, objection, relevant deletion and portability, and certain automated decisions. You can raise a complaint with the Nigeria Data Protection Commission.

09 Age requirements and policy changes

You must be at least 18 years old to create or use an EventYard account. The service is not directed to children. Event-specific age restrictions still apply. If you believe someone under 18 has created an account, contact hello@eventyard.africa so we can review the concern.

When this policy changes, we update its effective date and provide additional notice or obtain a new choice where required for a material change. Contact hello@eventyard.africa with questions about this policy.