Privacy Policy
Last updated: May 30, 2026
At VibePass, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information when you use our platform to discover events, purchase tickets, or sell tickets as a creator.
1. Information We Collect
1.1 When You Register an Account
- Full name and email address
- Password (encrypted, never stored in plain text)
- Role selection (Attendee or Creator)
- IP address and browser information
- Login timestamps and session data
1.2 When You Purchase Tickets (Attendee)
- Attendee names and email addresses (for each ticket)
- Billing information (processed securely by Paystack, not stored by us)
- Order history and ticket codes
- Event preferences and saved events
1.3 When You Sell Tickets (Creator)
- Creator profile information (brand name, bio, avatar, banner)
- Bank account details (for payouts – encrypted)
- Tax identification information (if applicable)
- Event details, ticket tiers, and sales analytics
- Payout history and transaction records
1.4 Automatically Collected Information
- Device information (type, operating system, browser)
- Usage data (pages visited, time spent, features used)
- Cookies and similar tracking technologies
- Referral source and clickstream data
2. How We Use Your Information
- Create and manage your account
- Process ticket purchases and send confirmations
- Generate QR codes and digital tickets for event entry
- Process payouts to creators (bank details, tax compliance)
- Send event reminders, order updates, and important notifications
- Authenticate your identity during login sessions
- Remember your preferences (theme, language)
- Improve our platform, analyze usage, and fix bugs
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal obligations (tax records, dispute resolution)
3. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Contractual necessity: To fulfill ticket purchases and provide our services
- Legitimate interests: To improve our platform, prevent fraud, and market relevant events
- Legal obligation: To comply with tax, accounting, and anti-fraud laws
- Consent: For marketing communications (you can withdraw anytime)
4. Data Sharing and Third Parties
We never sell your personal data. However, we share information with trusted third parties:
Paystack – Payment processing. Your payment details are transmitted directly to Paystack and are never stored on our servers. Paystack is PCI-DSS Level 1 compliant.
Email Service – Transactional emails (tickets, confirmations, password resets) are sent via our email provider.
Analytics – We may use analytics tools to understand how users interact with our platform (anonymized).
Event Organizers – Your attendee name and email may be shared with event creators for check-in purposes and event communication.
Legal Authorities – When required by law, court order, or to protect our rights and safety.
5. Data Security
We implement industry-standard security measures to protect your data:
- All data transmitted over SSL/TLS encryption (HTTPS)
- Passwords are hashed using bcrypt
- Creator bank details are encrypted before storage
- Regular security audits and updates
- Access controls and authentication for staff
However, no method of transmission over the internet is 100% secure. You use our platform at your own risk.
6. Data Retention
- Account information: Retained until you delete your account
- Ticket purchase records: Retained for 7 years (tax and legal requirements)
- Creator payout records: Retained for 7 years
- Session data: Retained for 30 days
- Marketing preferences: Retained until you opt out
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal obligations)
- Restriction: Limit how we use your data
- Portability: Receive your data in a structured format
- Objection: Opt out of marketing or certain processing
- Withdraw Consent: For consent-based processing (e.g., marketing)
To exercise these rights, contact us at privacy@vibepass.sbs.
8. Children's Privacy
VibePass is not intended for children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
10. Cookies
We use cookies to enhance your experience. Essential cookies are required for login, cart, and payment processing. Preference cookies remember your theme selection. Analytics cookies help us improve the platform. For more details, see our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our website. The "Last updated" date at the top of this page indicates when changes were made.
12. Contact Us
If you have questions, concerns, or requests regarding your privacy, please contact our Data Protection Officer:
We aim to respond to privacy-related inquiries within 30 days.