Privacy Policy

Effective date: 7 June 2026

This Privacy Policy explains how Issorite (issorite.com), a company registered in the Federal Republic of Nigeria ("cheevo", "we", "us", or "our"), collects, uses, shares, and protects your personal information when you use the cheevo platform — including the cheevo attendee app, the cheevo organizer app, and our websites (together, the "Platform").

This Policy should be read together with our Terms of Service. By using the Platform, you agree to the practices described here. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and other applicable laws.

1. Who this Policy applies to

This Policy applies to everyone who uses the Platform, including Attendees (people who discover events, RSVP, and buy tickets), Organizers (people and organisations who create events and sell tickets), and visitors to our websites.

When you buy a ticket or RSVP to an event, the Organizer of that event also receives certain personal information about you and acts as an independent controller of that information for their own purposes. See section 5.

2. Information you provide to us

• Account information — your email address, used to create your account and sign you in with one-time codes.
• Profile information — first and last name, username, profile photo (or an automatically generated avatar), bio, gender, and date of birth.
• Location you provide — your city and a place name, and (if you grant permission) your device's geographic coordinates, used to personalize event discovery.
• Interests — the interest categories you select to tailor recommendations.
• Organizer information (Organizers) — organisation name, description, contact email and phone, website, social handles, logo and cover images, and team membership.
• Payout and banking information (Organizers) — bank name, bank code, account number, and account name used to verify your account and send payouts.
• Orders and tickets — the events you order tickets for or RSVP to, order amounts, and issued tickets.
• Content you submit — comments, GIFs, mentions, likes, event descriptions and images, and other materials you post.
• Reports and safety information — reports you submit about content or users, and the users or organisations you block.
• Communications — messages you send us, including support requests.

3. Information we collect automatically

• Device and technical data — device type, operating system, app version, and a device identifier used for push notifications.
• Push notification tokens — tokens that allow us to deliver notifications to your device.
• Log and session data — IP address, browser or app user agent, and session activity, used for security, fraud prevention, and to keep you signed in.
• Usage and activity data — actions you take on the Platform, such as RSVPs, follows, blocks, ticket scans (for Organizers checking in attendees), and last-active timestamps.
• Approximate and precise location — where you grant permission, we use your device location to detect your city and surface nearby events. You can disable location access at any time in your device settings.
• Diagnostics and crash data — error reports and performance information that help us diagnose problems and improve the Platform.

4. Information from third parties

• Payment providers confirm the status of your payments and provide transaction references. We do not receive or store your full card details.
• Bank verification — for Organizer payouts, our payment provider helps verify the account name associated with the bank details you provide.
• Avatar generation — when you do not upload a photo, we generate a placeholder avatar using a non-identifying seed (such as your username).

5. How we share information

We do not sell your personal information. We share it only as described below.

5.1 With Organizers

When you RSVP to or buy a ticket for an event, the Organizer receives the information needed to manage attendance — such as your name, email, ticket details, and check-in status — and may contact you about that event (including via broadcasts). Organizers use this information as independent controllers and are responsible for their own handling of it. Please review the relevant Organizer's practices for details.

5.2 With service providers (sub-processors)

We use trusted third parties to operate the Platform. They process personal data on our behalf, under contract, only as needed to provide their service:

• Paystack and Flutterwave — payment processing and Organizer payouts.
• Resend — delivery of transactional emails (sign-in codes, confirmations, and account notices).
• Expo and Google Firebase / Firebase Cloud Messaging — delivery of push notifications and app updates.
• Google Maps Platform (Places) — location search, place details, and geocoding.
• GIPHY — GIF search within comments.
• DiceBear — generation of placeholder avatars.
• Sentry — error monitoring and diagnostics.
• Vercel — hosting of our websites.

5.3 For legal and safety reasons

We may disclose information where we believe in good faith that it is necessary to comply with law, legal process, or a lawful request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of cheevo, our users, or the public.

5.4 Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

6. How we use your information

• To create and manage your account and authenticate you.
• To provide the Platform's core features — event discovery, RSVPs, ticket purchases, ticket delivery and check-in, and Organizer tools.
• To process payments and Organizer payouts, and to maintain order and transaction records.
• To personalize event recommendations and your experience.
• To send transactional communications and, where you have opted in, marketing communications.
• To enable safety features — reporting, blocking, moderation, and account suspension — and to prevent fraud and abuse.
• To diagnose problems, monitor performance, and improve the Platform.
• To comply with legal obligations and enforce our Terms.

Depending on the activity, we rely on one or more legal bases under the NDPA: your consent (for example, location access and marketing); performance of a contract (to provide the Platform and process your Orders); our legitimate interests (such as security, fraud prevention, and improving our services); and compliance with a legal obligation.

7. Notifications and marketing

Transactional messages — such as sign-in codes, order confirmations, ticket delivery, and security notices — are part of the service and are sent regardless of marketing preferences.

For other notifications, you can manage your preferences by type and channel (push, email, in-app), set quiet hours, and mute individual events within the Platform. Marketing emails and Organizer broadcasts include an unsubscribe option, and you can withdraw marketing consent at any time. Turning off marketing does not stop transactional messages.

8. Cookies and similar technologies

Our mobile apps store a secure sign-in token on your device and do not use advertising cookies. Our websites use essential cookies and similar technologies needed to operate the site and keep it secure, and limited diagnostics. You can control cookies through your browser settings; disabling essential cookies may affect site functionality.

9. Data retention

We keep your personal information for as long as your account is active and as needed to provide the Platform. After that, we retain information only as necessary for the purposes described in this Policy — including to complete transactions, maintain financial and accounting records, prevent fraud, resolve disputes, ensure event and ticket integrity, and comply with legal obligations.

When you delete your account, we delete your profile and account information and retain certain transaction records (such as Orders and issued Tickets) in anonymized form, where the link to your identity is removed. Short-lived data such as one-time codes and verification challenges expires automatically.

10. Your rights and choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you, and request a copy. You can export your data directly from within the app at any time.
• Correct inaccurate or incomplete information by updating your profile.
• Delete your account and personal data from within the app. Note that you cannot delete an account that still owns an Organisation — you must transfer or remove it first. See our Account & Data Deletion page.
• Object to or restrict certain processing, and withdraw consent where we rely on it (for example, location or marketing).
• Manage communications through notification preferences and unsubscribe links.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.

To exercise any right that isn't available in the app, contact us at support@cheevo.events. We may need to verify your identity before acting on a request.

11. Security

We take reasonable technical and organizational measures to protect your information, including encryption of data in transit, one-time-code sign-in, and additional verification (step-up) for sensitive actions such as changing your email or deleting your account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep access to your email and devices secure.

12. International transfers

Some of our service providers may process your information outside Nigeria. Where we transfer personal data internationally, we take steps to ensure it is protected in accordance with the NDPA and this Policy.

13. Children's privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at support@cheevo.events and we will take appropriate steps to delete it.

14. Third-party links and services

The Platform may link to or rely on third-party services, events, venues, and websites that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy practices.

15. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Effective date" above and may provide additional notice through the Platform. Your continued use of the Platform after the changes take effect constitutes acceptance of the updated Policy.

16. Contact us

If you have questions, requests, or concerns about this Policy or your personal information, contact us at support@cheevo.events. cheevo is operated by Issorite, registered in the Federal Republic of Nigeria.