1. Who is responsible
EventYard is an event discovery, booking and hosting service. This policy covers its website, mobile apps and related account services.
The organisation responsible for this service is SYNTAX LIMITED, at Road 1, Anifalaje, Akobo. For privacy questions or requests, contact hello@eventyard.africa.
2. Account and sign-in information
We use your email address, name, username and account identifier to create and manage your account. You may also provide a profile photo, contact phone number, interests and account preferences.
When you choose Google sign-in, Google sends basic identity information, which may include your name, email address, profile picture and a Google account identifier. EventYard uses the identifier and verified email to authenticate you and stores your name for profile setup. The current integration does not copy your Google profile picture into your EventYard avatar. You can upload a photo separately.
When you choose Apple sign-in, Apple supplies an account identifier and an email address. If you choose Hide My Email, that address is an Apple private relay address. Apple may also send the name you choose on first consent, which we use to prefill a new profile. You can enter or edit your EventYard profile name during setup.
We do not receive your Google or Apple password. We do not request access to your Gmail messages, contacts, Drive files or calendars through sign-in. A provider account is connected to your EventYard account using its provider identifier; a matching email alone does not silently connect accounts. You can review connected options in Account details and manage a provider authorisation in your Google or Apple account.
3. Information from using EventYard
Depending on the features you use, we process event listings, venue details, ticket selections, registrations, attendance and check-in records, saved events, followed hosts, invitations, messages, notifications and support correspondence.
Hosts may supply business, identity, banking or payout information for verification and payment services. The information required depends on the relevant country, payment method and verification process. Verification providers may receive identity details you submit, while EventYard retains the evidence and status needed for account security, verification and financial records.
Device permissions such as camera access for ticket scanning, photo access for an upload, or location access are requested in context. Location and venue searches can involve map and place-search providers. You can decline optional permissions, although the related feature may then be limited.
4. Why we use information
We use information to authenticate accounts, deliver tickets and event communications, provide discovery and hosting features, process and reconcile transactions, verify eligible hosts, support check-in, resolve disputes, and protect the service against fraud and misuse.
We process account, booking and hosting information to perform the services you request; retain required financial and compliance records to meet legal obligations; and use necessary security, fraud-prevention and service-administration information for legitimate interests, taking your rights into account. Where an activity requires consent, including optional permissions or marketing where applicable, we seek that consent separately. You may withdraw consent without invalidating processing that was lawful before withdrawal.
6. Payments and financial information
Payment providers handle the payment details required by the method you choose. EventYard uses transaction references, payment status, order and refund records, and relevant wallet or payout details to provide the service and maintain accounting records.
Card or bank authorisation information should be entered only in the designated payment-provider flow. Financial records and identity evidence can have different retention and disclosure requirements from ordinary profile information. Closing an account may not require immediate deletion of records that must be retained for legal, fraud-prevention or reconciliation purposes.
7. Cookies, storage and security
The website uses an HttpOnly session cookie to keep you signed in and a short-lived cookie to complete provider sign-in. Preferences and authorised offline check-in features may use local browser or device storage. The mobile app uses platform secure storage for session credentials.
We use access controls and other technical and operational safeguards appropriate to the information. Authentication secrets remain on the API, provider responses are verified, and EventYard session credentials are not placed in callback URLs. No service can guarantee that every security incident will be prevented.
We keep account and profile information while your account is active and as needed to provide the services you request. We retain booking, payment, refund, payout and verification records for applicable accounting, legal, dispute-resolution and fraud-prevention needs. Authentication attempts, security logs and support records are retained only as needed for their operational or security purpose. Retention depends on the record, an unresolved transaction or dispute, and applicable legal requirements.
You may request account closure and deletion through hello@eventyard.africa. After verifying the request, we delete or anonymise information that is no longer needed and explain any records that must be retained and why. Backup copies can remain until their normal replacement or deletion cycle and are restricted from ordinary use. Event staff should remove offline admission copies when no longer needed for the event or a related support issue. Removing an app or a local browser copy does not itself delete server records.
8. Your choices and rights
You can edit supported profile fields, change preferences, sign out, and control optional permissions. To request access, correction, deletion, a copy of your information, a restriction, or an objection to processing, email hello@eventyard.africa, preferably from your account email, and describe your request. Do not send passwords, sign-in codes or unnecessary identity documents. We may request proportionate information to verify that the request concerns your account.
We review requests, respond within the period required by applicable law, and explain any lawful restriction or refusal and the available complaint route. Your rights depend on the applicable law and can have exceptions. In Nigeria, these include rights concerning information about processing, access, correction, objection, relevant deletion and portability, and certain automated decisions. You can raise a complaint with the Nigeria Data Protection Commission.
9. Age requirements and policy changes
You must be at least 18 years old to create or use an EventYard account. The service is not directed to children. Event-specific age restrictions still apply. If you believe someone under 18 has created an account, contact hello@eventyard.africa so we can review the concern.
When this policy changes, we update its effective date and provide additional notice or obtain a new choice where required for a material change. Contact hello@eventyard.africa with questions about this policy.