Privacy Policy

Who we are

Turnupz is an event platform for discovering events, buying or registering for tickets, and hosting events, in Nigeria and Canada. In this policy, "Turnupz", "we" and "us" means Turnupz Inc. (corporation number 1822152-9), based in Calgary, Canada and Lagos, Nigeria. We decide how and why your personal data is used. Organisers are responsible for how they use attendee information for their own events.

What we collect, and why

We only collect what we need to run your account, your tickets and your events.

Account details: email address, name, username, date of birth, gender (optional), postal code (optional) and a profile photo if you add one.

To create your account, show your profile and sign you in.

The country you normally live in.

To show an approximate amount in your local currency at checkout and to handle the account rules that apply to you. You can browse and buy for events in any country.

Sign-in details: your password (stored only as a one-way hash), and if you sign in with Google, your name, email address and the account identifier Google gives us.

To sign you in securely.

Your phone's location, only if you allow it, only while you're using the app.

To find your city and show events near you first. We use it to work out your city and country; we don't keep your precise location. Saying no doesn't stop you browsing or buying.

Orders, tickets and registrations: what you bought or registered for, quantities, prices, discounts, payment references and status, the tax position of each sale, transfers, refunds, and check-ins at the door.

To issue and check your tickets, handle refunds and transfers, and keep the financial and tax records the law requires.

Payment details. Card and bank details you enter at checkout go straight to our payment provider. We never see your full card number. If you choose to save a card, we keep the provider's token for it (encrypted), the card brand, expiry and issuing country.

To take payment, match it to your order and let you pay faster next time.

For organisers: legal name, date of birth, address, phone number, business name and registration number, tax ID, an identity document and supporting documents, and payout account details. Payout account numbers are stored encrypted, with only the last four digits readable; you can view the full number again by confirming your password.

To verify organisers (who must be 18 or over) before they sell paid tickets, prevent fraud, meet our legal obligations and send ticket proceeds to the right account.

Event content you create: event details, venues, line-ups, images, sponsors, blog posts, and the people you invite to access passes or to your team.

To publish and run your event.

Messages: event group chats, private chats, support chats, messages through our contact form, and reports about events.

To run chats, help you, and keep the platform safe.

Social activity: who you follow and who follows you, saved events, your privacy settings and notification history.

To show your feed and updates, and respect your privacy choices.

Referrals and Turnupz Credit: who invited you or whose link you bought through, the codes you use, and any credit you earn or spend.

To run the referral programme and give you the credit you've earned.

Device and security data: your IP address, the devices you're signed in on (device name and sign-in times), and a scrambled device identifier.

To keep your account secure, let you sign out of other devices, stop abuse such as fake referral accounts, and record who changed what on administrator accounts.

Usage counts: a random visitor identifier that lets us count visits to events and promoted listings, and technical error reports when something breaks.

To show organisers how many people saw their event and to fix problems. These don't identify who you are.

What we don't do

• We don't sell your personal data.
• We don't use advertising trackers or third-party analytics cookies.
• We don't keep your precise location, and location is never required.
• We don't hold ticket money. Payment providers take payments and send organisers their share directly; Turnupz receives only its own fees.
• We only use the camera when an organiser scans tickets at the door, and we don't keep those images.

Who we share it with

We share data only with the services that help us run Turnupz, and only what each one needs:

• Payment providers: Flutterwave (Nigeria) and Stripe (Canada) take payments, process refunds and pay organisers. Canadian organisers have their own Stripe account, so Stripe also holds the details they give it. Payments taken earlier through Paystack stay with Paystack, which handles their refunds.
• Google: signing in with Google, and Google Maps to look up venue addresses.
• Cloudinary: storing images and documents you upload, including organiser identity documents.
• SendGrid: sending emails such as sign-in codes, receipts and event updates.
• Novu and OneSignal: delivering in-app and push notifications.
• Sentry: error reports, so we can fix problems.
• Railway and Vercel: hosting our servers, database and website.
• Event organisers: when you get a ticket, the organiser sees your name and ticket details, including at check-in. For events where they approve registrations, they also see your email address.
• Other attendees: your name and profile photo are visible to other members of an event chat you join, and your public profile follows your privacy settings.
• Tax advisers, auditors and authorities, where the law requires it, or to protect people from fraud or harm.

Why we're allowed to use it

Under Nigeria's Data Protection Act 2023 and Canada's privacy laws (PIPEDA, and Québec's Law 25 for people in Québec), we use your data because:

• You asked us to: to provide your account, tickets, payments and payouts.
• The law requires it: to keep financial and tax records and to verify organisers.
• It's needed to keep Turnupz safe: to secure accounts, prevent fraud and moderate events.
• You agreed: for location and push notifications, which you can turn off at any time in your phone's settings.

How long we keep it

• Account details: until you delete your account. Deleting it removes your profile, photo, followers, saved cards and sign-ins straight away.
• Orders, payments, payouts and tax records: at least six years, as tax and accounting law requires, longer where the law says so. If you delete your account, these are kept without your name.
• Organiser verification documents and payout details: while the organiser account is open, then for as long as the law requires for financial records.
• Security and administrator audit records: for as long as we need them to investigate problems, and no longer than the financial records above.
• Messages you send us and event reports: until they're resolved, and for as long as we may need them to answer follow-ups.

Your choices and rights

You can see, correct and download most of your data in your account settings, and delete your account at any time in the app or at turnupz.app/delete-account. You can also ask us for a copy of your data, to correct or delete it, or to stop or limit how we use it, and you can withdraw consent you've given. Email admin@multraempire.com and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission, the Office of the Privacy Commissioner of Canada, or in Québec, the Commission d'accès à l'information.

Who's responsible for your privacy

Our Data Protection Officer is responsible for protecting personal information at Turnupz. You can reach them at admin@multraempire.com.

Cookies and local storage

We use a cookie and your browser's local storage to keep you signed in, remember your settings and keep a copy of an event you're creating while you work on it. We also keep a random visitor identifier to count visits, not to identify you. The app stores the same kind of information on your phone. Our Cookie Policy lists each one.

Security

Passwords are hashed, payout account numbers and saved-card tokens are encrypted, connections are encrypted, and administrator access is limited by role and logged. Tickets show a code that changes every 30 seconds, so a picture of a ticket stops working within minutes. No system is perfectly secure: use a strong password, and tell us at admin@multraempire.com if you notice anything wrong.

Data stored in other countries

Some of the services above store or process data outside Nigeria and Canada, mainly in the United States. We choose providers that protect personal data under their data processing terms, and we only share what each one needs.

Children

Turnupz isn't for children under 13. We ask for your date of birth when you sign up. Organisers must be 18 or over. Some events have their own age limits, which the organiser sets and checks at the door.

Changes to this policy

If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.