Privacy Policy

Effective 1 October 2026

This policy explains what personal data Sabi Events ("Sabi", "we", "us") collects, why we collect it, who sees it, and the choices you have. We are a Nigeria-first events platform, and we handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA). If anything here is unclear, write to us at support@sabievents.com.

1. Who is responsible for your data

For the data described below, Sabi is the data controller. When you buy a ticket, the event organiser also receives some of your details to run their event; they are responsible for how they use what we share with them.

2. What we collect

Information you give us

Account details: your name, email address and password. Passwords are stored only as a one-way hash, so nobody at Sabi can read them.
Ticket and order details: the name and email on each ticket, which ticket type you bought, your order reference and whether the ticket has been scanned at the door.
Organiser details: your organiser name, the currency you sell in and your event content (titles, descriptions, images, agenda, speakers).
Identity verification: organisers must be verified before their first payout. You give us your legal name, the type of document (for example NIN, BVN, CAC registration or passport) and its number. We keep only the last four characters of the number.
Payout details: the account name, bank code and the last four digits of your bank account. We never store a full account number; the payment provider holds the rest under a reference.
Things you post: event chat messages, photos you add to an event gallery, and messages you send to support.

Information collected automatically

Sign-in records: when you sign in we record the time, your IP address and browser type, to keep your account secure and to spot misuse. The same details are kept when you accept terms at checkout, as proof of consent.
Event page visits: we count how many visitors view an event page, open checkout and where they came from (for example Instagram or a direct link) so organisers can see how their event is doing. We do not store your IP address or browser details for this. A one-way code that changes every day is used only so that one person refreshing a page counts once; it cannot be linked across days or turned back into an address.
Cookies and similar storage: see our Cookie Policy.

3. How we use your data, and why

To provide the service (contract): create your account, sell and deliver tickets, check people in, pay organisers, and send you the emails that come with an order, such as confirmations, password resets and team invitations.
To keep the platform safe (legitimate interests and legal obligation): prevent fraud and abuse, verify organisers, investigate disputes, and keep the records the law requires us to keep.
To improve Sabi (legitimate interests): understand what works, fix problems and measure performance in aggregate.
With your consent: anything optional, such as agreeing to share your details with an event sponsor. You can say no, and your ticket is unaffected. You can withdraw consent at any time.

We do not sell your personal data, and we do not use it for advertising.

4. Who we share it with

The event organiser receives the details of people who buy tickets to their event: name, email, ticket type, order reference and check-in status. We do not collect phone numbers.
Our payment provider (currently Paystack) processes payments and payouts. Card details go straight to the provider and never pass through Sabi servers.
Service providers that help us run the platform: email delivery (currently Resend), file and image storage and delivery (currently Cloudflare), and cloud hosting. They may only use your data to provide their service to us.
Sponsors, only if you opted in at checkout.
Authorities and advisers where the law requires it, to protect our rights, or to investigate fraud; and a buyer or seller in a business transfer of Sabi, who must honour this policy.

5. Transfers outside Nigeria

Some of our providers process data outside Nigeria. When that happens we use providers that commit to protecting it, and we share only what is needed for the service.

6. How long we keep data

We keep your account data while your account is open. When you ask us to close it we delete or anonymise your personal data, except what we must keep by law: financial and tax records are kept for as long as Nigerian law requires, and records of consent and of disputes are kept as long as a claim could still be made. Event chat messages are deleted after a retention period following the event. Order and ticket records are kept so organisers and buyers can resolve questions about past events.

7. Security

We protect your data with encryption in transit, hashed passwords, limited staff access with every administrative action logged, and separate sign-in for our staff console. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

8. Your rights

Under the NDPA you can ask us to: give you a copy of your data; correct it; delete it; restrict how we use it; give it to you in a portable format; and stop using it for something you object to. To make a request, email support@sabievents.com from the address on your account. We may need to confirm it is you, and we will reply within the time the law allows. Some data we cannot delete because the law requires us to keep it, and we will say so if that applies.

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Nigeria Data Protection Commission.

9. Children

Sabi is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy. The date at the top shows when the current version took effect. If we make a change that matters to you, we will tell you in advance by email or on the site.

11. Contact

Sabi Events, support@sabievents.com.