Privacy policy

Stampped is a platform that lets event organizers sell tickets and lets people buy them. This policy covers the website and the ticket emails we send.

When you buy a ticket: your full name, email address and phone number, the event and quantity you chose, and the amount paid. Buyers do not need an account.

When you get a free ticket: the same name, email and phone number. Each email can claim one free ticket per event.

When you sign in as an organizer or buyer: your name and email from your sign-in provider. You can also add an optional profile: username, bio, phone, date of birth, gender, and social links.

When you create events: the event details you enter, and any posters or photos you upload.

When an organizer adds a guest by hand: the guest’s name, email and phone number.

Payments: we do not see or store your card number. Paystack processes card payments and sends us a transaction reference, the amount, and the payment status.

• To sell you a ticket, take payment, and issue your ticket with its QR code.
• To email your ticket and send important updates, such as a cancellation or refund.
• To let organizers check guests in and manage their attendee list.
• To prevent fraud, abuse and overselling, and to keep the service secure.
• To meet our legal, accounting and tax obligations.

The event organizer sees the name, email, phone number and ticket status of people who hold a ticket to their event, so they can run the event. Organizers may not use this information for anything unrelated to the event.

We share information only with the service providers we need to run Stampped:

• Paystack for payments and refunds.
• Clerk for sign-in.
• Convex for our database, file storage and backend functions.
• Brevo for sending ticket emails.
• Our website hosting provider, which serves the pages you visit.

We do not sell your personal information.

We use the sign-in session cookies that Clerk sets so you stay signed in. We also store your light or dark theme choice in your browser’s local storage. We do not currently use advertising or cross-site tracking cookies.

We keep ticket and payment records for as long as needed to run the event, handle refunds and disputes, and meet our accounting and legal obligations. We delete or anonymise other personal information when it is no longer needed.

Under the Nigeria Data Protection Act 2023 you can ask us to show you the personal information we hold about you, correct it, or delete it. You can also object to how we use it. To make a request, contact us at info@getstampped.com. We may need to confirm your identity first. Some records, such as payment history, we must keep for legal reasons even after a deletion request.

We use encrypted connections (HTTPS), restrict access to personal data to the people and systems that need it, verify payment webhooks with signatures, and log exports of attendee data. No system is perfectly secure, so please tell us straight away if you think your information has been exposed.

If we change this policy in a meaningful way, we will update the date at the top and, where appropriate, tell you directly.