Privacy Policy

1. Introduction

Wakilo (referred to as "we," "our," or "us") operates as an event discovery and aggregation platform. Our service helps users search, explore, and discover cultural, musical, community, and tech events happening across major Nigerian cities.

Wakilo is **not** a ticketing vendor or payment processor. We aggregate public event data from third-party platforms (like Tix.Africa and Selar) and Deep-Link you to their secure platforms to finalize purchases. This Privacy Policy details how we handle the minimal data collected when you use our website.

2. Information We Collect

We believe in data minimization. You do not need to register an account to search or browse events. We collect only the following information:

• Referral Track Logs:When you click "Continue on Tix.Africa/Selar" to inspect ticket checkouts, we log the event redirect. We securely hash your client IP address using **SHA-256** to record anonymous traffic referrers and enforce strict bot rate-limits (maximum 15 clicks/minute per client). We never store raw IP addresses.
• Account & Auth Information (Optional): If you choose to log in using Supabase Auth (e.g. Magic Link or Google OAuth), we process your profile email, avatar URL, and name to link bookmarks.
• User Preferences & Bookmarks: If you use the bookmark system or the onboarding quiz, we store your city preferences and bookmarked event IDs.

3. Telemetry and Cookies

We do not use invasive third-party ad-tracking pixels. We use standard browser local storage to manage your active search queries, theme selections, and local bookmark toggles if you browse signed-out.

4. Data Sharing & Third-Party Processing

Wakilo does not sell, lease, or distribute user information to data brokers. We share data only with the following sub-processors to run the service:

• Supabase: For cloud hosting of our public database, profiles, authentication, and secure storage logs.
• Vercel: For edge computing, serverless routing, and hosting our client-side interface.

5. Data Retention & Expiry

We implement automatic cleanup logic. Events with confirmed dates are archived after they conclude. Events with vague or TBC dates are purged after N days of inactivity to ensure our catalog remains fresh and relevant.

6. Your Rights Under NDPA (Nigeria Data Protection Act 2023)

If you reside in Nigeria, you hold strict statutory rights regarding your personal details, including:

• The right to request access, correction, or deletion of your profile data.
• The right to object to automated processing or request portability.
• The right to file inquiries with the Nigeria Data Protection Commission (NDPC).

To exercise any of these profile actions, you can delete your account under your settings or contact our support team.