Skip to main content

Legal & Compliance

Legal Agreements & Policies

Transparent terms, data protection disclosures under the NDPA, and ticketing policies governing the WetinNext platform.

Privacy Policy

Status: Technical Draft for Legal Review•Draft Date: September 9, 2026•Governing Framework: Nigeria Data Protection Act (NDPA)

1. Scope & Data Protection Framework

This Privacy Policy describes how [LEGAL ENTITY NAME] ("WetinNext", "we", "us", or "our") collects, processes, stores, and protects personal data when you use the WetinNext platform.

WetinNext operates primarily in Nigeria today and adheres strictly to the provisions of the Nigeria Data Protection Act (NDPA). As WetinNext expands its services into planned future markets across Africa—including Ghana, Kenya, and South Africa—this policy will be updated to address the specific statutory requirements of those respective jurisdictions (such as the Protection of Personal Information Act in South Africa, the Data Protection Act in Kenya, and the Data Protection Act in Ghana) once operational in those markets.

2. Information We Collect

We collect only the information necessary to provide our discovery, social planning, ticketing, and payout services:

User Account Profile

When you register, we collect your email address, phone number, display name, and optional avatar URL. Your account password is cryptographically hashed using Argon2 prior to storage; we never store or have access to your plain-text password.

OAuth Identity Credentials

If you authenticate via Google, Facebook, or Twitter, we record only the provider name and your unique external provider account ID to link your identity. We do not access or store your third-party account passwords, friends lists, or social media feeds.

Orders, Tickets & Verification Codes

We store purchase metadata including order IDs, ticket tier names, quantities, currency amounts, transaction status timestamps, server-hashed rotating QR credentials, and backup alphanumeric codes (#WN-XXXX).

Organizer Settlement Information

For event organizers receiving payouts, we store bank name, bank code, account number, and the verified account name as resolved directly through Paystack.

3. How Geolocation is Handled (No Server-Side Tracking)

When you utilize the "Events Near You" discovery feature on WetinNext, your browser asks for permission via the HTML5 Geolocation API:

  • Your coordinates (latitude and longitude) are stored locally in your browser's localStorage cache for up to 30 minutes to reduce battery and GPS usage.
  • Coordinates are transmitted as temporary query parameters solely to compute distance to nearby events during that specific request.
  • We do not persist or store your geographical coordinates on our database servers or against your user profile.

4. Social Features & Attendance Privacy Controls

WetinNext provides social discovery features including friend connections, shared event plans, and attendance lists. You maintain complete control over who can see your event attendance through our built-in visibility settings:

PUBLIC

Your avatar and display name are visible on the public event page attendee roster.

FRIENDS

Your attendance is visible only to users who are confirmed friends in your network.

PRIVATE

Your attendance is completely hidden from public rosters and friend feeds.

You can modify your attendance visibility at any time in your account privacy settings.

5. Payments and Payment Credentials

All payment card transactions and direct debits are executed securely via Paystack.

WetinNext never sees, collects, or stores raw payment card numbers, expiry dates, CVVs, or online banking passwords. All sensitive financial information is transmitted directly from your client browser to Paystack's encrypted vault. We receive only transaction confirmation tokens, status codes, and authorization references to issue your tickets.

6. In-App Notifications

WetinNext provides functional in-app notifications strictly tied to platform actions:

  • Connection Requests: Notifications when a friend request is received or accepted.
  • Plan Invitations: Notifications when a friend invites you to join an event plan.
  • Organizer Payouts: Notifications when payout settlement funds are released or when bank account resolution is required.

We do not send unsolicited commercial spam or sell your contact info to third-party marketing brokers.

7. Cookies and Authentication Sessions

WetinNext uses essential, first-party httpOnly and Secure cookies solely for user authentication and session security:

  • Access Token: Short-lived JWT (15-minute lifespan) used to authenticate API requests.
  • Refresh Token: Longer-lived secure token (30-day lifespan) used to maintain seamless login sessions without storing raw passwords in your browser.

We do not deploy third-party advertising tracking cookies, cross-device behavioral tracking pixels, or data-broker trackers. See our Cookie Policy for the complete list of every cookie we set.

8. Third-Party Service Providers

We share data with trusted infrastructure providers strictly to operate the platform:

  • Paystack: Payment gateway and bank resolution service for purchases and organizer payouts.
  • Event Organizers: Organizers receive attendee names, ticket tier types, and check-in confirmation to verify entry at venue doors.
  • Cloud Infrastructure: Managed cloud database and hosting providers operating under strict confidentiality and encryption controls.

9. Your Rights Under the NDPA

Under the Nigeria Data Protection Act (NDPA), you are entitled to specific rights concerning your personal data, including:

  • The right to be informed about how your data is collected and processed.
  • The right to access and obtain a copy of your personal data held by WetinNext.
  • The right to rectify inaccurate, incomplete, or outdated information.
  • The right to request deletion of your account and erasure of personal data, subject to statutory retention obligations for financial audit records.
  • The right to object to or restrict processing of your personal information.

10. Data Protection Officer & Contact Inquiries

To exercise your data privacy rights, request data deletion, or submit an inquiry regarding our compliance with the NDPA, please contact our Data Protection team:

Data Controller: [LEGAL ENTITY NAME]

Registered Address: [REGISTERED ADDRESS]

Data Protection Contact: [DATA PROTECTION CONTACT EMAIL]

General Support: [email protected]