Privacy Policy

Occur is operated by Mustard HQ. This Privacy Policy explains what personal information we collect, why we collect it, how we share it, and your choices. Contact us at hello@occur.ng.

Account information

• Name, email address, and authentication identifiers when you register or sign in (including Google sign-in where enabled).
• Profile details you choose to provide in your dashboard.

Transaction and event data

• Ticket purchases, order history, tier selections, payment references, and check-in status.
• Events you create: titles, descriptions, images, schedules, locations, capacity, and attendee lists (for creators).
• Payout and bank details provided for creator settlement via Paystack subaccounts.

Technical data

• Device, browser, IP address, and usage logs needed to secure and operate the service.
• Session cookies required for authentication.

• Provide ticketing, payments, QR check-in, creator dashboards, and customer support.
• Send transactional emails (confirmations, refunds, announcements initiated by creators).
• Prevent fraud, enforce our Terms, and comply with legal obligations.
• Improve reliability, analytics, and product features in aggregated or de-identified form where possible.

Card and bank payments are processed by Paystack. We do not store full card numbers on our servers. Paystack processes payment data under its own privacy policy. We receive transaction references, amounts, and status needed to fulfil tickets and payouts.

We use trusted providers to run Occur, including:

• Firebase — authentication and database.
• Paystack — payments and creator settlements.
• Cloudinary — event cover and media hosting.
• Resend — transactional email delivery.
• Netlify (or equivalent hosting) — application hosting.

These providers process data only as needed to perform their services and under contractual safeguards.

We may share information:

• With event creators, for attendees of their events (name, email, ticket tier, check-in status).
• With service providers listed above, under confidentiality obligations.
• When required by law, court order, or to protect rights, safety, and security.
• In connection with a merger, acquisition, or asset sale, with notice where required.

We do not sell your personal information.

We retain account and transaction records while your account is active and as needed for legal, tax, and dispute resolution purposes. You may request deletion subject to obligations to retain certain payment and event records.

We use industry-standard measures including encrypted sessions, server-side secret handling, webhook signature verification, and access controls on creator data. No method of transmission over the internet is 100% secure; please use a strong password and protect your account.

Depending on applicable law, you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with a supervisory authority.

To exercise these rights, email hello@occur.ng. We will respond within a reasonable timeframe.

Occur is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us to request deletion.

Our providers may process data in jurisdictions outside Nigeria. Where required, we implement appropriate safeguards for cross-border transfers.

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the latest version. Continued use after changes constitutes acceptance of the updated policy.

Privacy questions: hello@occur.ng. Visit our Contact page for more options.