Exactly how Softickets collects, uses, shares, and protects your personal information across the Softickets and Softickets Pro apps.
Softickets collects only the information needed to run your account, process ticket bookings, and improve the platform. We do not sell your personal data. We use it to fulfil your ticket purchases, send booking confirmations, enable QR-code entry at events, show you relevant events, and keep your account secure. You may access, correct, or delete your data at any time by contacting us at softicketing@gmail.com.
Aslan Softicketing Innovations Limited ("ASIL", "we", "us", or "our") operates the Softickets platform — a mobile-first event ticketing service available at www.softicketing.com and as a Progressive Web App (PWA) installable on any device. We are incorporated in Zambia under the Patents and Companies Registration Agency (PACRA).
This Privacy Policy explains how we collect, use, share, and protect your personal information when you use:
By creating an account or using the Softickets platform, you agree to the practices described in this Policy. If you do not agree, please do not use the platform. For questions, contact us at softicketing@gmail.com.
We collect information in three ways: information you provide directly, information generated when you use the platform, and information from third parties.
When you register for a Softickets account, we collect:
When you purchase tickets, we collect and store:
Softickets does not store your card number, CVV, or full bank details. Payments are processed by third-party payment providers (such as Airtel Money, MTN Mobile Money, or card processors). We receive only a transaction reference and confirmation status. Please review your payment provider's own privacy policy for how they handle your financial data.
When you save an event to your Favourites, we store a link between your user account and that event. This is used solely to display your saved events and can be deleted at any time from within the app.
When your QR-code ticket is scanned at an event entrance, we record:
This data is used strictly for access control, fraud prevention, and post-event reporting provided to the event organiser.
The app displays a default city ("Lusaka, Zambia") and may request approximate location access to show nearby events on the map view. We do not continuously track your location. Location access is optional — you may deny it without losing core functionality. We do not share precise location data with third parties.
When you use the platform, our servers and analytics tools may automatically collect:
This information is used for security monitoring, debugging, and aggregate analytics. It is not linked to your identity for marketing purposes.
The Softickets Admin app requests access to your device camera solely for the purpose of scanning QR codes at event entrances. Camera access is only active while you are on the Ticket Scanner screen and you have started the scanner manually. No video is recorded or transmitted. We do not process biometric or facial recognition data.
If you opt in to push notifications, we collect a device notification token to send you booking confirmations, event reminders, and relevant updates. You can withdraw consent at any time in your device settings or via the Profile screen.
If you contact us via email or our support channels, we retain the content of that communication to resolve your query and improve our service.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Create and manage your account | Name, email, password hash | Contract performance |
| Process ticket bookings | Booking details, payment confirmation | Contract performance |
| Generate and deliver QR-code tickets | Booking ID, ticket number, user ID | Contract performance |
| Enable entry validation via QR scan | QR code, scan timestamp, scanner ID | Contract performance |
| Display your past and upcoming tickets | Ticket records, event details | Contract performance |
| Show and sync your saved favourites | User ID, event ID | Legitimate interest |
| Display nearby events on map | Approximate location (optional) | Consent |
| Send booking confirmations and reminders | Email address, booking data | Contract performance |
| Send push notifications | Device token | Consent |
| Prevent fraud and duplicate ticket use | Scan log, QR codes, IP address | Legitimate interest |
| Platform security and abuse prevention | IP address, device info, access logs | Legitimate interest |
| Improve platform features and UX | Aggregated, anonymised usage data | Legitimate interest |
| Comply with legal obligations | Any required data | Legal obligation |
| Provide post-event reports to organisers | Scan counts, ticket sales totals | Legitimate interest |
We do not sell your personal data. We share your information only in the following circumstances:
When you purchase a ticket to an event, the organiser receives aggregated sales data (e.g., number of tickets sold, revenue totals) and scan-in counts. We do not share your name, email, or full profile with event organisers unless you have explicitly consented (e.g., by submitting a form created by the organiser). Post-event reports contain anonymised attendance figures only.
We share transaction reference data with our payment processing partners (mobile money operators and card processors) to confirm and reconcile payments. These partners are bound by their own privacy and data security obligations. We do not share more than is necessary to complete the transaction.
We use the following infrastructure providers to operate the platform:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase (USA) | Database, authentication, file storage | User profiles, bookings, tickets, scans |
| Firebase (Google) | Push notifications, realtime sync | Device tokens, user IDs |
| Vercel / CDN | Web app hosting and delivery | Request logs, IP addresses |
| Email provider | Transactional emails (booking confirmations) | Email address, booking reference |
All providers are vetted for adequate data security. Where required, we enter into data processing agreements with these providers.
We may disclose personal information if required to do so by applicable Zambian law, regulation, court order, or lawful request from a government authority. We will notify you if legally permitted to do so.
If ASIL is involved in a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account profile | Until account deleted + 30 days | Account operation |
| Ticket & booking records | 5 years after event date | Financial record-keeping, legal compliance |
| Scan log records | 3 years | Fraud prevention, audit trail |
| Favourites | Until removed by user or account deleted | User preference |
| Payment transaction references | 7 years | ZRA tax compliance (Zambia) |
| Push notification tokens | Until revoked or account deleted | Notification delivery |
| Server access logs | 90 days | Security monitoring |
| Support communications | 2 years after resolution | Quality and compliance |
When data is no longer needed, it is securely deleted or anonymised. Anonymised aggregate data (e.g., total event attendance figures) may be retained indefinitely for analytics and reporting.
As a user of Softickets, you have the following rights regarding your personal data. To exercise any of these rights, contact us at softicketing@gmail.com with the subject line "Data Rights Request".
You may request a copy of all personal data we hold about you.
You may update your profile information at any time via the Profile screen, or ask us to correct inaccurate data.
You may request deletion of your account and associated personal data. Use the "Delete Account" option in the Profile screen, or contact us. Note: we may retain records required for legal or tax compliance (see Section 5).
Where we process data based on consent (e.g., push notifications, location), you may withdraw consent at any time without affecting the lawfulness of prior processing.
You may unsubscribe from promotional emails at any time using the unsubscribe link in those emails or by contacting us.
You may request your personal data in a machine-readable format (CSV or JSON) where technically feasible.
You may object to processing based on our legitimate interests. We will honour your objection unless we have overriding legitimate grounds.
Many privacy controls are available directly in the Softickets app: Profile screen → Edit Profile to update your name · Profile screen → Notifications to manage push notification consent · Favourites screen → remove any saved event instantly · Profile screen → Delete Account to permanently delete your account and data.
We take the security of your data seriously and implement the following measures:
Despite these measures, no internet-based service can guarantee absolute security. If you believe your account has been compromised, contact us immediately at softicketing@gmail.com. In the event of a data breach that poses a risk to your rights, we will notify affected users as required by applicable law.
Softickets is a Progressive Web App (PWA). We use browser cookies and local storage for the following purposes:
| Name / Type | Purpose | Duration |
|---|---|---|
| Supabase auth session cookie | Keeps you logged in across visits | Until you sign out or session expires |
| Next.js route cache | Faster page loads | Session only |
| PWA service worker cache | Offline support for app shell | Until PWA update or cache cleared |
| User preference (localStorage) | Remember UI choices (category filter, etc.) | Persistent until cleared |
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that identify you personally. You can clear cookies at any time in your browser settings, though this will sign you out.
Softickets is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. For events where attendees may be minors (such as family shows or school events), the ticket purchaser must be an adult who accepts responsibility for the booking.
If you are a parent or guardian and believe your child has created an account, please contact us at softicketing@gmail.com and we will delete the account promptly.
The Softickets platform may display links to external websites (such as event organiser websites or social media pages). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.
Event organisers using the Softickets Admin app are responsible for ensuring their own compliance with applicable data protection laws when they access event reports or scan tickets at their events.
Softickets is operated from Zambia. Our infrastructure providers (Supabase, Firebase, Vercel) store and process data on servers located in the United States and/or the European Union. By using the platform, you consent to your data being transferred to and processed in these jurisdictions.
We ensure that such transfers are made with appropriate safeguards, including standard contractual clauses where required. Where providers are US-based, we verify their compliance with applicable cross-border data transfer frameworks.
ASIL processes personal data in accordance with the Data Protection Act No. 3 of 2021 of the Republic of Zambia, administered by the Zambia Information and Communication Technology Authority (ZICTA). Our legal bases for processing are:
Processing necessary to fulfil your ticket booking, deliver your QR ticket, and maintain your account.
Processing necessary for platform security, fraud prevention, aggregate analytics, and post-event reporting — balanced against your privacy interests.
Processing based on your explicit opt-in, such as push notifications and location access.
Processing required by Zambian tax law (ZRA), company law, or court order.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:
Your continued use of Softickets after the effective date of any update constitutes acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and may request deletion of your account.
For any privacy-related questions, requests, or complaints, contact us at:
We aim to respond to all data rights requests within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with ZICTA.