Privacy policy
How OkZulu handles your data
Last updated: 11 April 2026.
OkZulu collects the information needed to run event discovery, RSVPs, ticketing, host payouts, and account access. This page explains what we collect, why we collect it, and the choices available to users and hosts.
Information We Collect
Account information such as your name, email address, password hash, profile image, and optional location.
Event activity such as events you create, save, RSVP to, pay for, or attend.
Payment and payout information needed to process ticket purchases, refunds, or host settlements. OkZulu stores booking and payment records, but payment providers may also hold their own transaction records.
Technical information such as session identifiers, callback state tokens, webhook payloads, and basic operational logs needed to keep the service secure and functioning.
How We Use Information
To create and manage accounts, authenticate users, and keep user sessions active.
To publish events, manage RSVPs, issue tickets, reconcile payments, prevent duplicate bookings, and support refunds.
To operate host tools such as payout settings, seating plans, media uploads, and event administration.
To investigate fraud, abuse, payment disputes, service errors, and security incidents.
When Information Is Shared
With payment providers such as SumUp, TrueLayer, Monzo, or other configured services when needed to create, confirm, or refund a transaction.
With storage or infrastructure providers used to serve uploaded images, media assets, logs, and hosting environments.
With event hosts when you RSVP or purchase a ticket for their event and the details are necessary to fulfil attendance or support requests.
When required by law, regulation, court order, or a legitimate security investigation.
Data Retention
Account, booking, payment, and event records may be retained while your account remains active and for a reasonable period afterward where needed for fraud prevention, financial records, chargebacks, tax obligations, or dispute handling.
Hosts are responsible for ensuring that information they export or collect through their own workflows is handled lawfully.
Your Choices
You can update profile details from your account where those controls are available.
You can request account deletion or correction through the OkZulu support contact used by your deployment.
If you sign in with an external provider such as Google, Microsoft, Apple, LinkedIn, Instagram, Facebook, Yahoo, or TikTok, you can also manage that connection from the relevant provider account settings.
Contact
Questions about this privacy policy or a request about your data should be sent to the operator of the OkZulu deployment you are using.