Privacy Policy

Last updated: 07 October 2026

VoteFest ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform.

1. Information We Collect

We collect the following categories of personal data:

• Organiser accounts: Full name, email address, phone number, password (hashed), and (for business accounts) company name, RC number, and company address.
• Voters: Optionally collected name, email address, and phone number at the time of voting.
• Transaction data: Payment amount, vote units purchased, gateway reference, and payment status. We do not store card details — all card processing is handled by third-party payment gateways.
• Technical data: IP address, browser type, device type, and session identifiers collected automatically through server logs and cookies.

2. How We Use Your Information

• To create and manage your organiser account.
• To process vote payments and credit votes to contestants.
• To send transactional emails (account verification, activation, payment receipts).
• To calculate and process revenue disbursements to organisers.
• To detect and prevent fraud, security breaches, or policy violations.
• To comply with applicable Nigerian laws and regulatory requirements.

3. Data Sharing

We do not sell your personal data. We share data only with:

• Payment gateways (Paystack, Cashonrails) for processing vote payments. These providers have their own privacy policies.
• Email service providers used to deliver account and transactional emails.
• Law enforcement or regulatory authorities where required by Nigerian law.

4. Contestant Data

Organisers who add contestants to competitions are responsible for ensuring that contestants have consented to having their name, photograph, and vote count displayed publicly on the Platform. VoteFest acts as a data processor for contestant information and processes it solely on the organiser's instruction.

5. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 7 years for accounting and legal compliance purposes. You may request deletion of your account data, subject to our legal obligations.

6. Cookies

VoteFest uses session cookies strictly necessary for authentication and security (CSRF protection). We do not use tracking or advertising cookies. By using the Platform, you consent to our use of session cookies.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data (subject to legal obligations).
• Object to processing of your data in certain circumstances.

To exercise these rights, contact us at votefest@infotekps.com.

8. Security

We implement industry-standard security measures including bcrypt password hashing, CSRF token protection, SQL injection prevention via prepared statements, HTTPS encryption, and strict server-side payment amount validation. However, no system is completely secure, and we cannot guarantee the absolute security of data transmitted over the internet.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

10. Contact

For privacy-related queries, contact our Data Protection Officer at votefest@infotekps.com.