Legal
Privacy Policy
Last updated: July 2026 · Tiko respects your privacy
1. Introduction
This Privacy Policy explains how Tiko collects, uses, stores, and protects your personal data when you use our Platform and services.
2. Information We Collect
Personal Information
- Full name, email address, and phone number
- National ID (where required)
- Business registration information
Account Information
- Username and encrypted password
- Login history
Payment Information
- M-Pesa transaction references and payment confirmations
- The Platform does not store full card details
Payout & Settlement Information
- Payout destination details you provide - bank account numbers, bank codes, or mobile-money numbers, and the account-holder name
- Account-name verification results returned by financial institutions when confirming a payout destination
- Records of escrow holdings, commissions charged, payouts, withdrawal requests, and settlement outcomes
Payout destination account numbers are stored securely and are shown back to you only in masked form.
3. Information from Organizers
For Event Organizer accounts we may collect:
- Business name and registration documents
- Tax information and banking details
- Contact details
4. Information from Artists
For Artist accounts we may collect:
- Artist and stage names
- Portfolio information and media content
- Pricing information and social media links
5. Event Information
We collect event descriptions, venue details, ticket information, and event images submitted by organizers.
6. How We Use Your Information
We use your information to:
- Create and manage your account
- Process payments and generate tickets
- Hold booking funds in escrow, calculate commissions, and settle payouts
- Verify payout destinations and resolve disputes, no-shows, and cancellations
- Verify organizers and artists
- Prevent fraud and improve our services
- Send relevant notifications
7. Legal Basis for Processing
Where applicable, data is processed based on:
- Your consent
- Contractual necessity
- Legal obligations
- Legitimate business interests
8. Sharing Your Information
Information may be shared with:
- Payment processors, SMS providers, and email providers
- Payment and payout providers (including for transfers and account-name verification), and, where applicable, a licensed payment service provider supporting escrow and settlement
- The counterparty to a booking, resale, or dispute, to the limited extent needed to complete or resolve the transaction
- Cloud hosting providers
- Government authorities where required by law
9. Data Security
We implement encryption, secure authentication, role-based access control, audit logging, and regular security monitoring. However, no system is completely secure.
10. Data Retention
We retain information for as long as your account remains active, as required by law, and for fraud prevention purposes. Verification records, audit logs, and financial records - including escrow, commission, payout, and settlement records - may be retained for longer periods where required by law, accounting and tax obligations, regulatory obligations, fraud prevention requirements, or dispute resolution needs, including after account termination.
11. Your Rights
Subject to legal limitations, you may request:
- Access to your personal data
- Correction or deletion of data
- Restriction of processing
- Withdrawal of consent
12. Cookies
The Platform may use authentication cookies, analytics cookies, and security cookies. You may disable cookies through your browser settings, though this may affect Platform functionality.
13. Cross-Border Transfers
Data may be processed outside Kenya where service providers operate internationally. Appropriate safeguards shall be used.
14. Children's Privacy
The Platform is not intended for children under 18 without parental or guardian consent where applicable.
15. Changes to This Policy
The Platform may update this Privacy Policy periodically. Users will be notified where required by law.
Verification Information
The Platform may collect:
- Government-issued IDs and business registration certificates
- Selfies and photographs
- Phone and email verification data
These are used solely for verification, fraud prevention, compliance, and security purposes.
Audit & Security Information
The Platform may collect:
- IP addresses and device identifiers
- Login history and activity logs
- Security events
This information is used to detect fraud, investigate complaints, and secure the Platform.
Fraud Prevention Processing
The Platform may process personal data for fraud detection, risk assessment, identity verification, compliance investigations, and dispute resolution.
Financial & Settlement Data
To hold booking funds in escrow, calculate commissions, and make payouts, the Platform maintains financial records including escrow ledgers, commission entries, payout requests, and settlement outcomes. Where you provide a payout destination, the Platform shares the account details with its payment provider to verify the account-holder name and to make transfers, and stores the verification result.
Booking-related financial information - such as the agreed fee, the commission applied, and the resulting net amount - may be shared with the counterparty to that booking to the extent necessary to complete or resolve it. Records supporting a dispute, no-show report, or cancellation, including any evidence submitted, are processed to reach and document a resolution.
16. Contact Us
Privacy inquiries may be directed to:
Also see our Terms & Conditions