Privacy Policy

Last updated: August 30, 2026

1. Introduction

This policy explains what personal information AIM Ticketing collects, why we collect it, how long we keep it, and who else can see it. It covers our website, the ticketing and invitation features used by event organizers, and the “Capture the Moment” pages used by guests at an event.

AIM Ticketing is operated by Associated Inventive Minds Consortium Limited (“AIM Consortium”, “we”, “us”), which is the data controller responsible for the information described here.

If you use the platform this policy applies to you, whether you are an event organizer, a ticket buyer, an invited guest, or a visitor.

2. What We Collect

  • Account information: username, email address, and password (stored only as a cryptographic hash, never in readable form). Organizers may also provide profile and payout details.
  • Event information: event names, dates, venues, poster images, ticket types and prices created by organizers.
  • Ticket and invitation records: the tickets and invitation cards issued, their unique tokens, whether they have been claimed or scanned, and the name or email of the guest a card was assigned to.
  • Content you upload: photos, videos, and voice notes submitted through an event’s capture page, along with any caption you add.
  • Technical information: a session cookie to keep you signed in, and standard server logs (IP address, browser type, pages requested) used to operate and secure the service.

We do not sell personal information, and we do not use it for advertising.

3. Google User Data

Event organizers may connect a Google account so that memories captured by their guests are stored in their own Google Drive rather than on our servers. This is optional; the rest of the platform works without it.

We request a single, narrow permission: drive.file. This grants access only to files that AIM Ticketing itself creates in your Drive. We cannot see, open, or list any other file in your Google Drive, and we never request access to your Gmail, Contacts, or Calendar.

With that permission we do two things, and nothing else:

  • Create a folder for each event and upload the memories your guests capture into it.
  • Read those same files back so they can be shown on the event’s memory wall and in your organizer gallery.

We store the access and refresh tokens Google issues so that uploads keep working during your event without asking you to sign in repeatedly. You can disconnect at any time from your profile page, or revoke our access directly at myaccount.google.com/permissions. Revoking stops all further access immediately; files already in your Drive remain yours and are unaffected.

AIM Ticketing’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where required for security, to comply with the law, or with your explicit consent.

4. Event Memories

An organizer can share a capture link or QR code with the guests at their event. Anyone holding that link can upload a photo, video, or voice note, and can see the most recent memories on that event’s memory wall. No account is needed.

Two consequences follow, and you should be aware of both before uploading:

  • The link itself is the only credential. Anyone it is forwarded to has the same access, so treat it as you would any shared album link.
  • Anything you upload is visible to other guests of that event on the memory wall, and to the event organizer in full.

Where the organizer has connected Google Drive, memories are stored in their Google Drive, under their control, subject to Google’s own terms.

5. Payments

Card and mobile-money payments are processed by Pesapal, our payment provider. Your payment details are entered on Pesapal’s systems and are never received or stored by AIM Ticketing. We keep only the record of the transaction: what was bought, the amount, and whether payment succeeded.

6. Retention and Deletion

  • Event memories are deleted automatically 14 days after the event has ended.
  • Tickets and invitation records are kept while the event is live and afterwards as part of the organizer’s records.
  • Transaction records are retained as long as required for accounting and legal obligations.
  • Account information is kept until you ask us to delete your account.

7. Who We Share Information With

We share personal information only with the parties needed to run the service:

  • Event organizers receive the details of tickets and invitations for their own events, and the memories captured at them.
  • Pesapal processes payments.
  • Google stores event memories, where the organizer has connected Drive.
  • Our hosting and email providers operate the servers and deliver notifications on our behalf.

We may also disclose information where the law requires it, or to investigate fraud or abuse of the platform.

8. Your Rights

You may ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. Organizers can disconnect Google Drive at any time from their profile. Guests who want a memory removed should contact the event organizer, who can delete it, or contact us directly.

Some information cannot be deleted on request where we are required to keep it — transaction records needed for accounting, for example.

9. Contact and Changes

Questions about this policy, or requests about your information, can be sent to us through our contact page.

If we change this policy we will update the date at the top of this page. Material changes affecting how we handle your information will be communicated to account holders directly.