Security
Security advisories
We want Evittone to be safe to use and safe to run events on. This page explains how the parts of the product that carry security weight work, and how to tell us when something is wrong.
How payments are handled
Ticket payments go through Paystack, using mobile money through MTN, Telecel, or AirtelTigo, or by card. Payment details are handled by Paystack as the payment provider; an approved refund is returned to the original payment method.
How entry is verified
Entry to an event is verified by scanning the QR code on your ticket. That scan is also what makes you a verified attendee, which is the only way to leave a rating or a vote. Attendees see a number of attendees, not other attendees’ names or photos.
How organizers are approved
Organizer access is not automatic. An application is submitted, reviewed, and only then does the account become active, which is what allows an organization to publish events, take payments, and see attendee data.
How feedback is kept in order
Attendees can write feedback under a rating, and can edit it for five minutes after posting. There is no comment box under a rating, and organizers can remove feedback that is abusive or targeted.
Report a security issue
If you have found a security problem with Evittone, report it to us at [SECURITY_EMAIL_PLACEHOLDER] with what you found and how to reproduce it. Please do not share the details publicly until we have had a chance to look at it.
Advisories
We publish a dated entry here for any issue that affects people using Evittone, together with what was done about it.
There are no advisories at the moment.