Privacy Policy

MIXXIA Events is an event guest-management service operated by MIXXIA FOR GENERAL TRADING CO, a single person company registered in the State of Kuwait (Commercial Licence 2020/13601). This policy explains what personal data we handle, why, and what rights you have over it.

Two groups of people appear in this policy. Organisers are our customers — the people who book an event. Guests are the people an organiser invites. We handle data differently for each.

What we collect

From organisers

• Name, phone number, and email address
• Event details: type, date, time, venue, expected guest count
• Account credentials (passwords are stored only as a salted cryptographic hash — never in readable form)
• Payment records: amount, invoice reference, transaction identifier, and the last four digits of the card. We never see or store full card numbers
• Messages you exchange with our WhatsApp service

From guests

• Name and phone number, provided to us by the organiser who invited you
• Your RSVP response and any messages you send us on WhatsApp
• Attendance record: whether and when your invitation was scanned at the venue

Why we hold it

• To run the event. Sending invitations, collecting RSVPs, issuing entry passes, and tracking arrivals is the service itself.
• To take payment. Processing fees and issuing receipts.
• To support you. Answering questions over WhatsApp and email.
• To meet legal obligations. Kuwaiti law requires us to retain financial records.

We do not sell personal data. We do not use guest phone numbers for marketing. We do not share one organiser's guest list with another.

Who else sees it

Running this service requires a small number of specialist providers. Each receives only what it needs:

• WhatsApp Business Platform (Meta) — delivers invitations and carries conversations
• MyFatoorah — processes payments; card details go directly to them and never reach us
• Supabase — hosts our database
• Resend — delivers receipts and account emails
• Cloudflare — protects and routes our web traffic

We may also disclose data where Kuwaiti law compels us to.

Where it is stored

Our database is hosted in the Asia-Pacific region and our email provider operates in the European Union. By using the service you accept that your data may be processed outside Kuwait, under contractual terms requiring these providers to protect it.

How long we keep it

• Guest lists and RSVP records — retained while the event is active and for 12 months afterwards, so organisers can review what happened. Removed sooner on request.
• Financial records — retained as long as Kuwaiti commercial law requires.
• Organiser accounts — retained until you ask us to close the account.

How we protect it

• Traffic is encrypted in transit (TLS)
• Passwords are salted and hashed; nobody at MIXXIA can read yours
• Database access is restricted by row-level security, so an organiser can reach only their own events
• Entry-pass links are individually tokenised and expire after the event

No system is perfectly secure. If a breach ever affects your data, we will tell you.

Your rights

You may ask us to:

• Tell you what data we hold about you
• Correct anything inaccurate
• Delete your data, where no legal obligation requires us to keep it
• Stop messaging you

Write to events@mixxia.com and we will respond within 30 days. Guests can also reply STOP to any WhatsApp message to stop receiving them.

Children

This service is not directed at children under 18, and we do not knowingly collect their data. A guest list may include a minor's name where an organiser has invited a family; we treat that data exactly as we treat any other guest record.

Changes

If this policy changes materially we will update the date above and notify account holders by email.

Contact