Privacy policy

Last updated: 12 September 2026

Mewzo connects venues and event hosts with local artists, bands and DJs. This policy explains what personal information we collect through the Mewzo mobile app and the mewzo.co.za website, why we collect it, who we share it with, and how you can get it corrected or deleted.

We process personal information in line with South Africa's Protection of Personal Information Act (POPIA). Where you are in the EU or UK, we also honour the equivalent rights under the GDPR.

Responsible party: Mewzo, South Africa Contact: info@mewzo.co.za

What we collect

Information you give us

• Account details — your name, email address, mobile number, role (artist, band, DJ, venue or event host) and the password you set. Passwords are hashed by our authentication provider; we never see or store them in readable form.
• Profile and listing content — artist or venue name, biography, genres, set lengths and rates, location and travel radius, availability, social media handles, and the photos, videos and audio you upload. Listing content is intended to be seen by other users of the platform.
• Venue and event details — venue address, contact person, event dates, times and requirements needed to fulfil a booking.
• Payout details — for artists and anyone receiving money through Mewzo: the bank name, account holder name and account number used to pay you out.
• Messages and support requests — in-app chat between artists and venues, and anything you send us by email.

Information collected automatically

• Device and app information — app version, device model, operating system and version, and a push notification token if you allow notifications.
• Sign-in and security information — the IP address of your last sign-in, an approximate location (city/region level) derived from that IP address, and the time you were last active. We use this to detect suspicious account activity.
• Website analytics — aggregated page views and visits on mewzo.co.za, collected through Google Analytics and Vercel Analytics.

We do not collect continuous or background GPS location from your device. The locations we hold are the ones you type in (your area, a venue address) plus the coarse city-level location inferred from your sign-in IP address.

Information from other sources

• Payment information from Paystack. Card and bank details you enter during checkout go directly to Paystack, our payment processor. Mewzo never receives or stores your full card number. We receive the transaction reference, amount, status and the invoice generated from it.
• Public social media data. Where you link your Instagram or other social profiles to your listing, we may read publicly available information such as your follower count and public posts to display and verify your profile.
• Press kit imports. If you submit an electronic press kit or a link to your online profile, we extract the details from it to pre-fill your listing. You review and confirm everything before it is saved.

Why we use your information

• Providing the service — creating your account, publishing listings, matching artists to venues, running bookings and in-app chats.
• Payments and payouts — taking payment for a booking, issuing invoices, paying artists out, handling refunds and disputes.
• Safety and moderation — reviewing listings before they go live, verifying artists, detecting fraud, enforcing our Terms & Conditions.
• Communication — booking confirmations, reminders, password resets, service notices, and (if you opt in) newsletters and promotions.
• Improving Mewzo — understanding which features are used, fixing errors and planning new ones.
• Legal compliance — tax, accounting and record-keeping obligations, and responding to lawful requests.

Under POPIA, our grounds for processing are: performing the contract between you and Mewzo, complying with our legal obligations, our legitimate interests in running and securing the platform, and your consent (for marketing messages, push notifications and access to your camera or photo library).

Automated processing

We use Google's Gemini models to help moderate new listings and to extract details from press kits you submit. These are assistive tools — a person makes the final call on any rejection, and you always review imported details before they are saved. No decision with a legal or similarly significant effect on you is made by automated means alone.

Who we share it with

We do not sell your personal information. We share it only with the service providers that make Mewzo work, and only as far as they need it:

• Supabase — database, authentication and file storage.
• Render and Vercel — application and website hosting.
• Paystack — payment processing and payouts (a licensed payment provider).
• Typesense — search over public artist and venue listings.
• Google — Gemini AI processing for moderation and press kit imports, and Google Analytics for website statistics.
• Our email and push delivery providers — sending transactional email and notifications.
• Heyzine — hosting the digital magazine issues embedded in the app and site.

Other users see what you publish: your public listing, and the details necessary to complete a booking you are party to (for example, a venue sees the artist's name and contact details once a booking is confirmed, and vice versa).

We may also disclose information where the law requires it, to enforce our Terms & Conditions, or to protect the rights and safety of our users.

Some of these providers process data outside South Africa. Where that happens we rely on providers that are subject to data protection laws or contractual terms that give your information a comparable level of protection, as POPIA requires.

How long we keep it

• Active accounts — for as long as your account is open.
• Closed accounts — profile and listing content is deleted or anonymised within 30 days of your deletion request being completed.
• Booking, invoice, payment and payout records — retained for at least five years after the transaction, because South African tax and company law requires it. These records are kept even after an account is deleted, and are reduced to the minimum needed to satisfy that obligation.
• Support correspondence — up to 3 years.
• Website analytics — aggregated and not linked to your account.

Deleting your account or your data

You can close your Mewzo account, or ask us to delete specific information, at any time. The full process — what gets deleted, what we have to keep, and how long it takes — is on our account and data deletion page.

Your rights

Under POPIA (and the GDPR where it applies) you may:

• ask what personal information we hold about you, and get a copy of it;
• have inaccurate information corrected;
• have information deleted or destroyed (subject to the retention rules above);
• object to processing based on our legitimate interests;
• withdraw consent for marketing at any time — every newsletter has an unsubscribe link, and push notifications can be switched off in your device settings;
• complain to a supervisory authority.

To exercise any of these, email info@mewzo.co.za. We respond within 30 days. We may ask you to confirm your identity first so that we don't hand your information to someone else.

If you are not satisfied with our response, you can lodge a complaint with the South African Information Regulator — inforegulator.org.za.

Security

Data is transmitted over TLS and stored in access-controlled databases with row-level security. Payment card data never reaches our servers. Access to production data is restricted to the small number of staff who need it. No system is perfectly secure, so we also ask you to use a strong, unique password and to tell us immediately if you think your account has been accessed by someone else.

Children

Mewzo is not intended for children. You must be 18 or older to create an account. If we learn that we hold information about a child, we delete it.

Cookies and tracking

The mewzo.co.za website uses cookies and similar technologies for two things: keeping the site working, and measuring aggregate traffic through Google Analytics. Analytics is not loaded on preview builds. You can block cookies in your browser without losing access to any of the content.

The Mewzo app does not use advertising identifiers and does not track you across other apps or websites.

Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.

Contact us

Questions about this policy, or about the information we hold on you:

Email: info@mewzo.co.za Post: Mewzo, South Africa