Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Ticketz platform ("Platform", "we", "us", or "our"). We are committed to protecting your privacy and handling your data responsibly, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Data Controller

The entity responsible for processing your personal data ("Data Controller") is the owner and operator of the Ticketz. For questions about data protection, please contact us at privacy@ticketz.app.

3. Information We Collect

3.1 Account Information

When you register for an account, we collect your email address, password (hashed), and any optional profile information you provide.

3.2 Event & Transaction Data

If you are an Organizer, we collect event details, ticket tier information, pricing, and payout preferences. If you are a Buyer, we collect ticket purchase history, payment confirmation details, and attendee information you provide at checkout (name, email).

3.3 Payment Information

We do not store full credit card numbers or bank account details. Payment information is processed directly by our third-party payment processors (e.g., Stripe). We only store transaction references, amounts, and statuses provided by the processor.

3.4 Usage & Technical Data

We collect information about how you interact with the Platform, including IP addresses, browser type, device information, pages visited, and timestamps. We use cookies and similar technologies for this purpose.

3.5 Communications

We collect and store communications you send to us, including support requests and feedback.

4. How We Use Your Information

We use your personal data for the following purposes:

• To operate the Platform: providing event creation, ticket sales, payment processing, and check-in functionality;
• To process transactions: facilitating payments between Buyers and Organizers;
• To communicate: sending transactional emails (purchase confirmations, event updates, password resets) and service announcements;
• To improve our services: analyzing usage patterns, diagnosing technical issues, and developing new features;
• To ensure security: detecting and preventing fraud, abuse, and unauthorized access;
• To comply with legal obligations: responding to legal requests, enforcing our Terms, and protecting our rights.

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process personal data based on the following legal grounds:

• Contractual necessity: processing necessary to perform our contract with you (e.g., facilitating ticket sales);
• Legitimate interests: processing necessary for our legitimate business interests (e.g., fraud prevention, service improvement), balanced against your rights;
• Legal obligation: processing required to comply with applicable laws;
• Consent: where you have given explicit consent (e.g., for marketing communications).

6. Data Sharing & Third Parties

We do not sell your personal data. We may share your data with the following categories of recipients:

• Payment processors: Stripe and other providers process payment transactions on our behalf;
• Cloud infrastructure providers: hosting and database services that store Platform data;
• Event Organizers: if you purchase a ticket, the Organizer receives your name, email, and ticket details necessary for event management and check-in;
• Legal authorities: when required by law, court order, or to protect our rights.

All third-party service providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.

7. International Data Transfers

Our Platform may process data in multiple jurisdictions. When transferring personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on adequacy decisions, in accordance with GDPR requirements.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Account data: retained while your account is active, and for 12 months after deletion (for legal and fraud prevention purposes);
• Transaction data: retained for 7 years to comply with tax and accounting obligations;
• Usage logs: retained for up to 12 months for security and analytics.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure: request deletion of your personal data ("right to be forgotten");
• Restriction: request limitation of processing in certain circumstances;
• Portability: receive your data in a structured, machine-readable format;
• Objection: object to processing based on legitimate interests;
• Withdraw consent: withdraw consent for processing where consent is the legal basis.

To exercise these rights, contact us at privacy@ticketz.app. We will respond within 30 days.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, analyze usage, and prevent fraud. You can manage cookie preferences through your browser settings. Essential cookies (necessary for the Platform to function) cannot be disabled.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

12. Children's Privacy

The Platform is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance of the updated Policy.

14. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@ticketz.app.