Privacy Policy

• Account info you provide: name, email, phone, and business name (for merchants).
• Ticket purchase info: the events you bought, prices paid, and a payment-processor reference id. We do not store full card numbers — card data goes directly to our payment processor.
• Merchant / payout info (merchants and pilots only): tax forms (e.g. W-9), bank or payout details, and identity information required to receive payouts. Sensitive identifiers are encrypted at rest.
• Authentication info: hashed passwords, sign-in token records, and (if you turn on 2FA) the encrypted secret for your authenticator app.
• Communications records: emails and SMS we send you, including recipient, content, delivery status, and time.
• Device and operational data: cookies and similar storage (see our Cookie Policy), plus HTTP request and error logs used to run and secure the Service.

• To deliver the Service: process tickets, generate QR codes, manage the queue, and route email and SMS.
• To process payments and remit payouts to merchants and pilots.
• To send transactional messages (sign-in links, ticket confirmations, event reminders, and check-in or schedule alerts).
• To prevent fraud and abuse and to keep the Service secure.
• To comply with legal, tax, and accounting obligations.

We do not sell or rent your personal information, and we do not use it for third-party advertising or cross-context behavioral targeting.

We share data only with service providers that help us run the platform, and only as needed:

• Payment processing (Stripe): to take payments and pay out merchants and pilots through Stripe Connect.
• SMS delivery (Twilio): to send the text messages you opt in to.
• Email delivery: our outbound mail provider, to send transactional email.
• Hosting and infrastructure: the cloud provider that runs our servers and database.
• Merchants: the organizer of an event you buy a ticket for receives your name, email, phone, and ticket details so they can fulfill and operate your order.
• Legal: when required by law, to enforce our terms, or to protect the rights and safety of users and the public.

We keep account and transaction records for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal, tax, and audit obligations. As noted in our SMS Terms, logs of messages we send are retained indefinitely for compliance and audit purposes.

We use industry-standard measures including encryption in transit, hashed passwords, encryption of sensitive identifiers at rest, and access controls. No system is perfectly secure, but we work to protect your information and to notify you of incidents where required by law.

• Edit your name, phone, and sign-in preferences on your account page.
• Opt out of SMS at any time by replying STOP, or manage it from your account.
• Request access to, a copy of, correction of, or deletion of your personal information.

Depending on where you live (for example, California and other U.S. states, or the EU/UK), you may have additional rights — such as the right to know, delete, correct, and to not be discriminated against for exercising them. Because we do not sell personal information or use it for cross-context behavioral advertising, there is nothing to opt out of in that respect. To exercise any right, email [email protected] and we will verify and respond as required by applicable law.

The Service is not directed to children under 13, and accounts are for adults. Minors may attend events only under the supervision of a responsible adult who provides any required consent and waiver. We do not knowingly collect personal information from children under 13; if you believe we have, contact us and we will delete it.

We may update this policy from time to time. Material changes take effect when we post the updated version here with a new effective date.

Questions about this policy? Email [email protected].