Privacy Policy

When you register for and use YourTicket Event, we collect the following categories of personal information:

• Registration data: name, email, phone, business details
• Authentication data: hashed passwords, session tokens (never stored in plaintext)
• Legal acceptance records: IP address, browser user agent, terms version, and timestamp at signup
• Event and ticketing data: event names, dates, venues, ticket quantities, ticket numbers
• Scan and validation logs: ticket scan results, timestamps, device identifiers, IP addresses
• Payment and billing data: subscription tier, plan changes (payment processing handled by third parties)
• Device data: scanner device names, tokens, approval status, last active timestamp
• Usage data: login timestamps, export history, project creation records

We do not collect sensitive personal information such as government identification numbers, health data, or financial account credentials. We do not knowingly collect information from children under 18.

We use the information we collect solely to provide, operate, and improve the YourTicket Event service:

• To create and manage your account and authenticate your identity
• To process ticket generation, PDF exports, and event management operations
• To enable QR code validation and real-time ticket scanning features
• To communicate with you about your account, events, or service updates
• To enforce our Terms of Service and detect abuse, fraud, or policy violations
• To record legal acceptance of our Terms, Privacy Policy, and Billing Policy at registration
• To respond to support requests, account recovery, or dispute resolution
• To generate aggregate, anonymized analytics about platform usage (never individual-level)
• To comply with legal obligations, court orders, or law enforcement requests

We do not sell, rent, trade, or share your personal information with third parties for marketing purposes. We do not use your data for targeted advertising.

We process your personal data on the following legal bases:

• Contract performance: to fulfill our obligations under the Terms of Service
• Legitimate interests: fraud prevention, platform security, service improvement
• Legal obligation: retaining records required by applicable law
• Consent: where you have explicitly agreed (e.g., accepting these terms at registration)

Where applicable law requires specific consent for certain processing activities, we will request such consent separately. You may withdraw consent at any time by contacting support, though this may affect your ability to use the Platform.

• Account data: retained for the life of your account, deleted upon verified account deletion request
• Legal acceptance records: retained indefinitely as compliance documentation
• Ticket scan logs: retained for 24 months following the event date
• Password reset tokens: automatically purged after expiry or use
• Billing records: retained as required by applicable tax and financial regulations
• Anonymized aggregate data: may be retained indefinitely

We do not sell your personal data. We may share your information only in the following limited circumstances:

• Service providers: hosting, database, email delivery, and infrastructure vendors under strict data processing agreements
• Payment processors: billing-related data shared only with PCI-compliant payment processors
• Legal requirements: when required by law, subpoena, court order, or governmental authority
• Safety: when necessary to protect the rights, safety, or property of users, third parties, or the public
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations
• With your consent: for any other purpose with your explicit permission

All third-party service providers are contractually prohibited from using your data for their own purposes beyond providing services to us.

YourTicket Event uses session cookies and local storage to maintain your authenticated session and remember your preferences. We do not use third-party advertising cookies or tracking pixels.

• Session cookies: required for authentication; deleted when you close your browser or log out
• Preference storage: local browser storage for UI settings (dark mode, layout preferences)
• No analytics pixels: we do not embed Google Analytics, Meta Pixel, or similar third-party trackers
• No cross-site tracking: we do not track your activity outside the Platform

You may disable cookies in your browser settings, but doing so will prevent you from logging in or using the Platform effectively.

You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. Notify us immediately at support if you suspect unauthorized access. We will never ask for your password via email or support channels.

In the event of a data breach that materially affects your rights, we will notify affected users as required by applicable law. YourTicket Event shall not be liable for damages arising from breaches caused by user-side vulnerabilities, shared passwords, or compromised user devices.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your account and associated personal data (subject to legal retention obligations)
• Portability: receive your data in a machine-readable format where technically feasible
• Restriction: request restriction of processing in certain circumstances
• Objection: object to processing based on legitimate interests
• Withdrawal of consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us through the support channels available in your dashboard. We will respond within 30 days. We may require identity verification before processing requests. Some requests may be limited where retention is required by law.

YourTicket Event operates primarily within the United States. If you access the Platform from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate.

By using the Platform, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We take steps to ensure that any such transfers comply with applicable data protection law.

The Platform may contain links to third-party websites, tools, or integrations. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices of any third party and encourage you to review their policies before providing personal information.

Event organizers who use YourTicket Event to manage ticket sales or attendee access are independent data controllers with respect to their attendees' information. We are not responsible for how organizers collect, use, or share data about ticket holders or event attendees.

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date and may notify you via email or in-platform notification. Your continued use of the Platform after changes constitutes your acceptance of the updated Policy.

If you do not agree to any updated Policy, you must stop using the Platform and may request account deletion through your dashboard or by contacting support.