TicketGenieTicketGenie

Privacy Policy

Effective date: June 3, 2026 · Last updated: June 3, 2026

1. Introduction

TicketGenie LLC ("TicketGenie," "we," "us," or "our") operates a ticket market analytics platform (the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, application, API, and related services.

This Privacy Policy describes our practices and your rights. It should be read alongside our Terms of Service. Some practices apply only to specific parts of the Service, such as authenticated application features, billing, API access, or referral links. If you have questions about how we handle your data, contact us before using the Service.

2. Information We Collect

Account information. When you create an account, we collect your name, email address, and, if applicable, organization name. If you sign up via a third-party provider (Google, Discord), we receive your name, email, and profile identifier from that provider.

Billing information. Payment processing is handled entirely by Stripe. When you subscribe, Stripe collects your payment method details (card number, expiration, billing address). We do not store your full payment card details. We receive from Stripe: your name, email, billing address, subscription status, payment amounts, and transaction dates. See Stripe's Privacy Policy for details on how Stripe processes your payment data.

Usage data. We automatically collect data about how you interact with the Service, including: pages and features visited, search queries, filters applied, dashboard interactions, button clicks, session duration, and feature usage patterns.

Device and technical data. We collect your IP address, browser type and version, operating system, device type, screen resolution, and referring URL.

API usage data. If you use our API, we log API endpoints called, request timestamps, response status codes, request frequency, and API key identifiers.

Team account data. For team plans, we collect names, email addresses, and roles of team members added by the account administrator.

Communications. If you contact us by email, we retain the content of those communications along with your email address and our responses.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process payments and manage your subscription
  • Authenticate your identity and manage account access
  • Debug issues, diagnose technical problems, and improve the reliability of the Service
  • Analyze usage patterns to understand how the Service is used and improve the product
  • Send transactional emails (account confirmations, billing receipts, security alerts)
  • Enforce our Terms of Service and detect abuse or fraud
  • Comply with legal obligations

We do not use your personal information for advertising, ad targeting, or ad personalization. We do not sell your personal information. We disclose personal information to vendors, service providers, processors, payment partners, and other third parties only as described in this Policy.

4. Analytics and Cookies

Product analytics. In the authenticated application and related Service surfaces, we may use PostHog, a product analytics platform, to collect usage data. PostHog helps us understand how features are used, identify bugs, and improve the Service. The data collected through PostHog is used for product debugging and analytics, not for advertising or ad targeting.

Cookies. We use essential cookies and similar storage to maintain your authentication session, secure the Service, and remember your preferences. Our public website may also load fonts and other assets from third-party providers, including Google Fonts. We do not use third-party advertising cookies or pixels.

Referral tracking. If you arrive via a referral link, we may use Rewardful to attribute the referral. Rewardful may set a cookie or similar identifier to track the referral source.

Analytics preferences. You can request that we limit or disable non-essential analytics associated with your account by emailing privacy@ticketgenie.io with the subject "Analytics preference". We handle these requests as required by applicable law and where technically feasible for the relevant Service surface. You may also limit or disable non-essential cookies through your browser settings or any cookie preference controls we make available. Disabling essential cookies (such as authentication) may affect the functionality of the Service.

5. How We Share Your Information

We do not sell your personal information. We disclose your data in the following limited circumstances:

  • Stripe (payment processing): We share your name, email, and billing details with Stripe to process subscription payments. Stripe may share data with banks, payment networks, and fraud prevention services as described in their privacy policy.
  • PostHog (product analytics): Where enabled, usage and device data is processed by PostHog for analytics and debugging purposes only.
  • Auth0 (authentication): We use Auth0 to manage user authentication. Auth0 processes your email and login credentials for authentication and account-security purposes.
  • Rewardful (referral tracking): If you arrive via a referral link, Rewardful may receive a cookie identifier and referral source to attribute the referral.
  • Infrastructure providers: We use third-party hosting and infrastructure services to operate the Service. These providers process data on our behalf under contractual obligations to protect your information.
  • Legal compliance: We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We provide notice where required by applicable law.

6. Data Retention

  • Active accounts: We retain your information for as long as your account is active and as needed to provide the Service.
  • After account deletion: Upon account deletion, we retain your data for a limited period as reasonably necessary for account recovery, backup rotation, fraud prevention, legal compliance, or data export, after which it is deleted or anonymized from active systems unless continued retention is required or permitted by law.
  • Billing records: We retain billing and transaction records as required by applicable tax and accounting laws.
  • Usage and analytics data: Anonymized and aggregated analytics data may be retained indefinitely. Personally identifiable usage data is deleted or anonymized when it is no longer reasonably needed for the purposes described in this Policy.
  • API logs: API request logs are retained as reasonably necessary for debugging, security, abuse detection, and legal compliance purposes.
  • Legal obligations: We may retain data longer if required by law, regulation, or an active legal dispute.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect your personal information. These safeguards may include:

  • Encryption of data in transit (TLS) and encryption at rest where appropriate
  • Role-based access controls and authentication for internal systems
  • Periodic security reviews of our infrastructure and code

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for keeping your account credentials secure.

In the event of a data breach that affects your personal information, we provide notices as required by applicable law.

8. Third-Party Platform Data

The Service is intended to aggregate ticket market, event, pricing, sales, and inventory data from third-party ticketing platforms and other market sources. The Service is not designed to identify individual consumers who use those third-party platforms.

We do not intentionally collect personal information from users of third-party ticketing platforms through our Service. If we determine that third-party market data includes personal information, we handle it in accordance with applicable law and this Policy.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to certain exceptions (such as legal obligations or active disputes).
  • Data portability: Request a copy of your data in a structured, commonly used, machine-readable format.
  • Opt-out of analytics: Opt out of non-essential analytics tracking as described in Section 4, where this right applies and where technically feasible for the relevant Service surface.
  • Withdraw consent: Where processing is based on consent, withdraw your consent at any time.

For California residents (CCPA/CPRA):

To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to TicketGenie, California residents have additional rights. The following supplements the rest of this Policy:

Categories of personal information collected:

  • Identifiers (name, email, IP address, account ID) — collected directly from you and from authentication providers (Auth0, Google, Discord)
  • Commercial information (subscription plan, payment history, transaction dates) — collected from Stripe
  • Internet or electronic network activity (pages visited, features used, search queries, API calls, browser type, device info) — collected automatically via PostHog and server logs
  • Professional or employment-related information (organization name, team role) — collected directly from you or your team administrator

Purposes: As described in Section 3 above.

Categories disclosed to service providers:

  • Identifiers and commercial information → Stripe (payment processing)
  • Identifiers and network activity → PostHog (product analytics)
  • Identifiers → Auth0 (authentication)
  • Identifiers (cookie identifier, referral source) → Rewardful (referral attribution, if applicable)
  • All categories → infrastructure providers (hosting, as data processors)

Sale and sharing:

  • We do not sell your personal information as defined under the CCPA/CPRA.
  • We do not share your personal information for cross-context behavioral advertising.

Sensitive personal information: We do not use sensitive personal information to infer characteristics about you. Account login credentials are processed by our authentication provider Auth0 and are not accessed or stored by TicketGenie in plaintext. To the extent account login credentials constitute sensitive personal information under California law, we process them only to authenticate users, secure accounts, prevent fraud, and operate the Service.

Your rights:

  • Right to know what personal information we collect, use, disclose, and sell/share
  • Right to request deletion of your personal information
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
  • Right to limit use of sensitive personal information where the law provides such a right
  • Right to non-discrimination for exercising your privacy rights

To submit a request, email privacy@ticketgenie.io. We may need to verify your identity before processing your request and respond within the timeframe required by applicable law.

For EEA, UK, and Swiss residents (GDPR):

Data controller. The controller of your personal data is TicketGenie LLC, reachable at privacy@ticketgenie.io. We do not currently appoint a Data Protection Officer. We do not currently appoint an EU or UK representative unless required by applicable law.

Lawful bases by processing purpose:

  • Providing the Service (account management, authentication, API access, team features): performance of our contract with you (Article 6(1)(b))
  • Payment processing (via Stripe): performance of contract (Article 6(1)(b))
  • Product analytics and debugging (via PostHog): legitimate interest in improving and maintaining the Service (Article 6(1)(f))
  • Fraud prevention and abuse detection: legitimate interest in protecting the Service and users (Article 6(1)(f))
  • Transactional communications (billing receipts, security alerts): performance of contract (Article 6(1)(b))
  • Legal compliance (tax records, regulatory requests): legal obligation (Article 6(1)(c))
  • Non-essential cookies and analytics (where consent is required by applicable law): consent (Article 6(1)(a)), which you may withdraw at any time

Required vs. optional data. Providing account and billing information is necessary to use the Service — if you do not provide it, we cannot create your account or process your subscription. Analytics data collection is not required for the Service to function, and you may request limits on analytics collection as described in Section 4.

Your rights under GDPR:

  • Right of access (Article 15)
  • Right to rectification (Article 16)
  • Right to erasure / "right to be forgotten" (Article 17)
  • Right to restriction of processing (Article 18)
  • Right to data portability (Article 20)
  • Right to object to processing based on legitimate interests (Article 21)
  • Right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
  • Right to lodge a complaint with your local supervisory authority

To exercise any right, contact privacy@ticketgenie.io. We respond within the timeframe required by applicable law.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we take appropriate steps to delete that information. If you believe we have inadvertently collected such data, contact us at privacy@ticketgenie.io.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction.

Where required by applicable law (including GDPR), we rely on appropriate safeguards for international data transfers, such as the European Commission's standard contractual clauses or adequacy decisions. You may contact us for more information about applicable safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we provide notice as required by applicable law or as reasonably practicable under the circumstances. Changes may take effect immediately where required by law, necessary for security or operational reasons, or otherwise stated in the notice.

We encourage you to review this page periodically for the latest information on our privacy practices.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at privacy@ticketgenie.io.