Privacy policy

1. The short version

• We collect what we need to sell you tickets and get you in: mainly your email, your orders and your tickets.
• Card details go to our payment processor, Stripe. We never see or store your full card number.
• We don't sell your personal information, and we don't put third-party ad trackers or pixels on our pages.
• The organizer of an event you buy for sees your order. They can email you about future events only if you ticked the box at checkout.
• Organizers on our Pro plan can send your purchase to their ad platforms with your email hashed. You can opt out, and Global Privacy Control is honored automatically.
• Friends see what you're going to only if you have a profile and let them. Organizers never see your friends.
• You can ask to see, correct or delete your information.

2. Who we are and what this covers

[legal entity name] ("Aventix", "we") is responsible for the personal information described here. It covers the Aventix website, apps, the ticket widget organizers put on their own sites, and our emails and texts.

When an organizer receives your information to run their event or to email you (see What organizers see), they're responsible for how they use it, under their own privacy policy. We require them to use it lawfully.

3. What we collect

What you give us

• Account: your email address. If you add a passkey, we store its public key and a name for it; your fingerprint or face never leaves your device.
• Orders: your email, the event, tickets, prices and fees, the time, whether you agreed to hear from the organizer (and the exact wording you saw), and, for payment plans, the schedule.
• Payments: Stripe collects your card details. We receive a reference to the payment and a card fingerprint (a code Stripe gives each card, which doesn't reveal the number). We use the fingerprint to apply per-person ticket limits. For auctions and payment plans, Stripe saves your card so it can be charged later.
• Tickets: who holds each ticket, transfers you send or receive, resale listings and waitlist entries, and when a ticket was checked in at the door.
• Phone number, if you add one for texts, with a record of when and how you agreed to them, and the STOP and START replies you send.
• Profile, if you make one: handle, display name, friends, blocks, follows, saved events, and your visibility settings.
• Giveaways and auctions: your entries, bids and their results.
• Support: your messages to us and which order or event they're about.
• Organizers: your organization's details, your team and their roles, events, and settings. Stripe collects the identity, tax and bank details needed to pay you, and tells us whether payouts are enabled. If you connect an ad platform, we store its access token encrypted.

What we collect automatically

• Event page visits: which event page, when, a random visitor ID kept in a cookie, and where the visit came from (a tracking link, campaign tags, the referring site's name, and an ad click ID if you came from an ad). This tells organizers which of their links and posts sell tickets. We don't collect it if you've opted out or your browser sends Global Privacy Control.
• Your IP address, to limit abuse: rate limits on visits, checkouts and waiting rooms use a scrambled (keyed hash) form of it that expires within an hour. We keep the IP address a phone code was requested from, to stop text-message fraud.
• Devices: if you allow notifications, your app's push token or your browser's push subscription. If you add a ticket to Apple Wallet, the identifiers Apple sends so we can update the pass.
• Errors and logs: technical records of requests (address, status, timing) and error reports, used to keep Aventix running. They're kept short and aren't used to profile you.
• In the app: a random device ID for counting event views. If you use Find friends from contacts, the app turns your contacts' email addresses into hashes on your phone and sends only those; we compare them and keep nothing.

What we get from others

• Stripe tells us whether payments, refunds and disputes succeed.
• Whoever sends you a ticket gives us your email address.
• An organizer can add you to an event's guest list, or reassign a ticket to you, by email.

We don't collect precise location, and we don't ask for sensitive information such as health or beliefs.

4. How we use it

• To sell and deliver tickets: take payment, issue and update tickets, check them at the door, handle transfers, resale, refunds, payment plans, auctions, giveaways and group purchases.
• To keep sales fair and safe: per-person limits, waiting rooms, preventing bots, fraud, chargebacks and text-message abuse, and securing accounts.
• To tell you things: receipts, tickets, changes, cancellations, refunds, resale offers, reminders and replies from support, by the channels you've chosen.
• To help organizers: show them their sales and attendees, which links and channels sold tickets, and (only with your consent) let them email you.
• Social features you choose: show friends what you're going to, and a feed from organizers you follow.
• To pay organizers and keep our books, taxes and legal records.
• To support you and to improve Aventix, using aggregate, de-identified information where we can.
• To meet legal obligations and defend legal claims, including evidence for payment disputes: when a buyer disputes a charge, we send the bank the order, the tickets and how they were used.

We don't use your information to make decisions about you that have legal or similarly significant effects.

5. What organizers see

• The host of an event you buy for sees your order and tickets (your email, name if you've given one, what you bought and paid, and whether you were checked in), so they can admit you and help you. They also see a summary of your purchases across their own events.
• If you ticked the box at checkout, the host may email you about future events, from Aventix or from their own tools. Every email from Aventix has an unsubscribe link, and we tell the host when you unsubscribe.
• Other partners on an event (a venue, promoter or creator who isn't the host), and affiliates, see only totals: visits, sales and channels, never your details.
• People holding tickets you transferred appear on the attendee list as holders. The host doesn't get consent to email them.
• Organizers never see who follows them, who your friends are, or what you've saved.
• Organizers who connect Claude (by Anthropic) to their account give it aggregate data only. It never receives fans' names or emails.

6. Who else we share it with

We share personal information only as this policy says. Our service providers process it for us, under contract:

• Stripe: payments, refunds, disputes, organizer payouts and Pro billing.
• Supabase: sign-in, and the database that holds Aventix's data.
• Bird (MessageBird): texts.
• Resend: email.
• Expo, Apple, Google, Mozilla and Microsoft: push notifications to the app and browsers.
• Apple and Google: wallet passes, when you add one.
• thirdweb: the digital record of each ticket. The public blockchain record contains a ticket number and a wallet address we hold for you, not your name or email.
• Sentry: error reports.
• Our hosting providers: [hosting provider to be named before launch].

We also share information:

• With organizers, as described above.
• With the person you transfer a ticket to (they see your name or email as the sender), and with friends you accept.
• With banks and card networks when a payment is disputed, and with authorities when the law requires it, or to protect people's safety, our users or Aventix from fraud and harm.
• With a company that takes over all or part of Aventix, which would have to keep honoring this policy for information it receives.
• With anyone else, only if you ask us to.

7. Ads, sale and sharing

• We don't sell personal information for money, and we don't show ads.
• Organizers on our Pro plan can connect Meta, TikTok or Google Ads. When you buy a ticket to their event, we send that platform the purchase (order number, amount, quantity, the event page), your email address hashed with SHA-256, a hashed visitor ID, and the ad click ID if you came from one of their ads. That lets the organizer measure their ads. Your raw email is never sent. Free tickets and comps are never sent.
• Some US state laws call this "sharing" for targeted advertising. You can opt out on Your privacy choices (linked at the bottom of every page and at checkout). If your browser sends Global Privacy Control, we treat it as an opt-out automatically. Once you opt out, your purchases aren't sent to ad platforms, and we don't set analytics cookies or attribute your purchases.

8. Cookies

We only use our own cookies, never third-party or advertising cookies. Event pages count views with a request to our own site after the page loads.

The ticket widget on organizers' own sites sets no cookies on their site and reads nothing about its visitors. Buying opens Aventix in a new tab.

9. Emails, texts and notifications

• Emails about your orders and tickets always go out while you hold tickets: you need them.
• Choose which other notifications you get, and how (app, browser, text), in Notification settings.
• Texts go only to numbers verified with a code, with your consent: "Texts from Aventix about tickets you hold and events you're going to: changes, cancellations, reminders and resale offers. Up to 10 a day. Msg & data rates may apply. Reply STOP to cancel, HELP for help." Reply STOP to stop and START to resume. Remove your number at any time in Notification settings.
• Organizers' emails go only to fans who agreed at checkout, and include a one-click unsubscribe. Emails about new events from organizers you follow include a one-click unfollow.

10. Friends and profiles

• A profile is optional. You never need one to buy tickets.
• Your handle and display name are visible to people who look you up by handle, to your friends, and (only if you turn it on) to people who have your email in their contacts.
• Events you're going to or saved are visible to your accepted friends only, and you can hide them from everyone. Your friends list is visible only to you.
• If you block someone, they can't find you, send you requests or match you from contacts.

11. How long we keep it

• Event page visits are deleted after 13 months.
• Scrambled IP addresses used for rate limits expire within an hour.
• Phone codes expire after 10 minutes; we keep a record of codes sent to prevent fraud.
• Orders, payments, refunds and payouts are kept as long as tax and accounting law requires, and for as long as needed to handle refunds and disputes.
• Account, profile and notification information is kept while your account is open, and deleted or de-identified when you ask us to delete it, except what we must keep as above.
• Support conversations are kept while your account is open, so we can see what we've already told you.
• Records on the public blockchain can't be deleted, which is why they contain no personal information.

12. Security

• Sign-in uses passkeys or one-time codes, so there are no passwords to steal.
• Tickets use QR codes that change every few seconds and are signed, so a screenshot or forgery won't get in.
• Phone codes are stored hashed. Ad-platform tokens are encrypted. All traffic is encrypted in transit.
• Staff access is limited to people who need it to help you. Organizers' actions on tickets, refunds, payouts and their team are recorded in an audit log.

No system is perfectly secure. If we learn of a breach that affects your information, we'll tell you and the authorities as the law requires.

13. Your rights and how to use them

Depending on where you live, you may have the right to:

• know what personal information we hold about you, and get a copy in a portable format;
• correct it;
• delete it (some records we must keep, see How long we keep it);
• opt out of the sharing of your information for targeted advertising;
• object to or restrict some uses, and withdraw consent you've given;
• appeal if we decline your request.

Some things you can do yourself, any time:

• Opt out of ad sharing and analytics cookies: Your privacy choices.
• Turn notifications and texts on or off, or remove your number: Notification settings.
• Unsubscribe from an organizer: the link in any of their emails.
• Edit or hide your profile, remove friends or block people: Friends.
• Remove passkeys: Passkeys & security.

For anything else, open a request at Help (a person answers within 8 hours), or email [privacy contact email]. We'll confirm it's you by asking you to sign in, or with a code to your email, and reply within 30 days (45 at most, where the law allows us to extend). You can have an authorized agent ask for you; we'll check they're authorized. We never treat you differently for using your rights. To appeal a decision, reply to it and say so; if you're still unhappy, you can contact your state attorney general or data protection authority.

Deleting your account doesn't cancel tickets you hold unless you ask; we keep order records we're required to keep. Information already passed to an organizer is theirs to delete: we'll pass on your request to the host of events you bought for.

14. Notice for US state residents

For residents of California and other US states with privacy laws, in the last 12 months we've collected these categories of personal information, for the purposes in How we use it:

We don't sell personal information. Sending hashed purchases to an organizer's ad platforms may be "sharing" for cross-context behavioral advertising; you can opt out as described above. We don't knowingly sell or share the information of anyone under 16. We don't collect sensitive personal information as defined by these laws, other than account sign-in credentials used only to sign you in.

15. If you're in the EEA, UK or Switzerland

• Legal bases. We use your information to perform our contract with you (selling and delivering tickets, your account), for our legitimate interests (fair sales, fraud prevention, security, analytics for organizers, improving Aventix), with your consent (organizer emails, texts, push notifications, contact matching, ad sharing where consent is required), and to meet legal obligations.
• Transfers. Aventix is run from the United States, so your information is processed there. We rely on the European Commission's standard contractual clauses (and the UK and Swiss equivalents) or other lawful mechanisms for these transfers.
• Your rights include access, correction, deletion, restriction, portability, objection, and withdrawing consent, and you can complain to your local data protection authority.

16. Children

Aventix isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.

17. Changes and contact

If we change this policy in a way that matters, we'll tell you by email or in Aventix before it takes effect. The date at the top shows the current version.

Questions or requests: [privacy contact email], or Help. [legal entity name], [registered address].