Your data, on your terms.

Account & contact. Your name, email, phone (if you add it), and role (fan, artist, venue, crew). Created when you sign up or buy a ticket.

Purchases & tickets. Orders, amounts, fees, discounts, the shows you bought, check-in records, and resale activity. We need this to deliver and support your tickets.

Coarse location. On requests we record for analytics — page views as well as checkout and demand votes — we may record the city/region/country the request came from (derived at our edge — never your IP address). It powers demand and tour-routing insights, nothing more.

Where a ticket buyer is from. When a card pays for your ticket, we record where the order is from using that card's billing address: its city if your payment method gives one, otherwise, for a US billing address, the city and state of its ZIP code — we look the ZIP up and keep only that city and state, never the ZIP itself. When neither is there, we keep only what the billing address does give, often just the country. An order with nothing charged to a card — a free RSVP, or one a credit or code covers in full — has no card to read, so for one we record the city your connection came from, which is approximate. We keep it to build demand and tour-routing insights. City names for US ZIP codes come from GeoNames, used under the Creative Commons Attribution 4.0 licence; we changed the data by keeping only each ZIP's city and state.

Product usage. Signals about how the product is used (page views, feature usage), so we can improve it. These are tied to a random id stored in your browser that rotates every 90 days — not to your name — and never to your account identity. Turning on Do Not Track stops them entirely.

Every meaningful event we record carries a stated basis: transaction (needed to deliver your purchase), legitimate interest (running and securing the platform), marketing (only when you've opted in), or data-sharing (on by default — you can turn it off anytime, and we stop using your data for it going forward). We keep these apart, and we record whether you actually chose: a default is not a decision, and we never present one as if it were.

To sell, deliver, and support tickets; to pay venues, artists, and crew; to prevent fraud and abuse; to send you the alerts and reminders you ask for; and to produce analytics that help venues and artists book smarter shows.

We do not sell ad space against your identity, and we don't let third parties target you inside BandPass.

Service providers who make the product work — payment processing (Stripe), email (Resend), hosting (Vercel), database (Supabase) — under contracts that bar them from using your data for their own purposes.

The other side of your transaction — a venue or artist sees the data needed to honor and service the show you bought into.

An organizer's mailing list. If you opt in to an organizer's mailing list at checkout, we share your contact details (name, email, phone if provided, city/region) and your consent status with that organizer, and — if the organizer has connected a marketing service such as Brevo — with that service on the organizer's behalf. We never share your purchase analytics or spending history with organizers' marketing services.

Aggregated, de-identified industry insights. Part of our business is producing market intelligence (e.g. cross-venue demand, genre trends) that labels, festivals, and venues may license. We only ever share data for this in aggregated or de-identified form — counts and averages across many venues, never a record of a person. Purchases tied to an account are included while data sharing is on — it is on by default, and they drop out again the moment you turn it off. Purchases made without an account are counted the same way, since there is no account to attach a preference to. We do not sell records that identify you personally.

Legal — when required by law or to protect rights and safety.

Export. Download everything tied to your account — profile, orders, tickets, activity, and your data preferences — as JSON or CSV from your data & privacy page.

Delete. Request deletion of your account and associated data; we complete it within 30 days. Upcoming tickets stay valid and refundable.

Opt out. Your marketing-email setting and the data-sharing program are both on by default. Turn either off at any time on your data & privacy page and we stop using your data for that purpose going forward. If your browser sends a Global Privacy Control or Do Not Track signal, we stop recording your on-site browsing — page and event analytics, and the calendar-download signal. That signal does not by itself remove purchases from the data-sharing program — use the toggle above for that.

Depending on where you live (including under GDPR, CCPA, and Colorado's privacy law), you may have additional rights to access, correct, or restrict processing. Email us and we'll honor them.

As long as your account is active, plus the period we're legally required to retain financial records. De-identified analytics may persist after deletion because they no longer identify you.

Encryption in transit, row-level access controls on our database, scoped access for staff, signed ticket tokens, and audited check-in. Payment details are handled by Stripe and never touch our servers.

Questions or requests: privacy@thebandpass.com. We reply within 30 days.