Privacy Policy

1. Eventyr and organizers

We provide event and sales services to organizations and their customers. We handle information to operate Eventyr, manage accounts and billing, protect the services, and meet our legal obligations. When handling customer and staff information on an organization's behalf, we also follow that organization's lawful instructions and our agreement with it.

Organizations are responsible for their own events, customer relationships, and uses of information. Their privacy notices may also apply. Contact privacy@eventyr.io if you need help identifying the organization responsible for your information.

2. Information we handle

• Account and organization information: names, contact details, authentication information, roles, settings, and public event content.
• Purchase and attendance information: orders, tickets, passes, seating selections, merchandise, donations, discounts, check-ins, refunds, and exchanges.
• Payment information: billing details, transaction references, payment and payout status, fraud signals, and limited payment-method details supplied by payment providers.
• Communications: support messages, attachments, email delivery and open-tracking information, phone numbers, text-message content, and communication preferences and consent.
• Device and usage information: IP addresses, browser and device information, pages and features used, diagnostics, error reports, and security activity.
• Mobile permissions: camera access for scanning tickets and pairing codes, and location access used by payment-processing features for in-person payments. Location permission may allow precise location. You can manage permissions in device settings; disabling a permission may prevent the related feature from working.

3. Where information comes from and how we use it

We receive information from you, organizations you interact with, people authorized to act for them, payment and communication providers, and your use of the services.

We use it to manage accounts and access; process orders, admissions, payments and refunds; deliver tickets and service communications; provide support; investigate errors and fraud; maintain and improve reliability; and comply with tax, accounting, dispute, and other legal requirements. Communications may include receipts, event updates, security alerts, and notices about your account or agreements.

We use service performance and usage information to understand and improve Eventyr. We may also use aggregate or de-identified information that does not reasonably identify a person.

4. Who receives information

We disclose information to the organization responsible for your purchase or event, to authorized staff, and to other users when needed for a feature you request, such as a ticket transfer or support conversation.

Information your organization chooses to publish on public event or organization pages can be viewed, copied, indexed, and shared by others. Removing it from Eventyr does not necessarily remove copies held by other people or search engines. Your organization is responsible for having authority to publish it.

Providers supporting hosting, storage, payments, email and text delivery, diagnostics, security, and support receive information needed for their services. We may also disclose information to professional advisers, as required by law, to address fraud or security threats, or in connection with a transfer or reorganization of our business subject to applicable protections.

When you provide personal data in connection with payment processing or payment-account onboarding, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy. Eventyr receives the payment information needed to provide its services.

Google Maps provides address suggestions in organization and venue forms. When you use these features, Google receives search text, IP addresses, and related location and device information. Google uses this information under its Privacy Policy, including to provide and improve its own products and services.

If you choose to add tickets to Apple Wallet or Google Wallet, ticket details, including any holder name, event and seating information, and ticket identifiers, are provided to the selected wallet service to create and update your tickets. These services also process information under Apple’s Wallet privacy notice or Google’s Privacy Policy.

We do not sell personal information or share it for cross-context behavioral advertising. Disclosures needed to provide a requested service, including to the relevant organizer and providers acting on our behalf, are described above.

5. Optional text messages

If you separately choose to receive text messages from Eventyr, we may use your mobile phone number and text-messaging information to send informational messages about a particular order and event. These messages may include order confirmations, payment receipts, ticket delivery, event reminders, cancellations, reschedules, venue changes, and other important service updates for that event. Consent for one event does not authorize messages about another event. Message frequency varies by event. Message and data rates may apply.

We do not sell or rent mobile information. Mobile information, including mobile phone numbers, text-messaging opt-in data, and text-messaging consent, will not be shared with third parties or affiliates for marketing or promotional purposes. We may disclose this information to service providers solely as needed to provide and support the text-messaging program, to the organization responsible for your transaction or event when needed to provide the requested service, or when required by law. Those disclosures do not permit the recipient to use your text-messaging opt-in data or consent for its own marketing or promotional purposes.

Reply STOP to stop all Eventyr texts. For help, reply HELP or contact hello@eventyr.io. Opting out of text messages does not affect other communications that you have requested or that we may send through another permitted channel.

6. Cookies, email tracking, diagnostics, and security checks

We use cookies and similar storage for sign-in, security, preferences, and service functionality. Browser controls let you block or remove cookies, although some features may then stop working. Blocking cookies does not necessarily stop all diagnostic or security processing.

We track email opens to understand whether our messages have been opened. Our email provider uses a small image in emails to record opens and related information, such as the time, IP address, approximate location, and email software. Email-app privacy settings may block or automatically load that image, so an open record does not necessarily mean you read the message.

We use New Relic for performance monitoring and error diagnostics. Our browser configuration disables session replay and New Relic cookies; it still sends performance, error, and related diagnostic information.

We use Cloudflare Turnstile and Vercel BotID to help prevent automated abuse. These checks process browser, device, network, and interaction signals for security. See the Turnstile Privacy Addendum and Vercel Privacy Notice for provider information.

Eventyr does not currently change its processing in response to a browser Do Not Track signal. We do not use advertising trackers to follow you across unrelated websites for targeted advertising.

7. Retention and account deletion

We retain information while needed to provide services, maintain transaction records, resolve disputes, protect the services, or meet legal obligations. The period depends on the information and its purpose. Provider copies and backups may remain subject to their applicable retention arrangements.

Account deletion removes account access and clears identifying information from the account profile. It does not erase every copy of identifying information or automatically delete organization-owned customer records, orders, payment records, or support history. Personal information contained in retained records, messages, attachments, provider copies, or backups may remain for the purposes described above. Deleting an account also does not cancel purchases or eliminate outstanding obligations.

Contact privacy@eventyr.io about information in retained records. We will consider the request under applicable law and, where relevant, coordinate with the organization responsible for the records. We may retain information when there is a lawful reason to do so.

8. Your choices and requests

You can update available account settings, manage device permissions, and use the account-deletion option. For privacy questions or requests, email privacy@eventyr.io.

Where applicable law gives you rights to access, correct, delete, receive a copy of, or limit particular uses of your information, we will handle your request under that law. We may need to verify your identity and authority before disclosing or changing information. For records controlled by an organizer, we may direct you to that organizer or assist it in responding.

You may also contact us with a request not to sell your information. We do not sell personal information. Where applicable, you may appeal our decision by replying to our response or contacting privacy@eventyr.io. We will not unlawfully discriminate against you for exercising your privacy rights.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information. No system can guarantee absolute security. Keep your credentials secure and report suspected unauthorized access to hello@eventyr.io.

10. Children and service location

Eventyr is not directed to children under 13, and we do not knowingly collect information directly from them. Organizations may provide information about attendees who are minors and must have any required authority to do so. Contact privacy@eventyr.io if you believe a child has provided information in circumstances that require our attention.

Eventyr is operated from the United States and currently offers services in the United States. Information may be processed in the United States and other countries where our service providers operate.

11. Changes and contact

We may update this Privacy Policy at any time by publishing a revised version through the services as our services, information practices, or legal requirements change. Each revision will identify its publication and effective dates. Please review this policy periodically. We may also notify you of changes by email or through the services. We will provide any notice and obtain any consent required by applicable law. A policy update, continued use of the services, or acknowledgment of receipt does not by itself authorize a use of previously collected information that requires separate consent.

For privacy questions, requests, or concerns, contact Eventyr Technologies LLC at privacy@eventyr.io. Legal notices may be sent to legal@eventyr.io.