Privacy Policy

1. Data Controller

Revvel ApS
Email: privacy@revveltix.com

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number
• Ticket Information: Attendee names, contact details
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Event Organizer Information: Business details, bank account information (encrypted)

2.2 Information We Collect Automatically

• Analytics: Page views, device type, browser (via Google Analytics and Microsoft Clarity)
• Security: IP addresses (anonymized), login timestamps
• Performance: Error logs, API response times

3. How We Use Your Information

• Process ticket purchases and deliver tickets via email/WhatsApp
• Facilitate event check-ins and transfers
• Send order confirmations and event updates
• Process vendor payouts
• Improve our platform and user experience
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

• Contract Performance: Ticket purchases, event access
• Legitimate Interest: Fraud prevention, platform security
• Consent: Marketing communications (opt-in only)
• Legal Obligation: Tax compliance, dispute resolution

5. Data Sharing

We share your information with:

• Event Organizers: Attendee information for events you register for
• Payment Processors: Stripe (PCI-DSS compliant)
• Email Services: Resend (for ticket delivery)
• Analytics: Google Analytics, Microsoft Clarity (anonymized)
• Infrastructure: Railway (hosting), Cloudflare (CDN/security)

6. International Data Transfers

Your data may be processed in Canada (Railway), United States (Stripe, Google), and the European Economic Area. We ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs)
• EU‑US Data Privacy Framework (DPF) (where applicable)
• GDPR-compliant data processing agreements

7. Your Rights (GDPR)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion (subject to legal obligations)
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Opt-out of marketing communications

To exercise your rights, contact us at privacy@revveltix.com

8. Data Retention

• Ticket Purchases: 7 years (tax/legal compliance)
• Marketing Consents: Until withdrawn
• Account Data: Until account deletion + 30 days
• Analytics: 26 months (Google Analytics default)

9. Security

We implement industry-standard security measures:

• TLS 1.3 encryption for all communications
• AES-256 encryption for sensitive data at rest
• HMAC-signed QR codes for ticket validation
• Regular security audits and penetration testing
• Access controls and audit logging

10. Children's Privacy

Our platform is not intended for users under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or prominent notice on our platform.

12. Contact & Complaints

Email: privacy@revveltix.com

You have the right to lodge a complaint with your local data protection authority.