Privacy Policy

1. Information We Collect

Account information: When you register, we collect your email address and a hashed password. If you sign in via Google, we receive your Google account email and unique identifier. We do not store your Google password.

Transaction data: We record bids placed, auctions created, and purchases made on the Platform, including quantities and timestamps.

Contact information provided at checkout: When completing a purchase, you provide your name and email address for ticket delivery purposes. This information is stored with your order record.

Usage data: We may collect information about how you interact with the Platform, including pages visited and features used, to improve the service.

2. Payment Information

We do not collect or store payment card data. All payment processing is handled by Stripe, a third-party payment processor. When you complete a purchase, your card information is transmitted directly to Stripe and is subject to Stripe’s Privacy Policy. EntryReserve receives only a transaction confirmation and a payment reference ID — never your full card number, CVV, or bank account details.

For event organizers who enable payouts via Stripe Connect, Stripe collects additional business and banking information directly as part of their onboarding process.

3. How We Use Your Information

We use your information to: operate and maintain the Platform; process bids and transactions; send transactional emails (purchase confirmations, auction outcomes); communicate about your account; improve the Platform; detect and prevent fraud; and comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share limited information with:

• Event organizers: Your name and email are shared with the organizer of an event when you purchase tickets, so they can facilitate entry and fulfill ticket delivery obligations.
• Stripe: Transaction amounts and buyer email are shared with Stripe to process payments. See Section 2 above.
• Service providers: We use Resend to deliver transactional emails and Mapbox to display venue maps. These providers process data only as necessary to provide their services.
• Law enforcement: We may disclose information when required by valid legal process, court order, or to protect the rights, property, or safety of EntryReserve, our users, or the public.

Bidder identities are partially anonymized in public bid histories (e.g., “j***@example.com”).

5. Data Storage & Security

Your data is stored on servers located in the United States. Passwords are hashed using bcrypt with a per-account salt. Authentication tokens (JWT) are used for session management and expire after a set period. We use HTTPS for all data transmission. While we take reasonable security measures, no system is 100% secure.

6. Cookies & Local Storage

We use browser localStorage to maintain your authentication session (your login token and account details). This storage is local to your device and is not accessible to third parties. We do not use third-party tracking cookies or advertising cookies on the Platform. If you clear your browser’s local storage, you will be logged out.

7. Your Rights

You may: request access to the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated personal data (transaction records may be retained as required by law); and withdraw consent for data processing where processing is based on consent. To exercise these rights, contact us at privacy@entryreserve.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. No opt-out is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.

To submit a CCPA request, contact privacy@entryreserve.com with the subject line “CCPA Request.” We may need to verify your identity before processing the request.

9. Tax Reporting (1099-K)

EntryReserve may be required by law to report certain payment transactions to the IRS. If you receive payments through the Platform (as an event organizer or ticket seller) that exceed the applicable IRS reporting threshold, we or Stripe may issue a Form 1099-K to you and the IRS. You are responsible for reporting all income from ticket sales on your tax return, regardless of whether you receive a 1099-K. We recommend consulting a tax advisor regarding your obligations.

10. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except that we may retain transaction records for up to 7 years as required for tax, legal, and accounting purposes. Anonymized aggregate data may be retained indefinitely.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by applicable law. We will provide notification via email to your registered address and/or via a prominent notice on the Platform. For breaches subject to GDPR or similar laws, we will notify within the legally required timeframe (typically 72 hours of discovery for notifications to authorities).

12. Children’s Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will terminate the account and delete associated personal data. If you believe a minor has created an account, contact us at privacy@entryreserve.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a prominent notice on the Platform before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

14. Contact

For privacy-related inquiries, contact: privacy@entryreserve.com