Privacy Policy for yourboxoffice.net

1. Data Processing Roles

• Venues (Organizers): We act as a Data Processor regarding Patron information collected during checkout. The local Venue organizing your event is the primary Data Controller. Your information belongs to that Venue.
• Patrons (Ticket Buyers): We process your information to fulfill transactions, deliver tickets, prevent fraud, and keep order records accurate.

2. Information We Collect and Purpose Limitation

We collect only what checkout and ticket delivery require:

• Transaction & Checkout Data: First name, last name, email address, ticket quantity, and order total. Used to process payment through Stripe, send verification codes when needed, and deliver tickets.
• Security & Operations: IP addresses, browser type, and request metadata are used temporarily to block bots, scalping abuse, and payment fraud.

3. Payment Processing and PCI-DSS

Your full card number, expiration, and security code never enter our database. Card details are entered and tokenized inside Stripe's hosted checkout (Stripe Elements). We remain outside the cardholder data environment under PCI-DSS SAQ-A.

4. Third-Party Subprocessors

We use only the following subprocessors to operate the service:

• Stripe, Inc. — Payment processing, payout routing, and fraud analysis.
• Resend Inc. — Transactional email (tickets, verification codes, receipts).
• Cloudflare, Inc. — Network delivery, DNS, and bot protection.
• Neon, Inc. — Database storage.
• Upstash, Inc. — Temporary checkout session cache during ticket holds.

5. No Third-Party Tracking or Ads

Checkout contains no advertising pixels, cross-site analytics scripts, or retargeting cookies. Your purchase stays focused on the order—not on selling your attention.

6. Transactional Communications

We use your contact details only for:

• Email verification codes.
• Order confirmations with ticket QR codes.
• Magic links to look up previously purchased tickets.

7. Your data rights and how to request them

We respond to access, portability, correction, erasure, and restriction requests under applicable privacy law (including GDPR where it applies).

Patrons (ticket buyers)

The venue that sold your tickets is the Data Controller for your purchase. For refunds, event questions, or deletion of your order information, contact that venue first using the details on your confirmation email.

If the venue cannot help, or your request concerns how we process your data, email `legal@yourboxoffice.net` with:

• The email address used at checkout
• Venue or event name (if known)
• Order date or confirmation details
• What you are requesting (copy of data, correction, or erasure)

We may verify your identity (for example by confirming control of the checkout email) before fulfilling a request. We aim to respond within 30 days.

Self-service (limited)

You can view paid orders for an email address using Find my tickets on the venue site (magic link sent to your inbox). To download a structured JSON export of your orders and ticket metadata for a venue, request a separate data export link (sent to the same checkout email; distinct from the ticket-lookup link). Each flow covers one venue at a time and does not include payment card data.

Venues (organizers)

Signed-in venue staff with box office manager permissions can export or erase patron data for their organization from Privacy requests in venue admin (/admin/org/{slug}/privacy/dsar). Export includes orders, ticket references, and marketing opt-in status for a single patron email. Erasure anonymizes personal fields on retained order rows (financial totals and status are kept for accounting). For venue account closure or company-level deletion, contact `support@yourboxoffice.net`. Regulatory or cross-border inquiries: `legal@yourboxoffice.net`.

Retention

We retain order records for as long as the venue needs them for operations, refunds, and accounting, and as required by law. After an approved erasure, we replace personal identifiers with anonymized placeholders where transaction metadata must remain. See our [Data Practices](/data-practices) page for a plain-language summary.

Patron erasure

Patrons cannot self-delete checkout data in the product UI today. Contact the venue or `legal@yourboxoffice.net`; venue staff can execute org-scoped erasure from admin after confirming your identity.