Privacy Policy

This Privacy Policy explains how NTREWAY handles personal information when you use our websites, embedded ticketing widgets, and mobile apps. Organizers who receive your information when you buy their tickets have their own privacy practices, described below.

Information you give us:

• contact details such as your name, email address, and, where the organizer asks for it, phone number and other checkout questions;
• order details such as the event, tickets, seats, amounts, and promo codes;
• account details for organizers and staff, such as email address, name, organization, and role;
• messages you send us, for example through the contact form.

Information collected when you use the Service:

• payment information, which is entered into and stored by Stripe; NTREWAY receives only limited details such as card brand, last four digits, and payment status;
• ticket and entry records, including when a ticket was checked in and by which staff device;
• technical information such as IP address, browser and device type, and request logs, used for security, rate limiting, and troubleshooting;
• for staff using the NTREWAY Staff app, a device identifier used to attribute check-ins, and, with permission, camera access to scan tickets and location access required by Tap to Pay.

• to process orders and payments, issue and deliver tickets, and let you look up and manage your orders;
• to run entry at events, including preventing duplicate or fraudulent use of tickets;
• to send transactional messages about your orders and events, including changes and cancellations;
• to provide support, handle refunds and disputes, and communicate with organizers;
• to keep the Service secure, detect and prevent fraud and abuse, and comply with legal obligations;
• to maintain and improve the Service.

We share personal information only as follows:

• with the organizer of the event you bought tickets for, so they can run the event and contact you about it. Organizers use this information under their own responsibility and must follow our Organizer Agreement;
• with service providers that operate the Service for us under contract: Stripe (payments and payouts), Supabase (database and sign-in), Vercel (hosting), Resend (email delivery), and Upstash (security and rate limiting);
• when required by law, to respond to legal process, or to protect the rights, safety, and property of our users, organizers, the public, or NTREWAY;
• in connection with a merger, acquisition, or sale of assets, with notice where required.

We do not sell personal information and do not share it for cross-context behavioral advertising.

We use only cookies and browser storage that the Service needs to work: keeping you signed in, holding your selected tickets during checkout, giving you access to your order, and unlocking password-protected events. Staff check-in tools store data on the device so they can work offline. We do not use advertising or third-party analytics cookies.

We keep order, payment, and financial records for about seven years to meet accounting, tax, and dispute obligations. Operational records such as temporary checkout holds, technical logs, and delivery attempts are generally deleted after about 90 days. Account information is kept while the account is active and then deleted or anonymized, except where we must keep it longer by law.

We use encryption in transit, access controls, and other safeguards. Ticket QR codes are stored only as one-way hashes, and card details never touch our servers. No system is perfectly secure, so please keep your sign-in details and ticket codes private.

You can ask us to access, correct, or delete your personal information, or to receive a copy of it. Depending on where you live, including California and other US states with privacy laws, you may have additional rights, such as to know what we collect and to opt out of sale or targeted advertising (which we do not do). We will not discriminate against you for exercising your rights.

To make a request, contact us through the contact page from the email address on your order or account. We may need to verify your identity. For information an organizer holds about you, you can also contact the organizer directly. We may keep information we are legally required to retain, such as financial records.

The Service is not directed to children under 13, and we do not knowingly collect their personal information. Tickets for all-ages events must be bought by an adult. If you believe a child has given us personal information, contact us and we will delete it.

NTREWAY is operated from the United States, and our service providers may process information in the United States and other countries. We take steps to protect information wherever it is processed.

We will update the effective date when we change this policy and, for material changes, notify account holders by email or in the Service.

Questions or requests about privacy? Reach us through the contact page.