Privacy Policy.

This Privacy Policy applies to websites, applications, tickets, check-in tools, support, and communications operated by Cicada Group, LLC, doing business as Private Event Tickets When an organizer uploads a guest list or directs us to issue and scan tickets, the organizer generally decides why that attendee information is used and PET processes it on the organizer’s behalf. The organizer is responsible for its own privacy notice and lawful instructions. PET independently determines purposes for organizer accounts, platform billing, security, fraud prevention, support, and legal compliance.

We collect information from you; from organizers and their authorized staff; automatically when you use the Services; from Stripe, Postmark, Twilio, Apple, Google, and similar providers; and from referrals or integrations an organizer configures. If an organizer provides your information, contact that organizer first for questions about why you were added to an event.

We use information to create accounts and events; generate, deliver, display, claim, revoke, and scan tickets; process orders, fees, refunds, and disputes; provide Wallet passes; authenticate and authorize users; enforce plan and scanner limits; prevent abuse and duplicate admission; send operational communications; troubleshoot and support; maintain audit records; improve reliability and usability; comply with law; and establish or defend legal claims. Where applicable, our bases include performing a contract, complying with law, legitimate interests in operating and securing PET, consent, and the organizer’s documented instructions.

We disclose information only as reasonably necessary: to the organizer and its authorized team; to processors such as hosting, database, email, SMS, logging, support, and security providers; to Stripe and connected organizer accounts for payments; to Apple or Google when a user requests a Wallet pass; in a business transfer; to professional advisers under confidentiality; or to authorities and others when legally required or reasonably necessary to protect rights, safety, and service integrity. We do not sell personal information for money and do not share it for cross-context behavioral advertising.

We retain information only as long as reasonably necessary for the purposes above. Account and organization records are generally retained while the account is active and for a reasonable period afterward. Event, ticket, audit, payment, refund, tax, fraud, and dispute records may be retained longer to meet contractual, accounting, legal, and security obligations. Temporary import files are intended to be processed and discarded; imported records become part of the event. Backups rotate on a controlled schedule, so deletion from backups may be delayed. We may retain de-identified or aggregated data that cannot reasonably identify a person.

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including access controls, least-privilege roles, hashed passwords, signed ticket links, secure cookies, audit logging, and encrypted transport where supported. No system is perfectly secure. Organizers must protect exports, choose appropriate staff access, remove departed personnel, and avoid uploading unnecessary sensitive data. Do not use PET to collect government identifiers, payment credentials, medical records, or other highly sensitive data unless PET has expressly agreed in writing.

You may update account details in the application, unsubscribe from optional marketing, and control cookies through your browser. Depending on where you live, you may have rights to know, access, correct, delete, restrict, object, withdraw consent, or receive a portable copy of personal information, and to appeal a denied request. PET does not discriminate for exercising privacy rights. Email hello@privateeventtickets.com with the subject “Privacy Request.” We may verify identity and authority. For attendee data controlled by an organizer, we may refer the request to that organizer and assist it as required.

California residents may request the categories and specific pieces of personal information collected, correction, deletion, and information about disclosure, subject to exceptions. PET does not sell personal information or share it for cross-context behavioral advertising, and therefore does not offer a “Do Not Sell or Share” link. We do not use or disclose sensitive personal information to infer characteristics. Authorized agents may submit requests with proof of authority. If our practices change, we will update this notice and provide any required opt-out mechanism.

PET is not directed to children under 13, and children may not create organizer or buyer accounts. An organizer may issue a ticket to a minor where lawful and with appropriate parental or guardian involvement, but should provide only the minimum information needed. Contact us if you believe a child’s information was provided improperly.

PET is currently designed primarily for the United States. Information may be processed in the United States and other locations where our providers operate. Organizations using PET for people in other jurisdictions are responsible for confirming that the Service and their instructions meet local requirements. Where required, the Data Processing Addendum supplies additional processor terms.

If we discover a security incident affecting personal information, we will investigate, mitigate, document, and notify affected organizations, individuals, or authorities as required by law and our contracts. We evaluate legal demands and disclose only information we reasonably believe must be disclosed.

We may update this policy as the product, providers, or law changes. Material changes will be highlighted through the Service, email, or this page. The effective date above identifies the current version. Questions and requests may be sent to hello@privateeventtickets.com. Our formal mailing address will be added before general public launch.