yourboxoffice.net

How we handle your data

A plain-language summary for patrons and independent venues. For formal legal definitions, compliance criteria, and statutory protections, review our complete Privacy Policy.

If you’re buying tickets (Patron)

  1. What we collect at checkout: Your name, email, ticket quantity, and order total—the minimum needed to process payment, send a one-time verification code if needed, and deliver your tickets.
  2. Who owns the relationship: The venue hosting the show. They receive your order details and any marketing opt-in you choose.
  3. What we don't do: We never sell personal information. We don't run ad pixels at checkout or merge your ticket history across unrelated venues.
  4. How long we keep records: Order records stay with the venue long enough to handle refunds and accounting.

If you’re running a venue (Operator)

  1. Your attendee data: Sales lists, email addresses, and order totals live in your venue account only. Other venues can't see your records.
  2. Export any time: CSV order downloads are always available for your own bookkeeping—no premium tier required.
  3. Marketing opt-in: If you add a marketing checkbox at checkout, it starts unchecked. Opted-in emails are stored for your venue only; we don't send campaigns on your behalf today.
  4. Stripe handles identity for payouts: Operator verification and banking details go directly to Stripe under their rules. We store only what's needed to connect payouts to your venue.

Platform-wide practices

  1. Platform metrics only: We track aggregated system health—not shared patron profiles across venues.
  2. Encrypted and separated: Traffic is encrypted; each venue's data is scoped to that venue.
  3. Subprocessors: Payments via Stripe; transactional email via Resend; edge network via Cloudflare; database via Neon; checkout session cache via Upstash.
  4. Deletion requests: Patrons contact the venue first. Venues contact support@yourboxoffice.net to close a venue account.