Privacy Policy

Who we are

sbTix ("we", "us") is an event‑ticketing platform that lets independent organizers sell tickets and lets attendees buy them. This policy explains what we collect and how we use it.

What we collect

• Account info (organizers): name, email, password (stored hashed), and your organization details.
• Order info (buyers): the name, email, and phone you provide at checkout, plus what you bought.
• Payment info: card payments are processed by a PCI DSS Level 1 payment processor. We never see or store full card numbers.
• Basic usage data: aggregate, non‑identifying counts such as event page views, used to give organizers insight into their events.

How we use it

• To deliver your tickets and send order confirmations and event updates.
• To let the event's organizer manage their attendee list and check people in at the door.
• To process payments and pay organizers their ticket revenue.
• To provide support and keep the platform secure.

Who can see your information

When you buy a ticket, the organizer of that event can see your order (name, email, phone, tickets) so they can run their event and contact you about it. That's the only sharing that happens — and only with the organizer you chose to buy from. We do not provide your information to anyone else for marketing.

We use a small number of vetted service providers strictly to operate sbTix — a PCI DSS Level 1 payment processor for card payments, a SOC 2 Type II email delivery provider for tickets and receipts, and SOC 2 Type II cloud infrastructure for hosting and storage. They may only process your data on our behalf, never for their own purposes. The full named list is available in our Data Processing Agreement, provided under NDA on request.

Support access to organizer accounts

sbTix staff cannot access an organizer's account on their own. If an organizer needs support, they generate a short-lived support code from their own dashboard and share it with us. A support agent can then use that code to open a support session for their org. The code is single-use, expires quickly, and the session can be revoked by the organizer at any time. Every action taken during that session is recorded in an internal audit log — who acted, when, and what was done — and is available to the organizer on request.

Separate from support sessions, a limited set of platform-operational information about your organization is visible to sbTix staff without a support code, strictly to run the platform: your organization's name, owner contact, connected payment account status, aggregate revenue and ticket-sale counts, and the public content of your event pages (including pages marked as private links, which are unlisted from public browsing but not walled off from the platform that hosts them). This is what we need to bill correctly, prevent fraud, respond to abuse reports, and route support to the right team. It does not include your buyers' personal information, financial payout details, or the ability to edit, delete, or take action on your account — those still require a support code you generate.

Marketing email

Any marketing or newsletter email includes an unsubscribe link and our physical mailing address, as required by law. Transactional messages (your tickets, receipts, event changes) are always sent.

Email from sbTix itself. When you buy a ticket you can tick a box asking sbTix to email you occasional event picks and offers. The box is never ticked for you, and it is separate from any list the event organizer keeps — organizers cannot add you to sbTix's list, and sbTix does not use an organizer's list for its own email. If you tick it, sbTix decides what to send you and is responsible for it (we are the data controller for that purpose).

If you opt in, your ticket receipt also carries a short note from sbTix under your tickets, with the same unsubscribe link. Unsubscribing stops sbTix's marketing only — your tickets, receipts and anything the organizer sends are unaffected. You can unsubscribe from any of these emails, or write to us at the postal address below.

sbTix · PO Box 1305, Linden, NJ 07036 · [email protected]

Your choices

You can request a copy of your data, ask us to correct it, or ask us to delete it. Email [email protected] and we'll take care of it.

Security & retention

Passwords are hashed, and ticket codes are cryptographically signed. We keep order records as long as needed for the event, accounting, and legal obligations, then remove them.

European Union users

If you're in the European Union, this section names the legal bases under Article 6 of the GDPR that we rely on for the processing described above.

• Contract (Art. 6(1)(b)) — running your ticket order, delivering your ticket, running an organizer's dashboard, processing payouts.
• Legitimate interests (Art. 6(1)(f)) — the platform-operational access described in the section above, fraud prevention, security, keeping the platform up.
• Consent (Art. 6(1)(a)) — sbTix's own marketing email (only if you tick the box on the ticket page), and any cookies where consent applies.
• Legal obligation (Art. 6(1)(c)) — tax records, accounting, and any lawful government request we are compelled to answer.

You have the rights the GDPR gives you: access, rectification, erasure, restriction, portability, and objection. Contact [email protected] and we'll handle it within one month. You can also complain to your national supervisory authority.

Children

sbTix isn't directed to children under 13 and we don't knowingly collect their data.

Changes & contact

We'll post any changes here with a new "last updated" date. Questions? [email protected].