Privacy & Cookie Policy

1. Who we are

Matter Tickets LLC ("Matter Tickets," "we," "our," or "us") operates mattertickets.com — a ticketing platform for local events based in Birmingham, Alabama. We are the entity responsible for collecting and handling your personal information as described in this Privacy & Cookie Policy ("Policy").

This Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have over it. It applies to all users of the Platform: attendees who purchase tickets, organizers who create events, and visitors who browse without an account.

2. What counts as personal information

"Personal information" means any information that identifies you directly or could identify you when combined with other data. This includes obvious identifiers like your name and email address, as well as less obvious ones like your IP address, device identifiers, and browsing patterns.

Some personal information is considered sensitive — including health or medical data, government identification numbers, financial account details, and biometric data. We do not intentionally collect sensitive information through the Platform. If you believe you have provided such information to us, please contact us at hello@mattertickets.com and we will delete it promptly.

3. Information we collect and why

When you create an account

We collect your first name, last name, and email address. If you sign in with Google, we also receive your Google profile picture. We use this to identify you across sessions, display your name in the app, and send you transactional emails. We store this in our database hosted on Supabase.

When you purchase a ticket

We collect and store your name, email address, the event you purchased a ticket for, the ticket tier, the amount paid, a Stripe payment intent ID, and a unique QR code identifier for your ticket. We use this to issue your ticket, send a confirmation email with your QR code, and allow organizers to validate your entry. We do not store your card number, CVV, or full payment details — those are handled entirely by Stripe.

When you create an event as an organizer

We collect your event details (name, description, date, time, location, ticket pricing, and any images you upload), your Stripe Connect account information (handled by Stripe), and sales and payout data associated with your events. We use this to publish your event listing, process ticket sales, and facilitate payouts to your bank account via Stripe.

When you browse the Platform

We automatically collect certain technical information when you visit the Platform, including your IP address, browser type and version, operating system, referring URL, pages visited, timestamps, and general location derived from your IP address. We use this to operate and improve the Platform, diagnose errors, and understand how the site is used. We do not use this data for advertising or sell it to third parties.

When you contact us

If you email us or submit a support request, we collect your name, email address, and the content of your message. We use this solely to respond to your inquiry and resolve any issue you raise.

4. How we use your information

We use personal information for the following purposes:

• To create and maintain your account and authenticate you across sessions
• To issue, deliver, and validate event tickets
• To send transactional emails — ticket confirmations, QR codes, and account notices — via Resend
• To process ticket payments and facilitate organizer payouts via Stripe
• To display your name and profile information within the Platform
• To allow organizers to validate attendee tickets at check-in
• To detect and prevent fraud, abuse, and security threats
• To diagnose technical issues and improve Platform performance
• To comply with legal obligations, including tax reporting requirements
• To respond to customer support requests

We do not use your personal information for advertising. We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

5. How we share your information

We do not share your personal information with third parties except in the following circumstances:

Service providers

We share data with trusted third-party service providers who help us operate the Platform. These providers are permitted to use your data only to provide services to us and are contractually required to protect it:

• Supabase — database hosting and authentication, including Google OAuth. Privacy policy
• Stripe — payment processing and organizer payouts. Stripe processes payment card data directly and is subject to PCI-DSS compliance. By using the Platform you also agree to Stripe's privacy policy.
• Resend — transactional email delivery. Privacy policy
• Vercel — hosting and infrastructure. Privacy policy

Event organizers

When you purchase a ticket, your name and email address are accessible to the event organizer for the purpose of managing attendance, communicating event logistics, and validating your ticket at check-in. Organizers are bound by our Organizer Terms and may not use your information for unrelated marketing purposes.

Legal requirements

We may disclose your information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of any person.

Business transfers

If Matter Tickets is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email or by a prominent notice on the Platform before your information becomes subject to a different privacy policy.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the service, resolve disputes, and comply with legal obligations. Specific retention periods:

• Account data — retained until you delete your account, then purged within 30 days
• Ticket and transaction records — retained for 7 years from the transaction date for financial and tax compliance purposes, even after account deletion
• Support correspondence — retained for 2 years from the date of last contact
• Technical/usage logs — retained for up to 90 days, then aggregated or deleted

Where we are legally required to retain data (for example, for tax reporting or fraud investigation), we will retain only the minimum necessary data for the minimum required period.

7. How we protect your information

We implement technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These include:

• Encrypted data transmission via HTTPS/TLS
• Row-level security on our database (Supabase) to prevent cross-account data access
• Authentication managed through Supabase Auth with secure session tokens
• Payment card data handled exclusively by Stripe, which is PCI-DSS compliant — we never see or store your card details
• Access to production data restricted to essential personnel only

No method of electronic storage or transmission is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at hello@mattertickets.com.

8. Your rights

Depending on where you are located, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your account and associated personal data (subject to our legal retention obligations)
• Portability — request a copy of your data in a structured, machine-readable format
• Objection — object to certain uses of your data, such as direct marketing
• Restriction — request that we limit our use of your data in certain circumstances
• Withdraw consent — where processing is based on your consent (e.g., Google Sign-In), you may withdraw consent at any time by revoking access in your Google account settings

To exercise any of these rights, email us at hello@mattertickets.com with your name, email address, and a description of the request. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

If you believe we have not handled your personal information in accordance with this Policy or applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

9. Direct marketing

We may send you emails about new features, events we think you'd enjoy, or other Platform news — but only where you have opted in to receive such communications, or where we have a legitimate interest in contacting you as an existing user.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email, or by emailing hello@mattertickets.com. Unsubscribing from marketing emails does not affect transactional emails (ticket confirmations, QR codes, account security notices), which are necessary for the operation of the service.

10. Cookies and tracking technologies

What are cookies?

Cookies are small text files stored on your device by your browser when you visit a website. We also use similar technologies such as local storage and session storage. These technologies help us keep you logged in, remember your preferences, and understand how the Platform is used.

Cookies we use

We use cookies in the following categories:

What we do not use

We do not use advertising or tracking cookies. We do not place cookies that follow you across other websites, build advertising profiles, or share your browsing behavior with ad networks.

Managing cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.

11. Children's privacy

The Platform is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Platform or provide any information to us.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at hello@mattertickets.com and we will delete it promptly.

12. International data transfers

Matter Tickets is based in the United States and our data is stored and processed in the United States. If you access the Platform from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer. We take steps to ensure our service providers maintain adequate data protection standards regardless of where they process data.

13. Links to third-party sites

The Platform may contain links to third-party websites or services — for example, event venue websites or social media. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policy of any third-party site you visit.

14. Changes to this policy

We may update this Policy from time to time. When we make material changes, we will update the "last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of the Platform after the effective date of any change constitutes your acceptance of the updated Policy.

15. Contact and complaints

If you have questions about this Policy, want to exercise your rights, or wish to make a complaint about how we have handled your personal information, contact us at:

Matter Tickets LLC
Birmingham, Alabama
hello@mattertickets.com

We will acknowledge your request within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate to the relevant data protection authority in your jurisdiction.