Privacy Policy

How we protect and handle your personal information

Last Updated: November 13, 2025

TicketPal Technologies, Inc., doing business as TixPal ("we," "us," or "our"), operates an AI-powered ticket discovery and purchasing platform. We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

IMPORTANT: WE WORK WITH TICKETING PARTNERS TO FULFILL TICKET PURCHASES. WHEN YOU PURCHASE TICKETS THROUGH OUR PLATFORM, YOUR TRANSACTION INFORMATION WILL BE SUBJECT TO OUR TICKETING PARTNER'S PRIVACY POLICY IN ADDITION TO OURS.

This Privacy Policy explains how we collect, use, and protect your information when you use our website, mobile application, and AI assistant services (collectively, the "Services").

By using our Services, you agree to this Privacy Policy. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT USE OUR SERVICES.

1. Information We Collect

Information You Provide Directly

  • Account Information: Name, email address, phone number, and password when you create an account
  • AI Conversations: Questions, preferences, and interactions with our AI assistant
  • Profile Preferences: Event types, locations, price ranges, and other preferences you share
  • Transaction Information: Payment details, billing information, and purchase history
  • Communications: Messages you send to our customer support team

Conversation and Chat History

When you interact with our AI assistant, we collect and store:

  • Your messages and queries
  • The AI assistant's responses
  • Conversation timestamps and metadata
  • Event search history within conversations

We store this conversation history to:

  • Provide you with access to your past conversations
  • Improve your experience by understanding your preferences
  • Enable multi-session interactions with context

Data Retention: We retain your conversation history until you choose to delete it. You can delete individual conversations or your entire account at any time in your Privacy Settings.

Your Control: You can access, download, or delete your conversation history at any time through Settings > Privacy.

Information Collected Automatically

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, time spent on our platform, click patterns
  • AI Interaction Data: Conversation logs, response times, feature usage within the AI assistant
  • Cookies and Tracking: We use cookies and similar technologies to enhance your experience

Information from Ticketing Partners

When you purchase tickets, our ticketing partners may share transaction confirmation details and delivery information with us to provide customer service and fulfill your order.

2. How We Use Your Information

Core Services

  • Operate and maintain our AI-powered ticket discovery platform
  • Process your requests and provide personalized event recommendations
  • Facilitate ticket purchases through our partner network
  • Provide customer support and respond to your inquiries

AI Enhancement

  • Improve our AI assistant's ability to understand and respond to your preferences
  • Analyze conversation patterns to enhance recommendation accuracy
  • Develop new features and capabilities for our AI platform
  • Train our models to better serve users with similar interests

Business Operations

  • Send account updates, transaction confirmations, and service announcements
  • Conduct analytics to improve our Services and understand user behavior
  • Prevent fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service

Marketing (With Your Consent)

  • Send promotional emails about events and platform updates
  • Provide personalized recommendations based on your interests
  • Conduct surveys and research to improve our Services

3. Automated Decision-Making

Our AI assistant makes automated recommendations for events based on your preferences and conversation history. These recommendations do not have legal or similarly significant effects on you.

You always have control: All ticket purchases require your explicit confirmation. The AI assistant cannot purchase tickets without your approval.

4. Information Shared with Ticketing Partners

When Sharing Occurs

When you choose to purchase tickets through our platform, we share necessary information with our ticketing partners who serve as the merchant of record for that transaction.

What Information We Share

  • Personal Details: Name, email address, phone number
  • Payment Information: Billing address and payment method (processed directly by partner)
  • Event Preferences: Selected event, seating preferences, ticket quantity
  • Transaction Context: How you discovered the event through our AI platform

Partner Data Practices

Our ticketing partners maintain their own privacy policies, which govern their handling of transaction data. You can review these policies on their respective websites. We do not control their data practices beyond our contractual requirements.

5. Other Information Sharing and Disclosure

Service Providers

We may share information with third-party service providers who assist us with:

  • Cloud hosting and data storage
  • Analytics and performance monitoring
  • Customer support tools
  • Marketing and communication services
  • Payment processing (separate from ticketing partners)

Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal process or government requests
  • Protect our rights, property, or safety, or that of our users
  • Prevent fraud, abuse, or violations of our Terms of Service
  • Respond to emergencies involving personal safety

Business Transfers

If TicketPal Technologies, Inc. is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

Aggregated Data

We may share aggregated, anonymized data that cannot identify you personally for research, analytics, or business purposes.

6. Your Privacy Rights

For All Users

You have the right to:

  • Access your personal information - Download all your data through Settings > Privacy > Export Data
  • Delete your account and data - Permanently remove your account through Settings > Privacy > Delete Account
  • Delete individual conversations - Remove specific chat histories at any time
  • Opt-out of location-based recommendations in Privacy Settings (if applicable)
  • Opt-out of using your data to improve our AI in Privacy Settings (if applicable)

How to Exercise Your Rights

Self-Service Options:

  • Export your data: Settings > Privacy > Export Data
  • Delete your account: Settings > Privacy > Delete Account

Contact Us:

For assistance or questions about your rights: support@tixpal.ai

We will respond to requests within 30 days (GDPR) or 45 days (CCPA).

Additional Rights for EU/UK Users

Under GDPR, you also have the right to:

  • Rectification: Update or correct your personal information
  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests
  • Portability: Receive your data in a machine-readable format (JSON)
  • Lodge a complaint: Contact your local data protection authority

EU Data Protection Authorities: https://edpb.europa.eu/about-edpb/board/members_en

7. Data Security and Retention

Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and monitoring
  • Access controls and employee training
  • Secure development practices

Data Retention

  • Account Data: Retained while your account is active and for a reasonable period after closure
  • AI Conversation Logs: Retained until you choose to delete it. You can delete individual conversations or your entire account at any time.
  • Transaction Records: Retained as required for legal and business purposes
  • Marketing Data: Deleted upon unsubscribe, except as required by law

Data Breach Notification

In the event of a data breach that affects your personal information:

  • We will notify affected users within 72 hours of becoming aware (GDPR requirement)
  • We will notify relevant supervisory authorities as required by law
  • Notification will include what data was affected and steps we're taking
  • We will provide guidance on how to protect yourself

Limitations

While we strive to protect your information, no system is completely secure. We cannot guarantee absolute security of data transmission over the internet.

8. International Data Transfers

Our servers are located in the United States. If you access our Services from the European Economic Area (EEA) or UK, your personal data will be transferred to and processed in the United States.

The United States does not have the same data protection laws as the EEA/UK. We protect your data through:

  • Standard Contractual Clauses approved by the European Commission
  • Technical and organizational security measures

You have the right to request information about the safeguards we use. Contact support@tixpal.ai for details.

9. Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Third-Party Services

Third-Party AI Services

We use third-party AI providers to power our AI assistant. When you use our service:

  • Your messages are sent to external AI providers to generate responses
  • These providers do not use API data to train their models
  • They process your data according to their privacy policies

What you should know:

  • We only use enterprise AI providers with strong privacy commitments
  • Your conversations with our AI are not used to train external AI models
  • Data is transmitted securely and processed only to provide responses

Other Third-Party Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to these third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing information to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, regulatory, or operational reasons. We will:

  • Post the updated policy on our website
  • Update the "Last Updated" date
  • Notify you of material changes via email or prominent notice on our platform
  • For significant changes, provide advance notice where required by law

13. Regional Privacy Notices

European Economic Area and United Kingdom

Under GDPR and UK data protection law, we process your personal data based on the following legal grounds:

  • Contract Performance: To provide our Services and fulfill our obligations to you
  • Legitimate Interests: For analytics, security, fraud prevention, and service improvement
  • Consent: For marketing communications and optional features (you can withdraw consent at any time)
  • Legal Compliance: To meet our legal obligations

You have additional rights under European law, including the right to lodge a complaint with your local supervisory authority.

California Residents

Under the California Consumer Privacy Act (CCPA), you have specific rights regarding your personal information:

Categories of Personal Information We Collect:

  • Identifiers: Name, email, phone, IP address
  • Commercial Information: Purchase history, preferences
  • Internet Activity: Browsing behavior, AI interactions
  • Inference Data: Preferences derived from your activity
  • Financial Information: Payment data (processed by partners)

Your California Rights:

  • Right to Know: What personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: We do not sell personal information
  • Right to Non-Discrimination: We won't discriminate for exercising your rights

To exercise these rights, contact us at support@tixpal.ai.

Nevada Residents

Nevada residents have the right to opt out of the sale of personal information. We do not sell personal information as defined under Nevada law.

12. Contact Information & Data Controller

Data Controller

TicketPal Technologies, Inc.

1111B S Governors Ave, Suite 34498

Dover, DE 19904

United States

Privacy Inquiries

Email: support@tixpal.ai

Response Time

  • GDPR requests: Within 30 days
  • CCPA requests: Within 45 days

Last updated: November 13, 2025