Privacy Policy

This policy covers Gather's handling of information about event goers, account holders, venue operators, promoters and staff. You can buy tickets as a guest where the organizer allows it; creating an account is not always required.

Venues, promoters and other event organizers use Gather to run their events. We provide them with information needed to manage their own events and customers, and we process some information on their behalf. An organizer's own use of that information is also subject to its privacy notices and applicable law. Contact the organizer about its event practices, or contact Gather if you need help identifying the right contact.

What we collect depends on the features you use and what an organizer requests:

• Account and contact information, such as your name, email, phone number, account identifiers, login information, communication preferences and support messages.
• Ticket and transaction information, including events, ticket types, order amounts, fees, optional tips, discounts, payment status, refunds, transfers, attendance and check-in or admission-refusal records.
• Information you submit for an event, such as checkout answers, guest names, age or date of birth, waiver agreements and electronic signatures. Signed waiver records may include the agreement version, signature time, IP address and browser information.
• Government-issued ID numbers, only when an organizer enables that requirement and the checkout asks for them. Authorized event staff can view those numbers during the admission check. Gather's current ID-number feature does not request an ID photo, a selfie or a biometric scan.
• Profile and discovery information you choose to provide, including a display name, handle, bio, city, saved events, followed venues and shared event plans.
• Business and staff information, such as venue details, team roles, access permissions, event content, payout-account references and information required to set up an enabled business service.
• Technical and usage information, such as IP address, device and browser information, time zone, page activity, referral or promoter attribution, cookies, local storage, security logs and delivery or error records. If you enable app notifications, we also handle the device's push token and notification preferences.
• Contacts and permission records an organizer imports or enters. Organizers must have the right to provide that information and the permission required for the communication they request.

Stripe processes card payments and connected-account onboarding. Gather receives transaction details and payment or account references needed to operate ticketing, reconcile payments and handle refunds or disputes. Gather does not store your full card number or card security code. Stripe handles information you submit directly to its services under its own privacy notice.

Government ID numbers are encrypted before database storage and are restricted to authorized admission workflows. They are not included in ordinary ticket emails or audience exports. Provide only the information the checkout requests; do not send ID numbers, full card details or other sensitive documents to our support email.

We use information to:

• Create and secure accounts, verify email access, manage staff permissions and provide customer support.
• Process orders, issue and recover tickets, manage reservations and waitlists, transfer tickets, admit guests, record waivers and perform organizer-requested ID checks.
• Process and reconcile payments, fees, tips, refunds, payouts and disputes; maintain financial and operational records; and detect fraud or misuse.
• Display event discovery and profiles according to your settings, maintain saved events and follows, and provide requested event notices and reminders.
• Deliver service messages and, where you have given the required permission, promotional messages for the relevant sender. A ticket purchase by itself is not consent to promotional SMS.
• Operate, troubleshoot and improve the service, understand aggregate usage, meet legal obligations and protect users, organizers and Gather.

Event organizers and their authorized staff receive information relevant to their events, orders and assigned responsibilities. For example, an organizer can manage guest lists and order records, while authorized door staff can check tickets and view ID numbers when that event requires an ID check. Organizers may export permitted event or audience records and are responsible for their subsequent handling.

We use service providers for hosting, databases, authentication, payments, email, messaging, app notifications, analytics and support. These include services such as Vercel, Supabase, Stripe and Resend; Bird receives messaging information when Bird-powered SMS is enabled. Providers receive information needed for the services they perform. Carriers and payment providers may also process information to meet their own legal and operational obligations.

We may disclose information when required by law or legal process, to investigate fraud or enforce agreements, to protect rights or safety, or as part of a merger, acquisition or other business transfer subject to applicable privacy obligations. We may also disclose information at your direction, such as to a ticket-transfer recipient.

Gather does not sell personal information or share it for cross-context behavioral advertising. Organizer access to its own event and customer records is described above; it does not give other organizers permission to market to you.

Where SMS delivery is available, you choose whether to request ticket and order messages. Promotional SMS requires separate permission for the identified sender. Message frequency varies with your requests and, for promotions, the program you join. Message and data rates may apply. Our Terms of Service include the SMS program terms.

SMS opt-in data and consent are not shared with third parties or affiliates for their own marketing or promotional purposes. We may share phone numbers, message content and consent or opt-out records with messaging providers and carriers only as needed to operate the program, honor your choices and satisfy legal requirements. For a venue's program, Gather maintains that venue's permission records on its behalf; those records do not authorize marketing by other venues or unrelated Gather programs.

Reply STOP to a program's sending number to stop its texts, or HELP for help. You can also contact our support email. An opt-out applies to the relevant sender or program; we will honor broader requests when you make them. Opting out of promotional texts does not cancel your tickets. You can access tickets through your order link and, where available, your Gather account or email delivery.

Use email unsubscribe links or available venue notification settings to change optional email preferences. Essential purchase, account-security and support messages may still be sent. Device settings control app push notifications. Following a venue or creating an account does not by itself opt you in to promotional SMS.

If you choose a public profile or share an event plan, the profile information and plans you publish can be seen by others. Saved events remain private unless you choose to share them. Your email and ticket details are not made public through your profile.

Ticket, order, transfer and recovery links can provide access to private records or admission. Keep those links and QR codes private and share tickets using the supported transfer features. Anyone you forward a private link to may be able to use the access it provides.

We use cookies and device storage for sign-in, session security, preferences, time zone and promoter attribution. You can control cookies and storage in your browser, but blocking or clearing them may affect sign-in, saved preferences and other features.

We use Vercel Analytics for page-view measurement on selected public discovery and event pages. Our analytics integration removes query parameters and excludes private ticket, order, recovery and invitation pages. Hosting and security services may separately process technical request logs. We do not use advertising pixels for cross-context behavioral advertising in the current service.

We retain information as needed to provide the service and for legitimate accounting, tax, dispute, fraud-prevention, security and legal purposes. The period depends on the record and its purpose: an order or signed waiver may need to be kept longer than a temporary sign-in or recovery record. Closing an account or archiving a venue does not automatically erase event, financial or waiver records.

ID-number records become eligible for scheduled deletion after the event has ended for more than seven days, or earlier when the related order or checkout no longer qualifies for retention. Cleanup is performed by scheduled processing rather than immediately at the moment a condition is met. Other records, restricted backups or records subject to a legal hold may remain for their applicable retention period.

We use access controls and technical safeguards designed to protect information. No system or transmission is completely secure. Ordinary SMS and email are not end-to-end encrypted; do not use them to send sensitive identity or payment information.

You can update available account and profile settings and use notification or unsubscribe controls. Contact our support email to request access, correction, deletion, a copy of your information or other privacy assistance. Self-service account deletion is not currently offered; requests can be made by email.

Depending on where you live and the law that applies, you may have rights to access, correct, delete or obtain a portable copy of information, restrict or object to certain processing, withdraw consent, use an authorized agent, or appeal a declined request. We will handle applicable requests without unlawful discrimination. To appeal, reply to our decision or email us with the subject Privacy appeal. You may also contact your local privacy regulator.

We may need to verify your identity or your agent's authority before releasing or changing information. Some information must be retained for legal, security or transaction reasons. If an organizer controls the information you ask about, we may direct the request to it or assist it in responding. Withdrawing consent does not change processing that was lawful before withdrawal.

Gather is not directed to children under 13, and children under 13 should not create accounts or submit their personal information directly. A parent or guardian arranging an age-appropriate event should provide only the guest information the organizer requires. Contact us if you believe a child has provided information improperly so we can investigate and take appropriate action. Event-specific age restrictions still apply.

Gather and its providers may process information in the United States and other countries where they operate. Privacy laws may differ from those where you live. Where applicable law requires safeguards for international transfers, those requirements still apply.

We may update this policy as the service or our practices change. The date above identifies the latest version. We will provide any additional notice or obtain consent when required by applicable law. Contact Wave Dynamics Inc DBA Gather Tickets at matthew@gathertickets.com with privacy questions or requests.