Privacy Policy

Privacy Policy

This Privacy Policy describes how DayOf handles personal information when you browse our consumer site, purchase event access through a DayOf-powered checkout, receive tickets, or communicate with us.

It is designed to match how the product currently works, including payment processing through Stripe, ticket delivery, analytics, attribution, verification, and customer support.

1. Scope and role

This Privacy Policy explains how DayOf, Inc. ("DayOf," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the DayOf consumer website, purchase tickets or other access products through a DayOf-powered checkout, receive digital tickets, or communicate with us.

DayOf provides the customer-facing storefront, checkout, ticket delivery, and related services for venues, promoters, organizers, artists, brands, and other event partners. An event organizer or venue may also have its own privacy policy that applies to the event or venue experience.

2. Information we collect

Depending on how you interact with DayOf, we may collect:

  • Account and contact information, such as your name, email address, phone number, and any information you provide when creating an account, checking out, joining a waitlist, or contacting support.
  • Transaction and ticket information, such as the events, products, quantities, pricing, discounts, taxes, service fees, receipts, ticket identifiers, pass delivery details, and order history associated with your purchase.
  • Payment-related information needed to complete a purchase, such as billing name, billing email, billing phone number, payment processor responses, and limited card metadata. Payment card details are processed by Stripe and are not fully visible to or stored by DayOf.
  • Verification and security information, such as one-time passcode (OTP) requests, verification status, IP address, browser or device information, user agent, and anti-fraud or abuse prevention logs.
  • Usage and analytics information, such as pages viewed, referring URLs, event or product interactions, approximate location inferred from IP address, cookie or local storage identifiers, session identifiers, and attribution or affiliate parameters.
  • Communications information, including support messages and delivery, open, click, or response data for transactional or marketing emails and SMS messages that we send or that are sent on our behalf.

3. How we use information

We use personal information to:

  • Provide the DayOf website, checkout, ticket delivery, and account features.
  • Process orders, collect payment, send receipts, and support refunds or chargeback defense.
  • Verify identity, prevent fraud, detect abuse, and protect users, venues, and event partners.
  • Operate digital ticketing, Apple Wallet or pass delivery, and other access-control features.
  • Respond to support requests, troubleshoot issues, and improve reliability and performance.
  • Measure conversions, attribution, and product usage, and improve our services and event discovery experience.
  • Send transactional communications and, where allowed, promotional messages or product updates.
  • Comply with law, enforce our Terms of Service, and protect our rights and the rights of others.

4. Cookies, local storage, and similar technologies

DayOf uses cookies, local storage, and similar technologies to keep you signed in, maintain session state, measure product usage, attribute purchases to campaigns or affiliates, and improve site performance.

  • Authentication and session cookies used to keep you logged in.
  • Analytics identifiers used to understand how customers navigate and purchase.
  • Attribution cookies or parameters used to credit campaigns, affiliates, or referrals.
  • Preference storage used to support core checkout and account experiences.

You can control cookies through your browser settings, but disabling some cookies or storage may cause portions of the site or checkout flow to stop working correctly.

5. How we share information

We do not sell your personal information for money. We may share information with:

  • Event partners, such as organizers, venues, promoters, and brands, to operate the event, validate access, deliver customer support, and manage refunds, disputes, or event communications.
  • Payment providers and financial service providers, including Stripe, card networks, connected accounts, and fraud-prevention tools, to process payments and manage payment-related risk.
  • Service providers that help us host, operate, analyze, monitor, or communicate through our services, including cloud hosting, database, analytics, customer messaging, and email or SMS delivery providers.
  • Professional advisers, auditors, insurers, regulators, law enforcement, or parties to a legal process when disclosure is required or appropriate.
  • A purchaser, investor, or successor in connection with a merger, acquisition, financing, bankruptcy, or sale of business assets.

6. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to complete transactions, provide support, maintain security logs, and comply with legal, tax, accounting, and chargeback obligations.

  • Account and profile information is generally retained while your account remains active.
  • Order, payment, tax, and refund records may be retained for up to seven years or longer if required by law.
  • Security and verification logs are kept as long as reasonably needed to investigate fraud, abuse, or operational issues.
  • Analytics and attribution data may be kept for shorter periods or aggregated so it no longer identifies you.

7. Security and payment handling

We use administrative, technical, and physical safeguards designed to protect personal information, including HTTPS/TLS in transit, access controls, and security monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Payment information is processed securely by Stripe, our payment processor. Stripe is a PCI-compliant payment provider. DayOf does not store your full payment card number, full card verification code, or similar sensitive authentication data.

8. Your choices and rights

Subject to applicable law, you may have the right to:

  • Access, correct, or update certain account or profile information.
  • Request deletion of personal information that we no longer need, subject to legal or operational retention obligations.
  • Opt out of marketing emails by using the unsubscribe link or by contacting us.
  • Ask questions about how we process personal information or request a copy of this policy.

To make a privacy request, email support@dayof.ai with "Privacy Request" in the subject line.

9. Children's privacy

DayOf is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through these consumer services. If you believe a child has provided personal information to us, please contact us so we can review and address the issue.

10. Changes to this policy and contact information

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and may provide additional notice where appropriate.

If you have questions about this Privacy Policy or our privacy practices, contact DayOf, Inc. at support@dayof.ai or visit https://dayof.ai.