1. Our basic approach
We collect only the data needed to provide the service. No data we collect is ever sold or rented to third parties for marketing purposes.
2. Security measures
All traffic is encrypted with TLS. Payment details are tokenised at a licensed payment institution; card numbers never enter our systems.
Database access is restricted at row level: an organiser can only see data for their own events.
Every action involving money or permissions is written to an audit log, and that log cannot be altered.
3. Notification preferences
We send a notification when an event's time or venue changes, and when your refund is concluded. These are part of the service and cannot be turned off.
Campaign and recommendation notifications are off by default and are sent only if you turn them on.