Privacy Policy

This Policy explains how Encore, operated by Unresolved placeholder: [[LEGAL ENTITY NAME]], handles personal data for both organizers (who run events) and buyers (who buy tickets or register). It takes effect on Unresolved placeholder: [[EFFECTIVE DATE]].

1. Two roles under data protection law

Encore’s relationship to attendee data is deliberately split:

• The organizer is the controller of their attendees’ personal data. They decide what to collect, why, and what to do with it.
• Encore is the processor, acting on the organizer’s instructions to operate checkout, deliver tickets, and run the dashboard they use.

That split shapes Encore’s obligations under the GDPR for EU and UK data subjects, and its CCPA/CPRA posture for California residents: notice, deletion, correction, and opt-out rights generally flow to the organizer as controller, with Encore obliged to support them.

For data about organizers themselves as account holders (billing and payout contact details, login credentials, Stripe Connect identifiers), Encore is the controller.

A data processing addendum organizers can sign has not been published yet: Unresolved placeholder: [[DPA: AVAILABILITY AND TERMS]].

2. What Encore collects

About buyers, through an organizer’s checkout

• Name and email: needed to issue a ticket and its entry credential.
• Payment details: collected and processed by Stripe, not stored by Encore in raw form. Payment goes to the organizer’s connected Stripe account.
• Phone number: only if you give one, and only when you opt in to text updates about the event you bought a ticket for.
• Order and ticket data: what you bought, when, and its status, scoped to the event and organizer you transacted with.
• Transfers and waitlists: if a ticket is sent to you, Encore records who sent it and the email address it went to, and the organizer sees the current holder and who it came from. If you join a waitlist, we store your account, the ticket type, how many tickets you asked for and the time you joined, and we email you if tickets come back. Joining takes no payment.
• Check-in records: when your ticket is scanned at the door, Encore records that it was admitted, to which event, at what time, by which method, and which organizer staff account scanned it. That record is what stops one ticket being used twice, and it is used to answer a payment dispute about the order, by sending the admission time and method to the payment processor.
• Payment disputes: if a card payment for a ticket is disputed with the cardholder’s bank, we send Stripe, on the organizer’s behalf, information about that order so the organizer’s response can be considered by the bank. That is: the event name, place, date and ticket types; the order time, reference number and amount; the email address the order was placed with and the times we emailed the tickets to it; when and how tickets on the order were admitted at the door, and if a guest was later recorded as let out (for offline door phones, the time we recorded the scan, the time the device reported, and a short identifier of the door phone); whether the tickets were passed to another person (not who); and any refunds already made. We do not send ticket links or QR codes, phone numbers, IP addresses, other people’s names or emails, door staff names, or your other orders. The card network or bank may see this information. We act on the organizer’s instruction, and the organizer is the controller of your attendee record (section 1). We keep a record of what we sent (field names and a fingerprint), and the text itself is deleted from our records after the response has gone, normally within 48 hours.

About visitors to an organizer’s event pages

• Traffic and attribution data: Encore records page views, event views, checkout opens, payment starts, and completed orders on an organizer’s pages, together with the referring site and any campaign tags carried in the link you arrived on (the utm_source, utm_medium and utm_campaign values). The organizer sees this in their dashboard as counts grouped by source, not as a list of named people.
• A first-party visitor identifier: a random identifier is created in your browser’s local storage, not in a cookie, so that repeat visits from the same browser are counted once rather than many times. On a completed order that identifier is recorded alongside the order reference, which is what connects the visit to the purchase.

About fans who follow an organizer

• Who you follow: if you are signed in and choose to follow an organizer, Encore stores a record of your account, the organizer, and the time you followed. Its purpose is to build your feed of upcoming events from the organizers you follow. Only you can read your list of follows. The organizer sees how many followers they have, not who they are. You can remove a follow at any time by unfollowing, and deleting your Encore account deletes all your follows.

About anyone who signs in

• Sign-in: if you sign in with Apple or Google we receive your name and email address (for Apple, possibly a private relay address Apple makes for you) and an identifier from that provider. We do not receive your Apple or Google password.

About organizers

• Account and login information.
• Stripe Connect identifiers and payout status. Encore does not see full bank details. Those live at Stripe.
• The events, ticket types, and pricing they configure.

Encore lets fans browse public events, listed by date with no promoted placement. It does not sell, share or remarket one organizer’s attendees to another organizer, and does not email one organizer’s attendee about a different organizer’s event.

3. Your data stays scoped to your organizer

Attendee and order data collected through one organizer’s events is kept scoped to that organizer and is not exposed to other organizers through the product.

4. Data ownership and no cross-marketing

The organizer owns their attendee data. Organizer owners and admins can download their customers as a CSV file from the Customers tab of the dashboard. The file has one row per buyer email address and currency, with these columns: name, email, orders, refunded orders, tickets, face value spent, amount the buyer paid, amount refunded, first event, last event, last purchase date, and currency. It covers buyers whose orders are paid, partially refunded, or refunded; orders that are pending, failed, or cancelled are not included. It is a list of buyers, not of individual ticket holders, and it does not include phone numbers or text consent. Downloads are rate-limited, and a list too large for one file has to be narrowed with the search box first. There is no separate export that runs once an organizer account is gone, so an organizer should download what they need first (see section 5 of the Terms, closing an account). Encore will never market one organizer’s attendees to another organizer, or to itself. That is a privacy commitment as much as a contractual one: attendee data collected on one organizer’s behalf is not used for Encore’s own marketing, or sold or shared for anyone else’s. The full commitment is in section 5 of the Terms.

5. Text messages and consent

If you opt in to SMS at checkout, Encore sends event-related texts (reminders and day-of changes) from the organizer’s own sender identity, each ending with an opt-out instruction. What Encore records as proof of your consent today is an opt-in flag stored on your order, alongside that order’s own timestamps.

6. Sub-processors

Encore uses third-party vendors to operate the Platform. The ones identified so far:

7. Account security: a known gap

Encore is working on an identified account-security issue: creating an account does not always require the person registering to prove they control the email address they used. Until that is closed and re-verified, Encore does not represent that accounts are email-verified, or that only the holder of an address can reach an account registered to it. This Policy will be updated, and people notified as appropriate, once it is closed.

8. Retention and deletion

A signed-in person can delete their own Encore account from inside the Encore app (Profile, then Delete my account). Deletion removes the sign-in, the profile (name and email), the organizers they follow, and the emails and texts we hold for them, sent or queued. Records of orders, tickets and memberships are kept, because order and payment records cannot be deleted; the email address on them is replaced with a random placeholder that does not identify anyone, and the phone number and account link are removed. Order and ticket records hold no name of their own; the name was on the profile, which is deleted. Tickets already bought stay valid. Door check-in records are handled differently from order and ticket records. If a person who worked an event door deletes their account, the records of the check-ins and check-in undos they performed keep an internal identifier for the former account. That identifier is no longer linked to a name or email, so the organizer’s admission history stays complete, showing which ticket was admitted or undone and when, and that the same former account did it, but no longer shows who that person was. An account that owns an organizer cannot be deleted until ownership is transferred, and an account named on a payment audit record needs a request to Encore to complete. Encore has not published retention periods, and this page will not state timeframes that nothing behind it enforces: Unresolved placeholder: [[RETENTION PERIODS]].

If you signed in with Apple. When you delete your account, we ask Apple to cut off Encore’s access to your Apple account whenever we hold the token that lets us do that. We normally hold it when you signed in through our iPhone app. If you signed in with Apple on our website, we may not hold that token, and in that case we cannot ask Apple on your behalf. To remove Encore from your Apple account yourself: on an iPhone or iPad, open Settings, tap your name, then Sign-In & Security, then Sign in with Apple, choose Encore and tap Stop Using Apple ID; or at account.apple.com, Sign-In & Security, then Sign in with Apple. Until you do, Apple may still list Encore as an app you use. Deleting your Encore account removes your profile and sign-in from us either way.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict some processing. Because Encore is the processor for attendee data collected through an organizer’s event, requests about that data should go to the organizer first; Encore supports the organizer in fulfilling verified requests. For data where Encore is the controller (your own organizer account details), contact Encore at support@daytona-lab.com.

10. Children’s privacy

Encore’s position on all-ages and family events, and on any COPPA-relevant handling in checkout, has not been settled: Unresolved placeholder: [[CHILDREN’S PRIVACY POSITION]].

11. Changes to this policy

Encore may update this Policy. How changes are notified, and how the effective date moves, is not decided: Unresolved placeholder: [[CHANGE-NOTICE MECHANISM]].