Zentix Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you purchase tickets, create a cart, manage an order, or contact us, we collect information you provide, including:

• Name (first and last)
• Email address
• Phone number
• Billing zip or postal code
• Payment information (credit card, debit card, or other payment method details, which are processed and stored by our payment processor, Stripe, and are not stored on Zentix servers)

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain technical and usage information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on the Service
• Referring URL and how you arrived at the Service
• Cart activity, including items added, sessions selected, and dates browsed
• Purchase history and order details

Camera: When you use our scanner application to validate tickets at an event, the app accesses your device camera to read ticket QR codes and barcodes. Camera images are processed on-device to decode the ticket code and are not stored or transmitted.

1.3 Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to operate the Service and to support analytics and advertising. These include:

• Essential cookies required for the Service to function, including session management and cart functionality
• Analytics cookies that help us understand how the Service is used, including Google Analytics and Google Tag Manager
• Advertising pixels from platforms such as Meta (Facebook) and Google Ads, which may be placed by the event operator (our client) to measure the performance of their advertising campaigns

Event operators who use Zentix may configure their own advertising and analytics tracking through our platform. These third-party tools are governed by the privacy policies of their respective providers (for example, Meta's Privacy Policy or Google's Privacy Policy). Zentix does not control the data collected by these third-party tools once it leaves our platform.

1.4 Information from Payment Processing

We use Stripe as our payment processor. When you make a purchase, Stripe collects and processes your payment information in accordance with Stripe's own privacy policy. Zentix receives a payment confirmation, transaction ID, and basic card details (such as the last four digits and card brand) but does not receive or store your full card number, CVV, or other sensitive payment credentials.

1.5 Information from Operators and Staff Users

If you access the Service as a venue operator or staff member (including through our scanner and management applications), we collect your account identity and authentication data (managed through our identity provider, WorkOS), the actions you take in the app such as ticket scans and door sales, and device and diagnostic information.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process your ticket purchases, hold inventory during checkout, and deliver your tickets via email and SMS
• To send you order confirmations, ticket delivery messages, event reminders, know-before-you-go information, and other transactional communications related to your purchase
• To enable you to look up, reschedule, or upgrade your orders through our self-service order management system
• To detect and prevent fraud, resolve payment disputes, and maintain the security of the Service
• To improve the Service, analyze usage patterns, diagnose technical problems, and develop new features
• To comply with legal obligations, respond to lawful requests from public authorities, and enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 With Event Operators

When you purchase tickets through Zentix, the event operator (the venue or entertainment company hosting the event) receives your name, email address, phone number, and order details. The event operator is the controller of this data for the purpose of managing the event, communicating with attendees, and operating their business. Their use of your information is governed by their own privacy policy.

3.2 With Service Providers

We share information with third-party service providers who perform functions on our behalf, including:

• Stripe for payment processing
• Sinch for transactional SMS delivery (order confirmations, ticket delivery)
• Mailgun for transactional email delivery (order confirmations, ticket delivery)
• Google Cloud Platform for hosting, data storage, and infrastructure
• ClickHouse for analytics processing
• Cloudflare for content delivery, edge proxy, DNS, and bot mitigation; Cloudflare's edge network sees Service traffic in transit as it routes requests between you and our origin
• WorkOS for identity and authentication, including operator and staff sign-in for our admin and scanner applications
• Vanta for security and compliance posture monitoring, including SOC 2 continuous controls monitoring

These providers are contractually required to use your information only to perform services on our behalf and to protect your information in a manner consistent with this Privacy Policy.

3.3 For Legal Reasons

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Zentix, our users, or the public.

3.4 In a Business Transfer

If Zentix is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you of any such change by posting a notice on our website.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to complete transactions, provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Order and ticket records are retained for a minimum of three years after the event date to support chargeback resolution, tax reporting, and legal compliance.

5. Data Security

We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption of data in transit using TLS/SSL
• Payment processing handled entirely by Stripe, a PCI DSS Level 1 certified provider
• Application-level access controls with role-based permissions managed through WorkOS
• Infrastructure hosted on Google Cloud Platform with enterprise-grade security controls
• Regular security reviews and monitoring

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Correction

You may access and update the personal information associated with your orders by using our self-service order management tools or by contacting us at privacy@zentix.com.

6.2 Deletion

You may request deletion of your personal information by contacting us at privacy@zentix.com. We will honor your request unless we are required to retain the information for legal, financial, or security purposes (for example, chargeback resolution or tax compliance).

6.3 Opt-Out of Marketing

If you receive promotional communications from an event operator, those communications are managed by the event operator, not by Zentix. Contact the event operator directly to unsubscribe from their marketing. Transactional messages from Zentix related to your purchases (such as order confirmations and ticket delivery) are not marketing and cannot be opted out of.

6.4 Cookies

Most web browsers allow you to control cookies through their settings. You may disable or delete cookies, but doing so may affect the functionality of the Service, including your ability to maintain a cart and complete purchases.

6.5 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@zentix.com.

7. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe we have collected information from a child under 13, please contact us at privacy@zentix.com.

8. Third-Party Links

The Service may contain links to third-party websites or services, including event operator websites, social media platforms, and advertising partners. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will provide notice through the Service or by other means. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Zentix, LLC
Email: privacy@zentix.com
Website: https://zentix.com