Privacy Policy

Effective Date: April 2026 Last Updated: April 2026

This Privacy Policy ("Policy") describes how Determinant LLC ("Company," "we," "us," or "our") collects, uses, and protects information when you use the Promise Tickets platform ("Platform") at promisetickets.com. By using the Platform, you agree to the practices described in this Policy.

1. Who We Are

Promise Tickets is operated by Determinant LLC. If you have questions about this Policy or your data, contact us at privacy@determinant.works.

2. Information We Collect

2.1 Information You Provide

• Patron information. When you make a ticket promise, we collect your email address and the number of tickets you are committing to. Your payment card details are collected and stored by Stripe, our third-party payment processor — we do not store your card number, expiration date, or CVV on our servers.
• Producer information. When you create an account to produce events, we collect your email address and the information you provide about your events (title, description, venue details, contact email). We also store a reference to your Stripe Connect account so we can route payments to you.

2.2 Information Collected Automatically

• Server logs. Our servers record your IP address, browser type, and the pages you visit. This data is used to operate the Platform, diagnose issues, and enforce rate limits.
• Authentication data. We use session cookies to keep you signed in. These are functional cookies required for the Platform to work — they are not used for tracking or advertising.

3. How We Use Your Information

We use the information we collect to:

• Process promises and payments. Create and manage ticket promises, save payment methods via Stripe, and charge cards when a campaign converts.
• Send transactional emails. Notify you about promise confirmations, ticket confirmations, charge failures, cancellations, and campaign expirations. Emails are sent through Resend, our email delivery provider.
• Operate and improve the Platform. Monitor performance, enforce security measures (rate limiting, CSRF protection), and fix bugs.
• Prevent fraud and abuse. Detect and prevent unauthorized transactions, duplicate promises, and other misuse.

We do not use your information to send marketing emails, build advertising profiles, or target you with ads.

4. Information Shared With Third Parties

We share your information only as necessary to operate the Platform. We never sell your personal information to advertisers or data brokers.

| Service Provider | What We Share | Why | |---|---|---| | Stripe | Email, payment method, transaction amounts | Payment processing and Stripe Connect payouts | | Resend | Email address | Sending transactional emails | | Supabase | All Platform data | Database hosting and authentication |

4.1 Event Producers

When you make a promise for a campaign, the event producer receives your email address, ticket quantity, and purchase amount. Producers may use this information only for communication related to the event you committed to. Producers are prohibited from using your information for unrelated marketing or sharing it with other parties. See our Campaign Terms for producer obligations regarding patron data.

4.2 Future Service Providers

We may integrate additional service providers in the future, such as error-tracking tools or ticketing platforms, to improve the Platform. If we do, those providers will receive only the minimum data necessary to perform their function. We will update this Policy accordingly.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Cookies and Similar Technologies

The Platform uses functional cookies only — specifically, authentication session cookies managed by Supabase. These cookies are required for you to sign in and use the Platform. We do not use tracking cookies or advertising pixels.

We may add analytics cookies in the future to understand how people use the Platform. If we do, we will update this Policy and provide notice before enabling them. We do not plan to use tracking cookies for advertising purposes.

6. Data Retention

• Active data. We retain your information for as long as your account or promises remain active on the Platform.
• Inactive patron data. If you have no active promises and have not interacted with the Platform for 24 months, we will delete your personal information from our systems.
• Producer data. We retain producer account data for as long as the account exists, plus up to 24 months after account deletion for dispute resolution and tax record purposes.
• Stripe data. Stripe retains payment and transaction data according to its own privacy policy. We cannot delete data held by Stripe on your behalf — you may contact Stripe directly regarding data they hold.
• Server logs. Log data is retained for a limited period and is not associated with your account after that period.

7. Data Security

We take reasonable measures to protect your information:

• All data transmitted between your browser and the Platform is encrypted via TLS (HTTPS).
• Payment card details are handled entirely by Stripe and never touch our servers.
• Database access is restricted through row-level security policies — producers can only access their own campaigns, and patron data is managed server-side.
• Receipt links are protected by cryptographically signed tokens to prevent unauthorized access.
• API endpoints are protected by rate limiting to prevent abuse.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@determinant.works.

9. Your Choices

• Cancel a promise. You can cancel any active promise before the campaign converts. When you cancel, your saved payment method is detached from Stripe and no charge is made.
• Delete your account. Producers can request account deletion by contacting us. Upon deletion, we will remove your personal information subject to the retention periods described in Section 6.
• Email communications. Transactional emails (promise confirmations, charge notifications) are necessary to operate the Platform and cannot be opted out of while you have active promises.

10. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Your continued use of the Platform after any changes constitutes your acceptance of the updated Policy.

For material changes that significantly affect how we handle your information, we will make reasonable efforts to notify you (for example, by posting a notice on the Platform or sending an email to affected users).

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

Determinant LLC Email: privacy@determinant.works