PRIVACY POLICY
Ticket Pouch LLC
Effective Date: February 17, 2026
Last Updated: March 11, 2026
1. Introduction
Welcome to ticketpouch.com LLC ("we," "our," "us," or "TicketPouch"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe, secure, and responsible manner. This Privacy Policy explains how ticketpouch.com LLC, a Delaware limited liability company, collects, uses, discloses, and protects information when you use our mobile application, website at https://www.ticketpouch.com/, and related services (collectively, the "Service").
By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our Service.
This Privacy Policy is designed to comply with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), and the European Union's General Data Protection Regulation (GDPR) where applicable.
2. Information We Collect
We collect several types of information from and about users of our Service. The categories of personal information we collect depend on how you interact with us and the features you use.
2.1. Information You Provide Directly
Account Information:
• Name, email address, phone number, date of birth, username, and password
• Profile information including profile picture, event preferences, and saved venues
• Mailing address and billing address
Payment Information:
• Billing name and billing address for app subscription payments; payment card details are tokenized and processed by our third-party payment processor (e.g., Stripe) and we do not receive or store full card numbers, expiration dates, or CVV codes
• App subscription payment history and renewal records. TicketPouch does not collect or process payment information related to ticket purchases; all ticket transactions are handled directly by the applicable third-party ticketing platform (e.g., Ticketmaster, AXS)
Ticket and Event Information:
• Tickets imported, events attended, seating preferences
• Ticket transfer information including recipient contact details and transfer history
• Event check-in data and attendance records
Communications:
• Messages you send us through customer support, feedback, surveys, or other communications
2.2. Email Account Access and Scanning
IMPORTANT: TicketPouch's core functionality involves scanning your connected email account(s) to automatically identify and organize your event tickets. This section explains how we access and use your email data.
When you connect your email account to TicketPouch, you authorize us to:
Access and Scan Your Email:
• Access your email account through secure authentication (OAuth) provided by your email provider
• Scan incoming and existing emails to identify ticket-related messages from ticketing platforms, venues, and event organizers
• Process email subject lines, sender information, and email content to identify ticket confirmations
Extract Ticket Information:
• Event name, date, time, and venue location
• Seat, section, and row information
• Ticket barcodes, QR codes, and confirmation numbers
• Purchase confirmation details and order numbers
• Sender information (ticketing platform or venue)
Store Extracted Data:
• Store extracted ticket information securely on Amazon Web Services (AWS) infrastructure
• Organize and display your tickets within the TicketPouch application
• Enable features such as ticket reminders, sharing, and event coordination
What We Do NOT Do With Your Email:
• We do NOT read or store the full content of non-ticket-related emails
• We do NOT access your email contacts or address book
• We do NOT send emails from your account
• We do NOT share your email login credentials with any third parties
• We do NOT sell information obtained from scanning your emails
• We do NOT use email content for advertising purposes unrelated to our Service
Email Provider Authorization:
When you connect your email account, you will be redirected to your email provider (such as Google or Microsoft) to authorize TicketPouch's access using industry-standard OAuth authentication. Your email password is never shared with or stored by TicketPouch. You can review and revoke this access at any time through your email provider's security settings or through TicketPouch's account settings.
Revoking Email Access:
You may disconnect your email account at any time through your TicketPouch account settings. Disconnecting your email will stop future email scanning but will not automatically delete ticket information previously imported to your account. You may separately request deletion of your data as described in Section 15.
2.3. Information Automatically Collected
Device Information:
• Device type, operating system, device identifiers (such as IDFA or Android ID)
• Mobile network information, browser type and version
• IP address, MAC address
Location Information:
• Precise geolocation data (GPS coordinates) when you enable location services
• Approximate location derived from IP address
• Location data collected during event check-in to verify ticket validity
Usage Information:
• Pages or screens viewed, features used, time spent on pages
• Search queries, browsing behavior, event browsing history
• Click data, navigation paths, referral URLs
• Date and time stamps of your activities
Cookies and Similar Technologies:
• Cookies, web beacons, pixel tags, local storage, and similar tracking technologies (see Section 5)
QR Codes and Barcodes:
• Unique QR codes and barcodes associated with your tickets
• Scan data when tickets are scanned at venues
Camera and Photo Information (if you grant permission):
• Photos you upload for your profile
• QR code scanning data when you manually scan tickets
2.4. Information from Third Parties
• Social media information if you connect your social media accounts or sign up through social login
• Information from event venues, promoters, and partners regarding event details and attendance
• Information from our subscription billing processor (e.g., Stripe) regarding subscription payment status and fraud detection. We do not receive payment data from third-party ticketing platforms
• Publicly available information for analytics and fraud prevention
2.5. Sensitive Personal Information
Under certain state privacy laws, some of the information we collect may be considered "sensitive personal information," including:
• Precise geolocation data
• Account login credentials (username and password)
• Subscription billing information (billing name and address; payment card tokenization handled by PCI-DSS compliant processors; we do not retain full card numbers, CVV, or expiration dates; this applies only to app subscription billing and not to ticket purchase transactions, which are processed solely by third-party ticketing platforms)
• Contents of email communications (limited to ticket-related information as described in Section 2.2)
• Biometric information (only if you choose to enable biometric authentication features)
We use sensitive personal information only for the purposes disclosed in this Privacy Policy and as permitted by applicable law. Where required by law, we will obtain your consent before collecting or using sensitive personal information.
3. How We Use Your Information
We use the information we collect for various business and commercial purposes, including:
3.1. Service Provision and Operations
• To create and manage your account§ To scan your connected email account(s) for ticket confirmation emails
• To extract, organize, and display ticket information from your emails
• To provide you with consolidated access to all your event tickets
• To facilitate ticket access, viewing, and event check-ins
• To verify ticket authenticity
• To provide customer support and respond to your inquiries
• To send transactional communications such as confirmations, receipts, and service announcements
3.2. Personalization and Improvement
• To personalize your experience and provide customized event recommendations
• To analyze usage patterns and trends to improve our Service
• To develop new features, products, and services
• To conduct research, analytics, and data analysis
3.3. Marketing and Communications
• To send you newsletters, promotional materials, and marketing communications about events, offers, and updates (you may opt out at any time)
• To serve targeted and behavioral advertisements to you, including through third-party advertising networks and platforms, based on your usage data, device identifiers, and inferred interests (you may opt out as described in the Advertising Partners section)
• To communicate with you about products or services that may interest you§ To administer contests, promotions, surveys, and other interactive features
3.4. Security, Fraud Prevention, and Legal Compliance
• To detect, prevent, and address fraud, security issues, technical problems, and violations of our Terms of Service
• To verify identity and prevent duplicate accounts or unauthorized access
• To comply with legal obligations, including tax reporting and recordkeeping requirements
• To respond to law enforcement requests and legal process
• To protect the rights, property, and safety of TicketPouch, our users, and the public.
3.5. Business Operations
• To enforce our Terms of Service and other agreements
• To manage our business operations and conduct financial reporting and analysis
• To facilitate business transactions such as mergers, acquisitions, or asset sales
4. How We Share Your Information
We do not sell your personal information to third parties! We may sell or share certain personal information with advertising partners and other third parties as described below. We do not sell or share information obtained from scanning your emails. We may share your information in the following circumstances:
4.1. Service Providers and Business Partners
We share information with third-party service providers who perform services on our behalf, including:
• Payment processors (e.g., Stripe) to process app subscription billing securely. TicketPouch does not use payment processors for ticket purchase transactions, which are handled exclusively by third-party ticketing platforms
• Cloud hosting providers (Amazon Web Services) to store data securely
• Analytics providers (e.g., Google Analytics, Mixpanel) to analyze usage and improve our Service
• Email and communication platforms (e.g., SendGrid, Mailchimp) to send emails and notifications
• Customer support platforms to provide support services
• Fraud prevention and security services to protect against unauthorized activityThese service providers have access to your information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.
4.2. Event Venues and Promoters
We may share ticket and attendance information with event venues, promoters, and organizers to facilitate event access, verify tickets, and comply with venue requirements. This may include your name, contact information, ticket details, and attendance records.
4.3. Legal Requirements and Protection
We may disclose your information if required to do so by law or in response to court orders, subpoenas, or other legal processes; law enforcement requests or government investigations; requests to protect the rights, property, or safety of TicketPouch, our users, or others; or investigations of potential fraud, security breaches, or violations of our Terms of Service.
4.4. Business Transfers
If TicketPouch is involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
4.5. With Your Consent
We may share your information with third parties when you give us explicit consent to do so, such as when you choose to connect your account to social media platforms or participate in third-party integrations.
4.6. Advertising Partners
We may sell or share certain personal information—such as device identifiers, usage data, and inferred interests—with advertising partners, data brokers, and other third parties for the purposes of targeted advertising, cross-context behavioral advertising, and measuring ad campaign effectiveness. This may constitute a “sale” or “sharing” of personal information under applicable state privacy laws. We do not sell or share information obtained from scanning your emails for advertising purposes.You have the right to opt out of the sale or sharing of your personal information for targeted advertising. To exercise this right, please visit your account settings or contact us at privacy@ticketpouch.com with “Do Not Sell or Share My Personal Information” in the subject line.
4.7. Aggregate and De-Identified Information
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.
5. Cookies and Tracking Technologies
We and our third-party partners use cookies, web beacons, pixel tags, local storage, and similar technologies to collect information about your use of our Service.
5.1. Types of Cookies We Use
Essential Cookies: Required for the Service to function properly, including authentication, security, and basic functionality.Analytics and Performance Cookies: Help us understand how users interact with our Service, which pages are visited most often, and how we can improve performance.Functional Cookies: Remember your preferences and settings, such as language preference and location.Advertising and Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These cookies may be set by us or our advertising partners and may be used to build a profile of your interests and show you relevant ads on other sites. They work by uniquely identifying your browser and device. We and our advertising partners use these cookies for cross-context behavioral advertising and targeted advertising purposes.
5.2. How to Control Cookies
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect the functionality of our Service. You can set your browser to refuse all or some cookies or to alert you when cookies are being sent. You can adjust settings on your mobile device to limit ad tracking. You can opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at www.aboutads.info or the Network Advertising Initiative (NAI) at www.networkadvertising.org.
5.3. Do Not Track Signals
Some browsers have a "Do Not Track" feature that lets you tell websites you do not want to have your online activities tracked. At this time, we do not respond to browser "Do Not Track" signals because there is no industry standard for how to respond to them. We will continue to monitor developments around Do Not Track signals.
6. Your Privacy Rights
Depending on your location and applicable law, you may have certain rights regarding your personal information.
6.1. General Privacy Rights
You may have the following rights:
• Right to Access: Request access to the personal information we hold about you
• Right to Correction: Request that we correct inaccurate or incomplete personal information
• Right to Deletion: Request that we delete your personal information, subject to certain exceptions
• Right to Restriction: Request that we limit the processing of your personal information
• Right to Data Portability: Request a copy of your personal information in a structured, machine-readable format
• Right to Object: Object to certain processing of your personal information
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
6.2. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.Right to Know: You have the right to know what personal information we collect, use, disclose, and sell (if applicable). You may request a copy of the specific pieces of personal information we have collected about you in the past 12 months.Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.Right to Correct: You have the right to request correction of inaccurate personal information.Right to Opt-Out of Sale or Sharing: We sell and share certain personal information, including device identifiers, usage data, and inferred interests, with advertising partners for targeted and behavioral advertising. You have the right to opt out of such sale or sharing at any time by visiting your account settings or contacting us at privacy@ticketpouch.com with “Do Not Sell or Share My Personal Information” in the subject line. We do not sell or share information obtained from scanning your emails.Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary to provide our Service.
6.3. Virginia, Colorado, Connecticut, Utah, and Other State Privacy Rights
If you are a resident of Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, Delaware, Iowa, Indiana, Tennessee, Nebraska, New Hampshire, New Jersey, Kentucky, Maryland, Minnesota, or Rhode Island, you may have additional privacy rights under your state's comprehensive privacy law, including rights to confirm whether we process your personal data and access your personal data; correct inaccuracies; delete personal data; obtain a copy in a portable format; opt out of targeted advertising, sale, or profiling; opt in to processing of sensitive data; and appeal our decisions.
6.4. European Economic Area (EEA) Rights (GDPR)
If you are a resident of the European Economic Area (EEA), the General Data Protection Regulation (GDPR) provides you with rights to be informed, access, rectify, erase, restrict processing, data portability, object, and rights related to automated decision-making. You also have the right to lodge a complaint with your local supervisory authority.Legal Basis for Processing: We process your personal data under the following legal bases: Contract performance (to provide our Service); Consent (where you have given explicit consent); Legitimate interests (for business operations, fraud prevention, and service improvement); and Legal obligation (to comply with applicable laws).
6.5. How to Exercise Your Privacy Rights
To exercise any of your privacy rights, please contact us using the methods provided in Section 18 (Contact Us). When you submit a request, we will verify your identity, respond within the timeframe required by applicable law (typically 45 days), provide the requested information or action or explain why we cannot, and not charge a fee unless the request is manifestly unfounded or excessive.Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require verification of your identity and the agent's authority.Appeal Process: If we deny your privacy request, you have the right to appeal. Contact us at privacy@ticketpouch.com with "Privacy Rights Appeal" in the subject line. We will respond within the timeframe required by applicable law (typically 60 days).
7. Data Security
The security of your personal information is important to us. We implement appropriate technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, disclosure, alteration, and destruction.
Our security measures include:
• Encryption: We encrypt data in transit using TLS/SSL protocols and encrypt sensitive data at rest
• Access Controls: We limit access to personal information to authorized employees and service providers
• Authentication: We use secure authentication mechanisms including OAuth for email connections§ Security Audits: We conduct regular security assessments and vulnerability testing
• Employee Training: We train our employees on data protection and security best practices
• Incident Response: We maintain incident response procedures to address potential security breaches
• Payment Security: Payment information is processed by PCI-DSS compliant payment processors
• AWS Infrastructure: Your data is stored on Amazon Web Services with enterprise-grade securityWhile we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.
8. Data Breach Notification
In the event of a data breach that compromises the security of your personal information, we will notify you and any applicable regulatory authorities as required by law. Notification will be provided without unreasonable delay and, where feasible, within 72 hours of becoming aware of the breach.Our notification will include, where applicable: a description of the nature of the breach and the types of information affected; the approximate number of individuals affected; the likely consequences of the breach; measures we have taken or will take to address the breach; contact information for further inquiries; and steps you can take to protect yourself.
9. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, provide our Service, comply with legal obligations, resolve disputes, and enforce our agreements.
Retention periods vary depending on the type of information:
• Account Information: Retained while your account is active and for a reasonable period thereafter
• Ticket Information: Retained while your account is active; you may delete individual tickets at any time
• Email Scanning Data: Ticket information extracted from emails is retained until you request deletion
• Transaction Records: Retained for at least 7 years to comply with tax and financial regulations
• Subscription Billing Information: Tokenized by PCI-DSS compliant processors; we retain billing name, address, and subscription records but do not retain full card numbers, CVV, or expiration dates. Ticket purchase payment data is never collected by TicketPouch
• Communications: Retained for the duration necessary to respond to inquiries and provide supportAfter the applicable retention period expires, we will delete, anonymize, or aggregate your personal information in accordance with applicable law.
10. International Data Transfers
TicketPouch is based in the United States. If you access our Service from outside the United States, please be aware that your information may be transferred to, processed, and stored in the United States. These countries may have data protection laws that differ from those in your country of residence.When we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to other countries, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and other legally approved data transfer mechanisms.By using our Service, you consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy.
11. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we discover that we have inadvertently collected personal information from a person under 18, we will delete that information as quickly as possible.If you are a parent or guardian and believe that someone under 18 has provided us with personal information, please contact us immediately at privacy@ticketpouch.com so we can take appropriate action.
12. Automated Decision-Making and Profiling
We may use automated decision-making technologies, including profiling, for fraud detection, personalization, and risk assessment. You have the right to request human review of automated decisions that have legal or similarly significant effects on you. To request human review, please contact us at privacy@ticketpouch.com.
13. Third-Party Links and Services
Our Service may contain links to third-party websites, applications, or services that are not owned or controlled by TicketPouch. We are not responsible for the privacy practices or content of these third parties.When you click on a third-party link, you are subject to the privacy policies and terms of service of those third parties. We encourage you to review the privacy policies of any third-party websites or services you visit.Third-party services may include social media platforms, event venue websites and ticketing partners, payment processors, and analytics providers. TicketPouch is not liable for any data collection, use, or sharing by third parties.
14. Marketing Communications and Opt-Out
We may send you marketing communications, newsletters, and promotional materials. You have the right to opt out of receiving marketing communications at any time.To opt out of marketing communications, you may click the "unsubscribe" link at the bottom of any marketing email; adjust your communication preferences in your account settings; contact us at hello@ticketpouch.com with "Unsubscribe" in the subject line; or adjust push notification settings on your mobile device.Please note that even if you opt out of marketing communications, we may still send you transactional and service-related communications, such as order confirmations, account notifications, and important updates about our Service.
15. Account Deletion
You may request deletion of your account and associated personal information at any time by logging into your account and selecting the "Delete Account" option in your account settings, or by contacting us at privacy@ticketpouch.com with "Account Deletion Request" in the subject line.Upon receiving your deletion request, we will delete or anonymize your personal information within 30-60 days, except as required for legal compliance, fraud prevention, dispute resolution, or completing ongoing service obligations.Please note that deleting your account will result in the loss of access to imported tickets and event history. We recommend downloading any information you wish to keep before requesting account deletion. Deleting your account will also revoke TicketPouch's access to your connected email account(s).
16. Business Transfers
If TicketPouch is involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy and take reasonable steps to ensure any successor entity honors the commitments in this Privacy Policy.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will post the updated Privacy Policy on this page, update the "Last Updated" date, notify you by email or through a notice on our Service if the changes are material, and obtain your consent if required by applicable law.We encourage you to review this Privacy Policy periodically. Your continued use of our Service after any changes constitutes your acceptance of the updated policy. If you do not agree with any changes, you may discontinue use of our Service and request deletion of your account.
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Ticketpouch LLC
825 Van Ness Avenue 601San Francisco, CA 94109
General Inquiries: hello@ticketpouch.com
Privacy Requests: privacy@ticketpouch.com
Legal Matters: legal@ticketpouch.com
Customer Support: support@ticketpouch.com
Website: https://www.ticketpouch.com
We will respond to your inquiry within a reasonable timeframe, typically within 30 days.For privacy requests related to exercising your rights under applicable privacy laws (CCPA, GDPR, state privacy laws), please include "Privacy Rights Request" in the subject line of your email to ensure prompt processing.
19. Supervisory Authority
If you are located in the European Economic Area or the United Kingdom and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.If you are a California resident, you may contact the California Attorney General's office to report any complaints regarding our privacy practices or to learn more about your rights under the CCPA.
This Privacy Policy was last updated on March 11, 2026. This policy has been drafted to comply with applicable federal and state privacy laws. We recommend having this policy reviewed by a licensed attorney in your jurisdiction to ensure full compliance with all applicable laws and regulations.