Who we are
This Privacy Policy explains how Odidor (“Odidor”, “we”, “us”) handles personal information when you use ticketZ, including our website and mobile app (together, the “Services”). ticketZ is a Canadian event ticketing platform for the general public and for event organizers (“vendors”).
For privacy questions or to exercise your rights, contact us at privacy-ticketz@email.odidor.co. This policy is designed to align with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. It is a product template, not legal advice.
Scope
This policy applies to customers who browse and buy tickets, vendors who create and manage events, and staff who scan tickets. It also covers information we process when you visit the site without an account.
Personal information we collect
We collect information you provide, information generated by your use of the Services, and information from service providers who help us operate ticketZ.
- Account: name, email address, password (handled by our authentication provider, Clerk), and Google account details if you sign in with Google.
- Vendor profile: business or organizer name and optional contact phone when you become a vendor.
- Purchases: order details, event and seat or ticket-type selections, ticket records, payment status, and the email and name used at checkout.
- Events and venues: listings, venue addresses, map coordinates, organizer contact shown on event pages, and related media you upload.
- Device and usage: IP address, browser type, and similar technical data collected by our hosts and security tools.
- Local device storage: theme preference, shopping cart, and (for scanners) recent and pending scan history stored on your device.
- Camera: used only if you open the ticket scanner, to read QR codes. We do not use the camera to identify faces.
How we use information
We use personal information to operate ticketZ, including to:
- Create and secure your account, and keep vendor and staff roles in sync.
- Process ticket purchases, generate QR tickets, and show orders in My Tickets.
- Let vendors create events, seating maps, and analytics for their own listings.
- Validate tickets at the door for authorized staff and vendors.
- Show venue locations using Google Maps.
- Communicate about your account, tickets, cancelled events, and service notices.
- Detect fraud, abuse, and technical problems, and to improve the Services.
Service providers and sharing
We do not sell your personal information. We share it with service providers who process it on our instructions, and when the law requires or you ask us to.
- Clerk — authentication, session cookies, and Google sign-in.
- Stripe — payment processing. We do not store full card numbers; Stripe handles card data.
- MongoDB Atlas — application database (accounts, events, orders, tickets, venues).
- Google — Google sign-in and Maps (Places, static/embed maps) when you use those features.
- Hosting (for example Vercel) — serving the website and APIs.
- Vendors — organizer name, email, or phone that a vendor chooses to show on an event page is visible to the public. Vendors can also see order and attendee information for events they organize, as needed to run the event.
Transfers outside Canada
Several of our providers (including Clerk, Stripe, Google, MongoDB Atlas, and typical cloud hosts) may store or process information in the United States or other countries. Those jurisdictions may have different privacy laws than Canada. We use providers that offer contractual and technical safeguards, but you should know that information sent outside Canada can be subject to the laws of the country where it is stored.
Cookies and similar technologies
We use essential cookies for sign-in (Clerk) and local storage for preferences and your cart. Details are in our Cookie Policy at /policy/cookies. We do not currently use third-party advertising cookies.
Email and CASL
We may send you transactional messages (account verification, tickets, refunds, security). If we send commercial electronic messages, we will do so in line with Canada’s Anti-Spam Legislation (CASL), including an unsubscribe option where required.
Retention
We keep account, order, and ticket records for as long as your account is active and as needed for tax, dispute, fraud-prevention, and legal purposes. Scanner history stored in your browser can be cleared by you. When information is no longer needed, we delete or de-identify it in the ordinary course of operations.
Security
We use HTTPS, hashed credentials via Clerk, role-based access, and Stripe for payments. No method of transmission or storage is completely secure. Please use a strong password and keep your devices locked.
Your rights
Subject to PIPEDA and other applicable law, you may request access to, correction of, or deletion of personal information we hold about you. Contact privacy-ticketz@email.odidor.co. We may need to verify your identity and may retain certain records where the law requires (for example completed orders). You may also close your account; tickets already issued for upcoming events remain subject to our Terms and Refunds Policy.
Children
ticketZ is not directed at children under 13. We do not knowingly collect personal information from children under 13. Age restrictions for individual events are set by vendors and shown on the event page.
Changes
We may update this policy from time to time. The “Last updated” date at the top of the page will change. Continued use of the Services after an update means you accept the revised policy. Material changes may also be announced in the product or by email.
Contact
Privacy officer contact: privacy-ticketz@email.odidor.co. If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.