1. Introduction

Welcome to TopCityTickets ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, password (encrypted)
• Payment Information: Processed securely through Stripe (we don't store credit card details)
• Profile Information: Any additional information you provide in your profile

2.2 Event and Ticket Information

• Purchase History: Records of tickets you've purchased
• Event Creation: Information about events you create as a seller
• Transaction Data: Payment amounts, dates, and status

2.3 Automatically Collected Information

• Usage Data: How you interact with our platform
• Device Information: IP address, browser type, operating system
• Cookies: See our Cookie Policy section below

3. How We Use Your Information

3.1 Service Provision

• Process ticket purchases and payments
• Manage your account and provide customer support
• Send transaction confirmations and receipts
• Enable communication between buyers and event organizers

3.2 Business Operations

• Prevent fraud and enhance security
• Improve our platform and user experience
• Analyze usage patterns and trends
• Comply with legal obligations

4. Information Sharing and Disclosure

4.1 We Share Information With:

• Stripe: For payment processing (subject to Stripe's Privacy Policy)
• Event Organizers: Basic purchaser information for their events
• Service Providers: Trusted third parties who assist our operations
• Legal Authorities: When required by law or to protect our rights

4.2 We Do NOT:

• Sell your personal information to third parties
• Share your information for others' marketing without consent
• Store your payment card information (handled by Stripe)

5. Data Security

5.1 Security Measures

• SSL encryption for all data transmission
• Secure authentication through Supabase
• Regular security audits and updates
• Access controls and monitoring

5.2 Payment Security

• All payments processed through Stripe's secure infrastructure
• PCI DSS compliant payment handling
• No storage of sensitive payment information on our servers

6. Your Rights and Choices

6.1 Account Management

• Access: View and download your personal information
• Update: Modify your account information anytime
• Delete: Request deletion of your account and data

6.2 Communication Preferences

• Opt-out: Unsubscribe from marketing emails
• Notifications: Manage email notification settings
• Essential Communications: Some communications are required for service operation

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand usage patterns
• Authentication Cookies: Keep you logged in securely

8. Third-Party Services

8.1 Integrated Services

• Stripe: Payment processing and Connect marketplace
• Supabase: Database and authentication services
• Vercel: Hosting and deployment platform

9. Contact Information

10. California Privacy Rights (CCPA)

California Consumer Rights

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell information)
• Right to non-discrimination for exercising rights