Privacy Policy

RIATICKET provides technology that allows customers to discover events, purchase or receive tickets, manage bookings, and present tickets for admission. We also provide sellers, venues, attractions, event organizers, and authorized staff with tools to create events, sell tickets, manage inventory, operate box-office sales, communicate with purchasers, and receive payouts.

Account and contact information

Name, email address, telephone number, country code, login credentials, account identifiers, mailing or billing address, profile details, and communication preferences.

Booking, ticket, and attendance information

Event, venue, date and time, ticket type, quantity, seat or section, order and ticket identifiers, QR or barcode information, attendee name, ticket status, admission or scan status, refund status, and customer service history.

Seller, partner, and authorized-user information

Business name, contact persons, ownership or representative details, venue and event information, account permissions, operational settings, payout destination details, tax-related information, support records, and information needed for onboarding, verification, fraud prevention, and compliance.

Transaction information

Purchase amount, fees, taxes, discounts, currency, payment method type, payment status, processor transaction identifiers, chargebacks, refunds, payout records, and reconciliation data.

Device, usage, and technical information

IP address, device and browser type, operating system, language, approximate location derived from IP, referring pages, pages viewed, clicks, session activity, timestamps, diagnostics, security logs, cookie identifiers, and similar online identifiers.

Support and communications

Messages, emails, call notes, attachments, survey responses, complaints, and other information submitted when contacting RIATICKET or a seller through the platform.

• Directly from customers, attendees, sellers, partners, and staff.
• From a purchaser who provides information for another attendee.
• From sellers, venues, event organizers, and their authorized users.
• Automatically from browsers, devices, cookies, logs, and platform activity.
• From payment processors, identity-verification providers, fraud-prevention providers, and financial institutions.
• From service providers that support hosting, communications, analytics, customer support, and platform security.
• From public or commercially available sources where permitted by law.

A purchaser who submits another person's information should have authority to provide it and should direct that person to this policy and any applicable seller privacy notice.

• Create and administer customer, seller, partner, and staff accounts.
• Process orders, issue tickets, support ticket transfers or downloads, and validate admission.
• Calculate prices, fees, taxes, refunds, settlements, and seller payouts.
• Communicate confirmations, ticket delivery, event changes, cancellations, refunds, and service notices.
• Provide customer service and resolve order, payment, ticket, seller, and venue issues.
• Operate seller dashboards, event publishing, inventory, reporting, box-office, and access-control functions.
• Detect, investigate, and prevent fraud, abuse, chargebacks, account takeover, prohibited activity, and security incidents.
• Verify identities, businesses, representatives, and payout eligibility where appropriate.
• Maintain, troubleshoot, personalize, measure, and improve the platform.
• Comply with tax, accounting, financial, legal, regulatory, and law-enforcement obligations.
• Establish, exercise, or defend legal claims and enforce platform terms.
• Send marketing communications where permitted and according to user preferences.

Where required by applicable law, RIATICKET relies on one or more lawful grounds such as performing a contract, complying with a legal obligation, consent, protecting vital interests, or legitimate business interests that are not overridden by individual rights.

When a customer purchases a ticket, RIATICKET may provide necessary purchaser, attendee, order, ticket, and contact information to the applicable seller, event organizer, venue, or attraction. They may use this information to fulfill the booking, admit attendees, communicate operational changes, manage safety, provide support, issue refunds, prevent misuse, and comply with law.

Event-specific requirements may include attendee names, ages, identification type or number, accessibility information voluntarily provided for accommodations, waiver status, or other details reasonably necessary for the event. The checkout process should identify required fields.

Sellers should not use customer or attendee information obtained through RIATICKET for unrelated purposes unless they have an independent lawful basis and provide any required notice or choice.

RIATICKET may process seller and partner information to review applications, create and secure accounts, verify authorized representatives, publish events, configure venues and tickets, provide sales and attendance reports, calculate amounts owed, make payouts, manage disputes, communicate platform changes, and provide operational support.

Seller account administrators may invite staff and assign permissions. The seller is responsible for maintaining appropriate access, removing former personnel, using customer information only for authorized purposes, and complying with applicable privacy and security obligations.

Certain seller onboarding, payout, tax, anti-fraud, or compliance functions may require business registration data, taxpayer information, beneficial ownership or representative details, identity documents, bank-account information, and verification results.

Payment card details are generally collected and processed directly by payment service providers. RIATICKET may receive limited payment-related information such as card brand, last four digits, expiration metadata, processor tokens, payment status, fraud signals, and transaction identifiers. RIATICKET does not intend to store full payment card numbers or card security codes in its application database.

Payment processors, banks, card networks, and fraud-prevention providers may process information under their own terms and privacy notices. Seller payout providers may also collect bank, identity, tax, and verification information required to establish and maintain payout accounts.

Transaction and payout records may be retained to meet accounting, tax, audit, chargeback, anti-fraud, contractual, and legal requirements.

RIATICKET may disclose personal information to the following categories of recipients when reasonably necessary:

• Sellers, event organizers, venues, attractions, and authorized staff associated with a booking.
• Payment processors, payout providers, financial institutions, card networks, and fraud-prevention services.
• Cloud hosting, email, SMS, customer-support, analytics, security, identity-verification, and professional service providers.
• Government authorities, regulators, courts, law enforcement, or other parties when required or permitted by law.
• Advisers, auditors, insurers, lawyers, accountants, and parties involved in claims or disputes.
• A buyer, investor, lender, successor, or adviser in connection with a merger, financing, restructuring, sale, or transfer of all or part of the business.
• Other recipients at the user's direction or with consent.

RIATICKET does not sell personal information for monetary payment. Depending on the technologies used, certain analytics or advertising disclosures could be treated as “sale,” “sharing,” or targeted advertising under some privacy laws. Where legally required, RIATICKET will provide an applicable opt-out method.

RIATICKET and authorized providers may use cookies, pixels, local storage, SDKs, session identifiers, and similar technologies to keep users signed in, remember preferences, maintain carts and checkout sessions, prevent fraud, secure accounts, measure performance, understand usage, and improve the platform.

Where required, non-essential cookies will be used according to consent choices. Browser controls may allow users to block or delete cookies, but disabling essential cookies may prevent login, checkout, or other platform functions from working correctly.

RIATICKET and sellers may send transactional communications necessary to administer accounts and bookings, including verification codes, confirmations, tickets, reminders, venue instructions, event changes, cancellations, security alerts, refund notices, and support responses. These messages are not generally optional while a transaction or account remains active.

Marketing emails or text messages will be sent only where permitted. Recipients may use the unsubscribe link in marketing emails, reply STOP where supported for marketing texts, or update available communication preferences. Opting out of marketing does not stop essential transactional or security communications.

RIATICKET retains personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining accounts, fulfilling bookings, resolving disputes, preventing fraud, enforcing agreements, and satisfying legal, tax, accounting, audit, and regulatory obligations.

Retention periods vary by information type, transaction status, legal requirements, risk, and whether an account or business relationship remains active. Information may be deleted, anonymized, or securely archived when it is no longer required. Backup copies may remain for a limited period before being overwritten or securely deleted.

RIATICKET uses administrative, technical, and physical safeguards designed to protect personal information, which may include access controls, authentication, encryption in transit, logging, monitoring, backups, vulnerability management, employee or contractor access restrictions, and service-provider review.

No system can be guaranteed completely secure. Users should protect account credentials, avoid sharing verification codes, use trusted devices, and promptly report suspected unauthorized activity.

If a security incident affects personal information, RIATICKET will investigate and provide notices to affected individuals, sellers, regulators, or others when required by applicable law.

Depending on location and applicable law, individuals may have rights to:

• Request access to or confirmation of personal information held about them.
• Request correction of inaccurate personal information.
• Request deletion of certain personal information.
• Receive a portable copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of certain sales, sharing, targeted advertising, or profiling where applicable.
• Appeal a denied privacy request where applicable.
• Not receive unlawful discriminatory treatment for exercising privacy rights.

RIATICKET may need to verify identity and authority before completing a request. Some requests may be limited or denied where information must be retained to complete a transaction, protect security, prevent fraud, comply with law, exercise legal rights, or satisfy another permitted exception.

For information controlled independently by a seller or event organizer, RIATICKET may direct the requester to that organization or assist with routing the request as appropriate.

RIATICKET is not designed for children to create accounts or make purchases without the involvement of a parent or legal guardian. A parent, guardian, school, group organizer, or purchaser may provide limited attendee information for a child's ticket when necessary for an event.

RIATICKET does not knowingly collect personal information online directly from children under 13 in the United States without legally required parental consent. Anyone who believes a child submitted information improperly should contact RIATICKET so the matter can be reviewed.

RIATICKET, sellers, and service providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the individual's home jurisdiction.

Where required, RIATICKET will use recognized safeguards for cross-border transfers, such as contractual protections, adequacy decisions, consent, or other lawful transfer mechanisms.

RIATICKET may update this Privacy Policy to reflect changes in services, technology, legal requirements, or business practices. The revised policy will be posted with a new “Last Updated” date. Additional notice may be provided when required or when changes are material.

Privacy questions or requests may be submitted through the RIATICKET contact page or by emailing help@riaticket.com. Please include enough information to identify the relevant account, order, seller account, or request. Do not send passwords, full payment card numbers, card security codes, or other unnecessary sensitive information by email.