Privacy Policy

This Privacy Policy applies to the BlackSeat website, mobile application, organizer dashboard, ticketing marketplace, and any related services, software, features, communications, and tools that link to or reference this Privacy Policy (collectively, the “Services”). BlackSeat has its principal place of business in Houston, Texas (“BlackSeat,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, retain, and otherwise process personal information when you access or use the Services, create an account, purchase or receive a ticket, create or manage an event, communicate with us, use an AI-assisted feature, or otherwise interact with BlackSeat.

By using the Services or providing information to us, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will request consent separately and will not rely solely on your use of the Services as consent.

We may collect personal information directly from you, automatically when you use the Services, from event organizers and venues, from service providers and business partners, and from other lawful sources.

Information You Provide Directly

• Account and contact information, including your name, email address, telephone number, mailing address, username, profile information, password or authentication credentials, and communication preferences.
• Ticket and transaction information, including event name, venue, event date and time, ticket type, quantity, section, row, seat number, purchase price, fees, order number, transaction date and time, refund status, transfer information, and check-in or scan status.
• Organizer and business information, including legal or business name, business address, event information, organizer contacts, tax information, payout information, business verification information, and information required for identity, KYC, or KYB verification.
• Payment-related information. Payment card and bank information may be collected directly by Stripe or another payment processor. BlackSeat may receive payment tokens, limited card details, payment status, payout information, transaction identifiers, and fraud or risk signals.
• Event registration information, including responses to registration questions, accessibility requests voluntarily provided for an event, and other information requested by an organizer at registration or checkout.
• Content you upload or submit, including event descriptions, photographs, videos, logos, promotional materials, reviews, comments, messages, feedback, and support requests.
• Communications with BlackSeat, including customer-support communications, surveys, complaints, inquiries, and other correspondence.
• AI feature information, including prompts, event details, instructions, edits, feedback, and generated content when you use BlackSeat AI-assisted features.

Information Collected Automatically

• Device and network information, including IP address, device type, browser type, operating system, app version, language, mobile carrier, device identifiers, and similar technical information.
• Usage information, including pages and screens viewed, searches, events viewed or saved, links clicked, referring and exit pages, session duration, feature interactions, dates and times of use, crash reports, diagnostic information, and error logs.
• Approximate location information derived from IP address or device settings and, if BlackSeat offers a feature requiring precise location, precise location only with any permission or consent required by applicable law and device settings.
• Cookie, pixel, SDK, local-storage, advertising-identifier, and similar technology information used to authenticate users, remember preferences, maintain security, analyze performance, measure engagement, and, where permitted, support advertising and personalization.

Information From Other Sources

We may receive information from event organizers, venues, payment processors, identity-verification providers, fraud-prevention providers, analytics providers, marketing and attribution providers, social or authentication services, affiliates, business partners, publicly available sources, and other parties where permitted by law.

We and our service providers may use cookies, software development kits (“SDKs”), pixels, web beacons, local storage, server logs, device identifiers, and similar technologies. These technologies may recognize a browser or device, maintain sessions, remember preferences, support ticketing functionality, prevent fraud, measure performance, understand how users interact with the Services, and personalize content.

Where required by applicable law, BlackSeat will obtain consent before using non-essential tracking technologies and will provide mechanisms to manage applicable choices. Disabling certain technologies may affect the availability or operation of some features.

If BlackSeat uses third-party analytics or advertising services, information collected through those technologies may be processed by those providers under their own terms and privacy notices. BlackSeat will maintain disclosures and privacy controls required for the technologies actually deployed in the Services.

• Create, authenticate, administer, and secure user and organizer accounts.
• Process ticket purchases, registrations, transfers, refunds, cancellations, payouts, and other transactions.
• Generate, deliver, validate, and scan tickets and maintain transaction and attendance records.
• Enable organizers to create, publish, promote, manage, and operate events.
• Provide customer service, respond to inquiries, resolve disputes, and communicate about accounts, purchases, event changes, refunds, security, and other service matters.
• Personalize event discovery, search results, recommendations, saved events, notifications, and other content.
• Provide and improve AI-assisted features.
• Verify identity and business information and perform KYC, KYB, payment-risk, sanctions, fraud, and security reviews.
• Detect, investigate, prevent, and respond to fraud, account takeover, abuse, chargebacks, unlawful activity, security incidents, and violations of our Terms and Conditions.
• Operate, maintain, troubleshoot, test, analyze, improve, and develop the Services and new features.
• Perform analytics, research, measurement, attribution, auditing, and reporting.
• Send marketing and promotional communications where permitted by law and manage marketing preferences.
• Provide or measure personalized or targeted advertising where permitted by law and subject to applicable consent and opt-out rights.
• Comply with legal, tax, accounting, regulatory, law-enforcement, and contractual requirements.
• Establish, exercise, or defend legal claims and protect the rights, property, safety, and security of BlackSeat, our users, organizers, venues, service providers, and the public.
• Create and use aggregated or de-identified information for lawful business purposes, including analytics, research, product development, and reporting.

We may aggregate information or take reasonable measures to de-identify information so that it cannot reasonably be linked to an identified or identifiable individual. We may use and disclose aggregated or de-identified information for lawful purposes. Where applicable law requires us to maintain information in de-identified form, we will not attempt to re-identify it except as permitted by law to test or validate our de-identification processes.

We may disclose personal information in the following circumstances:

• Event organizers and venues. We may provide information reasonably necessary to administer an event, fulfill a ticket, verify admission, communicate event changes, provide support, or satisfy information disclosed to you at registration or checkout.
• Payment and financial-service providers. We may disclose information to Stripe and other payment, banking, payout, identity-verification, and fraud-prevention providers.
• Service providers and processors. We may disclose information to companies that provide hosting, cloud infrastructure, communications, customer support, analytics, security, fraud prevention, identity verification, AI services, marketing technology, data processing, and professional services on our behalf.
• Affiliates. We may disclose information to current or future affiliated entities for purposes consistent with this Privacy Policy and applicable law.
• Legal and safety disclosures. We may disclose information when we reasonably believe disclosure is required or permitted by law, legal process, court order, regulatory request, or is reasonably necessary to investigate fraud, enforce agreements, protect rights or safety, or prevent security threats or unlawful conduct.
• Business transactions. Information may be disclosed in connection with an actual or contemplated merger, acquisition, financing, reorganization, bankruptcy, sale of assets, investment, or similar corporate transaction, subject to applicable law.
• With your direction or consent. We may disclose information when you direct us to do so or provide valid consent.
• Aggregated or de-identified information. We may disclose information that does not reasonably identify you, subject to applicable law.

When you purchase or register for an event, BlackSeat may provide the organizer with information necessary to administer the event, including your name, contact information, order and ticket information, attendance or check-in status, and responses to event registration questions.

An organizer may independently determine how it uses information it receives. In those circumstances, the organizer may be independently responsible for its privacy practices and legal obligations. BlackSeat does not control an organizer’s independent use of personal information outside the BlackSeat Services. Organizers are required to use personal information lawfully and in accordance with applicable agreements and disclosures.

BlackSeat may use Stripe, including Stripe Connect, and other payment service providers to process payments, verify organizers, facilitate payouts, prevent fraud, and manage financial risk. Those providers may collect and process personal information under their own privacy policies and legal obligations. BlackSeat may not receive or store complete payment-card information when payment information is submitted directly to the payment processor.

BlackSeat may offer artificial-intelligence-assisted features that help organizers or users draft event titles, descriptions, promotional content, FAQs, summaries, recommendations, support content, or other material. When you use these features, we may process prompts, instructions, event information, relevant account or platform context, generated responses, edits, feedback, and technical information necessary to provide, secure, evaluate, and improve the feature.

We may use third-party AI service providers to process information on our behalf. We will handle personal information submitted through AI features in accordance with this Privacy Policy and applicable law. Users should not submit sensitive, confidential, proprietary, or third-party personal information into an AI feature unless they have the right and an appropriate reason to provide it.

AI-generated output may be inaccurate or incomplete. Users remain responsible for reviewing and approving content before publishing or relying on it.

We may use information about your searches, event views, saved events, purchases, location, preferences, and interactions to personalize the Services and recommend events or content. We may also use personal information to send marketing communications where permitted by law.

If BlackSeat engages in targeted advertising, cross-context behavioral advertising, or activities treated as a “sale,” “sharing,” or targeted advertising under applicable privacy law, BlackSeat will provide notices and opt-out mechanisms required by the law applicable to the individual. We will also honor legally required universal opt-out or preference signals where applicable.

You may unsubscribe from promotional emails using the unsubscribe link in the message and may manage available push-notification or marketing settings through the Services or your device. You may continue to receive transactional or service communications that are necessary for your account, tickets, transactions, security, or event changes.

BlackSeat limits the collection and use of sensitive personal data to purposes reasonably necessary to provide the Services, comply with law, protect security, process transactions, verify identity, provide requested accessibility functionality, or perform another disclosed and lawful purpose. Sensitive personal data may be subject to additional consent, notice, or limitation requirements depending on applicable law.

BlackSeat will obtain consent before processing sensitive personal data when required by the Texas Data Privacy and Security Act or other applicable law. If BlackSeat is treated as a small business under Texas law, BlackSeat will not sell sensitive personal data without the consumer’s prior consent where Texas law requires that consent.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, destruction, loss, misuse, alteration, or disclosure. Safeguards may include access controls, authentication measures, encryption in transit, monitoring, secure development practices, vendor-management measures, and incident-response procedures appropriate to the nature of the information and Services.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of account credentials and should promptly notify BlackSeat of suspected unauthorized account activity.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide the Services, maintain transaction and business records, satisfy tax and accounting obligations, prevent fraud, resolve disputes, enforce agreements, protect legal rights, and comply with applicable law. Retention periods may vary according to the type of information, the nature of the relationship, legal requirements, security needs, and operational requirements.

Information may remain in backups or archives for an additional period consistent with our backup, disaster-recovery, security, and legal-retention practices. When information is no longer required, we may delete, anonymize, or de-identify it in accordance with applicable law.

BlackSeat is based in Houston, Texas, United States. Personal information may be processed in Texas, elsewhere in the United States, or in other countries where BlackSeat, its affiliates, organizers, or service providers operate. Privacy laws in those locations may differ from the laws where you reside. Where applicable law requires a particular safeguard for an international transfer, BlackSeat will use an appropriate transfer mechanism or other lawful safeguard.

The Services are not directed to children under 13, and BlackSeat does not knowingly collect personal information from a child under 13 in a manner prohibited by the Children’s Online Privacy Protection Act (“COPPA”). If we learn that personal information was collected from a child under 13 without legally required parental authorization, we will take appropriate steps to delete or otherwise address the information.

If BlackSeat permits users between 13 and 17 to use attendee-facing features, BlackSeat may apply additional protections required by applicable federal or state law. Organizer, seller, or other accounts that require entry into a binding commercial agreement may be restricted to individuals who have legal capacity to contract.

Depending on where you reside and subject to applicable exceptions, you may have rights concerning your personal information. These may include rights to confirm whether we process your personal information, access it, correct inaccuracies, delete it, obtain a portable copy, opt out of certain targeted advertising, opt out of certain sales of personal information, opt out of certain profiling in furtherance of decisions that produce legal or similarly significant effects, withdraw consent where processing is based on consent, and appeal certain decisions concerning a privacy request.

To exercise a privacy right, contact us at privacy@blackseat.app or use the account and privacy options in the BlackSeat app’s Settings. We may take reasonable steps to authenticate your request. We will respond within the period required by applicable law and may deny or limit a request where an applicable exception permits us to do so. If we deny a request and applicable law provides an appeal right, our response will explain how to appeal.

We will not unlawfully discriminate against you for exercising an applicable privacy right. Where permitted by law, an authorized agent may submit certain requests on your behalf, subject to verification and authorization requirements.

BlackSeat is based in Houston, Texas. To the extent the Texas Data Privacy and Security Act (“TDPSA”), Texas Business & Commerce Code Chapter 541, applies to BlackSeat’s processing of a Texas consumer’s personal data, this section supplements the remainder of this Privacy Policy.

For purposes of the TDPSA, “personal data,” “consumer,” “controller,” “processor,” “sale of personal data,” “targeted advertising,” “sensitive data,” and other defined terms have the meanings provided by Texas law. The categories of personal data we process, the purposes of processing, and the categories of third parties with whom personal data may be shared are described throughout this Privacy Policy.

Subject to applicable exceptions, a Texas consumer may have the right to: confirm whether BlackSeat is processing the consumer’s personal data and access that data; correct inaccuracies; delete personal data provided by or obtained about the consumer; obtain a portable copy of personal data previously provided to us where required; and opt out of processing for targeted advertising, the sale of personal data, or profiling in furtherance of a decision that produces a legal or similarly significant effect concerning the consumer.

Texas consumers may submit requests through the BlackSeat app’s Settings or by emailing privacy@blackseat.app. If BlackSeat declines a request, the consumer may appeal by following the instructions in our response or by emailing privacy@blackseat.app with the subject line “Privacy Appeal.” If an appeal is denied, we will provide information regarding how the consumer may contact the Texas Attorney General to submit a complaint, as required by applicable law.

Where the TDPSA requires consent for the processing of sensitive data, BlackSeat will obtain consent before processing that sensitive data. Where required, BlackSeat will provide a reasonably accessible and clear privacy notice and will not process personal data for purposes that are neither reasonably necessary to nor compatible with the disclosed purposes without obtaining any consent required by law.

Where required by Texas law, BlackSeat will honor a recognized universal opt-out mechanism or other legally valid preference signal for applicable opt-out rights. BlackSeat will not require a consumer to create a new account solely to exercise a privacy right and will not discriminate against a consumer for exercising rights provided by the TDPSA.

BlackSeat may conduct and document data protection assessments for processing activities for which Texas law requires an assessment, including certain processing involving targeted advertising, sale of personal data, sensitive data, profiling presenting specified risks, or other processing presenting a heightened risk of harm.

Residents of states with comprehensive privacy laws may have additional rights under the law of their state. Depending on the applicable law, those rights may include access, correction, deletion, portability, opt-out rights relating to targeted advertising or the sale or sharing of personal information, rights concerning certain profiling, rights concerning sensitive personal information, appeal rights, and protections against unlawful discrimination.

BlackSeat will apply the privacy rights and disclosures required by the law applicable to the individual. The fact that BlackSeat is headquartered in Texas does not eliminate privacy rights that another state grants to its residents when that state’s law applies to BlackSeat.

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to BlackSeat’s processing of personal information concerning a California resident, this section supplements the remainder of this Privacy Policy. California law may require disclosures and rights that differ from Texas law, regardless of BlackSeat’s Texas headquarters.

Depending on BlackSeat’s actual data practices, categories of personal information collected may include identifiers; customer records information; commercial information; internet or other electronic network activity; geolocation data; audio, electronic, visual, or similar information; professional or employment-related information for organizer/business accounts; inferences; and sensitive personal information such as account credentials or other information that California law classifies as sensitive. BlackSeat collects, uses, retains, and discloses these categories for the business and commercial purposes described in this Privacy Policy.

Subject to applicable exceptions, California residents may have rights to know and access personal information, request deletion, request correction, receive information regarding categories of sources and recipients, opt out of the sale or sharing of personal information, limit certain uses or disclosures of sensitive personal information where the statutory right applies, and receive equal service and pricing without unlawful discrimination for exercising CCPA rights.

If BlackSeat sells or shares personal information as those terms are defined by California law, BlackSeat will provide the required “Do Not Sell or Share My Personal Information” or equivalent privacy-choice mechanism and honor applicable opt-out preference signals. BlackSeat will not state that it does not “sell” or “share” personal information unless its actual advertising, analytics, and data-disclosure practices support that statement.

California residents may submit requests through the methods identified in Section 16. We may verify requests as permitted by law and may permit authorized agents to submit requests where required.

If BlackSeat offers the Services to individuals in jurisdictions outside the United States or becomes subject to additional privacy laws, BlackSeat will provide any supplemental notices, legal bases, transfer safeguards, consent mechanisms, supervisory-authority information, or additional rights required by those laws. Where the European Economic Area, United Kingdom, or similar laws apply, rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with an appropriate supervisory authority.

We may use automated tools and manual review to detect fraud, security threats, payment risk, account takeover, suspicious transactions, prohibited conduct, or other abuse. Automated systems may contribute to decisions to review, delay, restrict, or block a transaction or account. Where applicable law grants rights concerning profiling or solely automated decisions that produce legal or similarly significant effects, BlackSeat will provide the notices and mechanisms required by that law.

You may request deletion of your BlackSeat account through the Delete Account option in the BlackSeat app’s Settings, at https://blackseat.app/account-deletion, or by contacting privacy@blackseat.app. Account deletion does not necessarily require immediate deletion of every record. We may retain information where reasonably necessary or legally permitted for completed transactions, ticket records, taxes, accounting, fraud prevention, chargebacks, security, disputes, organizer obligations, legal compliance, or enforcement of agreements.

The Services may contain links to or integrations with third-party websites, applications, event pages, social networks, maps, payment services, or other services that BlackSeat does not control. This Privacy Policy does not govern the independent privacy practices of those third parties. We encourage you to review their privacy notices before providing information directly to them.

If BlackSeat or its assets are involved in an actual or contemplated merger, acquisition, financing, investment, reorganization, bankruptcy, sale, transfer, or similar transaction, personal information may be disclosed during due diligence and may be transferred as part of the transaction, subject to applicable law and appropriate confidentiality or data-protection obligations.

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, data practices, legal obligations, or business operations. We will update the “Last Updated” date when changes are made and will provide additional notice when required by law or when changes are material. Where applicable law requires consent for a new use of previously collected personal information, we will obtain that consent before the new use.

Privacy requests and appeals may be submitted through the contact methods identified above or through any privacy-request mechanism made available in the Services.