Privacy policy.

This policy explains what data SeatLedger collects, why, and how we handle it. We try to write it in plain English. If something here is unclear, email privacy@seatledger.ai. This policy is part of, and incorporated by reference into, our Terms of Service.

1. What we collect

From you, directly

• Account info: name, email, password (managed by Clerk, never stored in plain text by us), avatar URL, timezone, notification preferences.
• Season data: teams, seasons, events, cost basis, statuses, transactions, sale prices, fees, platform names, sold dates, buyer notes.
• Imported data: CSV files you upload (Ticketmaster Account Manager exports). We parse them and don't retain the raw CSV.
• Co-owner relationships: emails of people you invite, their roles in your seasons, their share allocations.
• Communications: support emails, feedback, bug reports.

Automatically

• Usage analytics via PostHog: pages visited, button clicks, feature interactions. Aggregated and tied to your account ID for product improvement.
• Error monitoring via Sentry: stack traces and request metadata when something breaks. Excludes form contents and PII where possible.
• IP address and user agent at request time, retained in server logs for 30 days for security and debugging.

From third parties

• SeatGeek for market pricing on your events. We send team name and date; we receive listing counts and price ranges.
• Ticketmaster Discovery API for game schedules. Same shape: we send team and date; we receive event metadata.
• Stripe when you subscribe to a paid plan. Stripe handles payment info; we store only your Stripe customer ID and subscription status. We never see or store your full card number.

2. Why we collect it

• To run the Service — track seasons, calculate P&L, generate statements, send notifications you've enabled.
• To keep the Service safe — detect abuse, protect against fraud, comply with legal requests.
• To improve the Service — usage analytics tell us what features matter and what's broken.
• To bill you if you're on a paid plan.
• To contact you with transactional emails (welcome, statements, sale confirmations) and product updates if you opt in.

We may use de-identified or aggregated data — data that cannot reasonably be linked to you or your account — for analytics, benchmarking, and product development without restriction.

Lawful basis (EU/UK users)

Where the EU GDPR or UK GDPR applies, our lawful bases for processing are:

• Contract — to provide the Service you signed up for.
• Legitimate interests — to keep the Service safe, prevent fraud, and improve the product, balanced against your rights.
• Legal obligation — to retain billing and tax records as required by law.
• Consent — for marketing emails and any optional analytics cookies; you can withdraw consent at any time.

3. Where it's stored

Your data is stored in Supabase Postgres (US-based, AWS us-east-1). Authentication is handled by Clerk. Email is sent via Resend. Analytics is via PostHog. Hosting is Vercel (US-based edge network). Backups are encrypted at rest.

4. Who we share it with

We do not sell your personal information. We do not share it with advertisers and we do not engage in cross-context behavioral advertising. We share data only with the subprocessors listed above (Clerk, Supabase, Stripe, Resend, PostHog, Sentry, Vercel) — each used solely to deliver SeatLedger's functionality, and each bound by data-protection terms or a data-processing addendum where applicable.

We may disclose data if compelled by valid legal process (subpoena, court order). We will notify you unless prohibited by the order itself or where notice would compromise an investigation.

If SeatLedger is acquired, merges, or sells substantially all of its assets, your data may be transferred to the successor entity. We will notify you in advance and give you the option to delete your account before any transfer takes effect.

5. Co-owners and shared seasons

When you invite a co-owner to a season, that person can see the season's data: events, cost basis, transactions, P&L, and the names of other co-owners. Once you invite someone, you cannot un-share data they have already seen — only revoke their future access. Don't invite anyone you wouldn't want to share that data with.

6. Your rights

• Access: view all your data anytime through the app.
• Export: download a JSON full export from Account → Exports. You can also export tax-year activity as CSV.
• Correction: edit your account info and season data directly in the app.
• Deletion: close your account from Account → Danger Zone. We delete your data within 30 days, except billing records (retained for 7 years per IRS rules) and security logs (12 months).
• Portability: the JSON export is machine-readable and complete.
• Opt-out of marketing: unsubscribe links in any non-transactional email; toggles in Account → Notifications.

California residents (CCPA/CPRA)

Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the right to: know what personal information we collect, access it, request its deletion, request its correction, opt out of sale or sharing (we do neither), limit the use of sensitive personal information, and not be discriminated against for exercising these rights. To exercise any right, email privacy@seatledger.ai. We will verify your identity by matching the request against the email address on your account before acting on it.

EU/UK residents

In addition to the rights listed above, you also have the right to object to processing, restrict processing, withdraw consent, and lodge a complaint with your supervisory authority. Contact us at privacy@seatledger.ai.

7. Cookies and tracking

We use a small number of cookies: a session cookie set by Clerk (for authentication), an admin-impersonation cookie when an admin is impersonating you (clearly indicated in the app), and PostHog's analytics cookie. We don't use third-party advertising cookies. We honor “Do Not Track” and Global Privacy Control signals where technically feasible.

8. Children

SeatLedger is not directed to or intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has created an account, contact privacy@seatledger.ai and we will close it and delete the data.

9. International transfers

Our data is stored in the United States. If you are in the EU, UK, or another jurisdiction outside the US, by using SeatLedger you consent to the transfer of your data to the US. Where required, we rely on Standard Contractual Clauses with our subprocessors as the lawful basis for transfer.

10. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, and audit logging. No system is perfectly secure. We cannot and do not guarantee that unauthorized parties will never gain access. Promptly report suspected security issues to security@seatledger.ai.

11. Retention

We retain personal information for as long as your account is active, plus the retention periods stated in Section 6 (billing records 7 years; security logs 12 months). We may retain de-identified or aggregated data indefinitely.

12. Changes to this policy

We will update the “Last updated” date and notify you by email when we make material changes. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact

Privacy questions or rights requests: privacy@seatledger.ai. Security disclosures: security@seatledger.ai.