Privacy Policy

1. What we collect

• Account details: your name, email address, and a securely hashed password. We never store your password in readable form.
• Orders and tickets: the name, email, phone number, and billing address given at checkout, what was bought, and the attendee name and email on each ticket.
• Vendor applications: business name, contact name, email, phone, address, category, description, logo, and any photos you upload.
• Messages: the content of emails and text messages sent through the platform between organizers and their attendees or vendors, including replies.
• Survey answers: responses, and the name and phone number of the respondent where an organizer collected them.
• Technical data: IP address, browser or device type, operating-system and app version, pages or app screens used, and bounded error diagnostics. We use a randomly generated installation identifier to understand reliability. This data is linked to your signed-in account, is not used for advertising or cross-company tracking, and is deleted when you delete your account.

We do not collect or store full card numbers. Card details are entered directly with our payment provider.

2. Why we use it

• To deliver what you bought: issuing tickets, sending confirmations and reminders, and admitting you at the door.
• To let organizers run their events: showing them their attendees, orders, vendors, and payouts.
• To take payments, pay organizers, and meet our tax and accounting obligations.
• To answer support requests and investigate fraud or abuse.
• To measure feature usage, diagnose app errors, and improve Haflad’s reliability.

3. Who we share it with

We do not sell your personal data. We share it with the organizer whose event you bought from or applied to, and with the providers that run parts of the service on our behalf:

• Stripe — payment processing, payouts, and refunds.
• Resend — transactional email delivery.
• OpenPhone — sending and receiving text messages.
• Byteship — hosting images and files you upload.
• Mapbox — displaying event maps, which involves sending the venue address or coordinates.
• Anthropic — drafting suggested message copy for organizers, where an organizer uses that feature. Campaign copy is sent; attendee contact details are not.
• Railway — hosting the application and its database.

We may also disclose data where the law requires it, or to protect the rights and safety of users.

4. Cookies and local storage

We set a cookie to keep you signed in. Your browser also stores a few preferences locally — your light or dark theme, and which dashboard view and organization you last used. These are needed for the site to work and are not used for advertising.

5. How long we keep it

Order, ticket, and payment records are kept for as long as required for accounting and tax — typically seven years. Account details are kept while your account is open. Close your account and we delete or anonymise what we are not required to keep.

6. Your rights

Depending on where you live, you can ask for a copy of your data, ask us to correct or delete it, object to certain uses, or ask us to stop sending marketing. Write to Support@haflad.com and we will respond within the time the law allows.

Where an organizer holds your data because you attended or applied to their event, they are responsible for it as well, and you can ask them directly.

7. Security and transfers

Data is encrypted in transit, access is limited to people who need it, and passwords are hashed. No system is perfectly secure, so tell us immediately if you think your account has been compromised.

Our providers may process data in countries other than yours, including the United States, under the safeguards their terms provide.

8. Contact

Questions about this policy, or a request about data we hold, go to Support@haflad.com. We answer within the time the law allows.