Privacy Policy
Last updated
Who we are
Promotr is an event ticketing and booking platform run by Promotr. This policy explains what personal information we collect, why, who we share it with, and the choices you have. It applies to promotr.ca, our emails, and the Promotr connector for Claude.
Our Privacy Officer is responsible for how we handle personal information. Contact: Privacy Officer, support@promotr.ca, Promotr, 323 Governors Ct, New Westminster, BC V3L 5S6.
What we collect
- Account details: your name, email, username, password (stored only as a one-way hash), date of birth, and optionally a phone number, legal name for the door, profile photo and display name.
- If you sign in with Google: your Google name, email and profile photo. We do not get access to your Gmail, Drive or contacts.
- Tickets and orders: the events you buy for, ticket holders' names and emails, amounts paid, and refund history. Card details go straight to Stripe; we never see or store your full card number.
- If you organize, perform, work or host: your organizer, artist, venue, promoter or staff profile, work history, availability, and payout details. Bank and identity details for payouts are collected and held by Stripe.
- Messages you send through Promotr, and support requests and their attachments.
- Usage information: your IP address and browser type when you sign in, pages you visit on Promotr, and whether you opened or clicked our emails.
- Your marketing choices: whether you agreed to marketing email, the exact wording you agreed to, when, and how.
Why we use it
- To run your account, sell you tickets, deliver them, check you in at the door and handle refunds.
- To pay organizers, venues, artists, promoters and staff for events they take part in.
- To send you messages about your tickets and account. These are not marketing and you get them while you have tickets or an account.
- To send you news and offers, only if you agreed. Every marketing email has a one-click unsubscribe link.
- To keep Promotr secure, prevent fraud and ticket abuse, and meet our legal and tax obligations.
- To understand how Promotr is used so we can improve it. We use our own first-party records for this; we do not use advertising or third-party tracking tools.
We do not sell your personal information.
What event organizers see
When you buy a ticket, the event's organizer receives your name, email, phone number if you gave one, and what you bought, so they can run the event: entry, changes, refunds and support. Venues and promoters linked to the event may see attendance and sales for it.
Organizers can keep you on their contact list and see your past purchases from their events. They can email you about their events if you agreed to marketing email from organizers and venues, and you can unsubscribe from any of them at any time.
Organizers are responsible for how they use your information outside Promotr.
Service providers
We use these companies to run Promotr. They may only use your information to provide their service to us.
- Stripe: payments, refunds and payouts.
- Amazon Web Services: email delivery, text messages and file storage.
- Supabase: our database.
- Vercel: hosting the website.
- Cloudflare: storing and serving event and venue videos.
- Google: sign-in with Google, if you use it.
- OpenStreetMap: maps on event and venue pages. Your browser loads map tiles from OpenStreetMap servers.
- Anthropic: only if you connect Promotr to Claude. See "The Claude connector" below.
The Claude connector
You can connect Promotr to your own Claude account (from Anthropic). It is off unless you add it, and you choose what it may do: see your events, sales, venues and team; edit drafts; manage your team; handle bookings; apply to venues; read your messages; or send messages. Sending messages is off by default.
Claude acts as you and can only see what you can see in Promotr. What it reads, which can include other people's names, booking-request emails, message text and sales figures, goes into your Claude conversation, where Anthropic's terms and privacy policy apply. Promotr sends nothing to Anthropic any other way.
Claude cannot move money, buy tickets, change your account or password, or use admin powers. Anything public, such as publishing an event, sending a message or a booking request, needs your yes on a preview first. Messages it sends are labelled "via Claude".
We keep a log of what the connector changes, with your account and the app that made the change. Your account page lists connected apps; Disconnect revokes access straight away.
Where your information is stored
Our service providers store and process information in the United States and may access it from other countries. While it is there, it is subject to the laws of those countries, and their courts and authorities may be able to access it.
How long we keep it
- Your account and profile: Until you delete your account
- Orders, tickets, payments and payouts: Six years after the end of the tax year, as tax law requires. After account deletion they are kept without your name or contact details.
- Signed-in sessions, with IP address and browser: 30 days after the session ends
- Page-visit records: 13 months
- Records of emails we sent you: 3 years
- Your marketing consent history: As long as your account exists, as proof of consent
- Support requests and dispute evidence, with attachments: 2 years after they are closed
- Messages: Until you delete your account
- Guest accounts created at checkout and never used: 2 years, then anonymized
Your choices and rights
- See and download your data: use "Download my data" on your account page, or ask our Privacy Officer. We reply within 30 days.
- Correct it: edit your profile, or ask us.
- Delete your account: use "Delete account" on your account page. We remove your name, contact details and photo, and keep only the order records tax law requires, without your details.
- Marketing: turn it off on your notifications page or with the unsubscribe link in any marketing email.
- Withdraw consent for other uses, subject to legal and contract limits. We will tell you what that means for your account.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the Information and Privacy Commissioner of British Columbia or of Alberta if you live there.
Security and breaches
We protect your information with encryption in transit, hashed passwords, encrypted sign-in tokens, access limited by role, and audit logs. No system is perfectly secure.
If a breach creates a real risk of significant harm to you, we will tell you and the privacy commissioners as soon as we can, and we keep a record of every breach.
Age
You must be 18 or older to create an account or buy tickets. Some events have a higher minimum age, shown on the event page.
Changes to this policy
If we change this policy in a way that matters, we will post the new version here with a new date and, for significant changes, email account holders before it takes effect.