Privacy Policy

Last updated: June 2025

TixTracker (“we”, “us”, “our”) helps ticket resellers track ticket purchases, ticket sales, transfers, payouts, profit, analytics and cash flow. This Privacy Policy explains what data we collect, how we use it, and your rights over it.

1. Data We Collect

Account data

When you create a TixTracker account we collect your email address and any profile information provided by the identity provider you use (Discord or email/password via Supabase Auth).

Ticket data you enter

Information you manually enter into TixTracker — event names, venue, dates, prices, quantities, sale prices, payout amounts, buyer details — is stored in our database and is visible only to you.

Google user data

If you choose to connect your Google account, TixTracker requests Gmail access (https://www.googleapis.com/auth/gmail.modify and https://www.googleapis.com/auth/gmail.labels) to scan ticket-related emails, mark successfully processed emails as read, and organise them with Gmail labels.

TixTracker uses Google user data only to provide the following features inside your account:

• Automatically importing ticket purchase orders from confirmation emails
• Importing sale, transfer and payout information from provider emails
• Populating your TixTracker dashboard with ticket inventory, profit and analytics
• Marking successfully processed ticket emails as read so they are not re-scanned unnecessarily
• Creating and applying Gmail labels (such as “My Tickets”) to processed ticket emails to help you identify which emails have already been imported

TixTracker only scans emails from supported ticket providers (Ticketmaster, AXS, Viagogo, StubHub, Ticombo). Unrelated personal emails are never read or processed.

Extracted information may include: event name, venue, event date, order reference, ticket quantity, section, row, seat numbers, purchase price, sale price, payout amount, buyer details, platform and transfer status.

2. How We Use Your Data

• To operate and provide the TixTracker service
• To display your ticket inventory, sales, profit and analytics
• To import ticket data from emails you authorise us to read
• To maintain and improve the service

3. What We Do Not Do With Google Data

• We do not send emails from your account
• We do not compose emails
• We do not delete emails
• We do not permanently delete emails
• We do not archive unrelated emails
• We do not access Gmail data for advertising
• We do not sell Google user data
• We do not use Google user data for serving ads
• We do not allow humans to read your Google data unless required for security, legal compliance, debugging with your explicit permission, or support you have requested

TixTracker Gmail access is limited to: reading ticket-related emails, marking those emails as read after successful import, and applying organisational labels to them. We do not scan or store unrelated personal emails.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted on secure EU/US cloud infrastructure. OAuth tokens used to access Gmail are stored server-side and are never exposed to the browser or third parties. All connections use HTTPS/TLS.

Access to your data is restricted by row-level security — only you can read or write your own account's data.

5. Data Sharing

We do not sell, rent or share your personal data with third parties for commercial purposes. We may share data with:

• Supabase — our database and authentication provider
• Vercel — our hosting provider
• Law enforcement if required by applicable law

6. Connecting and Disconnecting Gmail

Gmail connection is optional. You can connect your Gmail account at any time from the Settings page inside TixTracker. You can disconnect your Gmail account at any time by visiting Settings → Connections and clicking Disconnect Gmail. Disconnecting removes our access to your Gmail and stops all future email scans.

You can also revoke TixTracker's Gmail access at any time from your Google Account permissions page.

7. Data Deletion

You can request deletion of your TixTracker account and all associated data by contacting us at support@tixtracker.app. We will process deletion requests within 30 days.

Disconnecting Gmail (see Section 6) removes stored Gmail tokens from our database. Any ticket data already imported prior to disconnection remains in your TixTracker account unless you explicitly request account deletion.

8. Cookies

TixTracker uses cookies only for authentication session management. We do not use advertising cookies or third-party tracking cookies.

9. Children's Privacy

TixTracker is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of TixTracker after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at: support@tixtracker.app