Privacy Policy

Last updated: June 9, 2026

TicketPill is a program of Sugarpill LLC. This policy explains what information we collect when you use TicketPill, how we use it, and what rights you have over it.

The short version: we collect what we need to run the platform and we do not sell your data.

Who This Applies To

This policy applies to anyone who uses TicketPill, whether you're buying a ticket, selling tickets as a Producer, or browsing.

What We Collect

When you buy a ticket

  • Your name and email address
  • Your order details: event, ticket type, quantity, and amount paid
  • Payment is processed entirely by Stripe. We never see or store your full card number, CVV, or billing address.

When you create a Producer account

  • Your name, email address, and any profile information you add
  • Your Stripe Connect account details (to send you payouts)
  • The event content you create: descriptions, images, ticket types, and pricing

Automatically

  • Session authentication data, to keep you logged in
  • Basic server request logs through our hosting infrastructure (Vercel), which may include IP addresses. These are not used to identify or track individual users.

How We Use It

  • To process ticket purchases and send buyers their confirmation and ticket
  • To send event-related updates when a Producer communicates with attendees
  • To send account and platform communications (security notices, policy updates)
  • To operate, maintain, and improve the Platform
  • To investigate abuse, fraud, chargebacks, or violations of our Terms of Service
  • To comply with legal obligations

Email Analytics

Emails we send through our delivery provider (Postmark) may include standard email analytics, such as open tracking and link click tracking. This is used to understand delivery performance and improve our communications. It is not used to build advertising profiles or share data with third parties.

If you prefer not to be tracked, you can disable image loading in your email client, which prevents open tracking pixels from firing.

Cookies

TicketPill uses session cookies to keep you authenticated. We do not use advertising cookies or third-party behavioral tracking cookies.

Who Processes Your Data

We rely on a small number of third-party services (subprocessors) to operate TicketPill. Each one receives only the data necessary for their function.

Stripe

Processes payment transactions and producer payouts. Stripe receives your payment details directly and is the only party that ever handles full card information. Producer bank account and identity information is shared with Stripe as part of their Connect verification process. Stripe is certified at PCI DSS Level 1.

stripe.com/privacy

Postmark (ActiveCampaign)

Handles delivery of all transactional and event emails, including ticket confirmations and producer broadcasts. Postmark receives recipient email addresses and message content. Standard email analytics (opens, clicks) may be collected as described above.

postmarkapp.com/privacy-policy

Supabase

Hosts our database and handles user authentication. Supabase stores all account data, purchase records, and event content. Data is stored on AWS infrastructure (us-east-1 by default). Supabase is SOC 2 Type II certified.

supabase.com/privacy

Cloudflare R2

Stores uploaded media files, including event images and producer assets. Files stored in R2 are not linked to personal data by Cloudflare, but may contain personal information if included in uploaded content (for example, an event photo).

cloudflare.com/privacypolicy

Vercel

Hosts the TicketPill application. Vercel processes server requests and may log IP addresses and request metadata as part of normal infrastructure operation. Vercel is SOC 2 Type II certified.

vercel.com/legal/privacy-policy

We do not sell your personal information to anyone. We do not share it with advertisers. We share it with law enforcement only when legally required to do so.

Your Rights

You can contact us at any time to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your data

If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we've collected and the right to request that we delete it.

To exercise any of these rights, email us at support@ticketpill.com. We will respond within 30 days.

Data Retention

We keep purchase and transaction records for as long as required for legal and financial purposes (typically 7 years). If you would like your personal data deleted, reach out and we will work through it with you within the limits of our legal obligations.

Producer account data is retained while your account is active. If you close your account, we will retain transaction records but remove your personal profile data on request.

Security

We take reasonable technical and organizational measures to protect your data. Payment data is handled entirely by Stripe and never touches our servers. Authentication credentials are stored using industry-standard security practices.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

Changes to This Policy

If we make significant changes to how we handle your data, we will let you know before the changes take effect. Continued use of the Platform after changes are posted means you accept the updated policy.

Contact

support@ticketpill.com

Sugarpill LLC
Portland, Oregon

Something unclear? Something missing? Let us know.