Privacy policy

EventPassage is operated by 102210698 Saskatchewan Inc. (“we”, “us”). This Privacy Policy explains what personal information we collect when you use eventpassage.com, why we collect it, and what choices you have.

From you, directly. When you buy a ticket or contact support, you give us:

• name and email;
• billing address (for fraud screening — AVS — through our payment processor);
• order details (the events you bought tickets for).

Payment information.Your card number, expiry, and security code are sent directly to our payment processor (Elavon Converge) over HTTPS. We don't store the full card number, expiry, or security code on our servers. Our records keep only a masked PAN (e.g., 41**********1111) for reconciliation.

Account information. When you complete a purchase, an account is automatically created tied to your billing email so you can re-download tickets later. We use Supabase Auth for sign-in via email one-time codes.

Usage data. Standard server logs (IP, timestamps, request paths) that help us debug issues and detect fraud. We also use Vercel Web Analytics on the Site, which records page views, referring URLs, country (derived from your IP address; the IP itself is not stored), and the kind of device you used (e.g., mobile vs. desktop). Vercel Web Analytics is cookieless: it does not set tracking cookies, does not assign you a cross-site identifier, and does not collect any personal information. We do not use third-party advertising trackers.

• To process your ticket purchase and deliver your PDF tickets.
• To send transactional email (purchase receipts, event changes, refund instructions).
• To answer support requests you initiate (e.g., the contact form / email replies).
• To detect and prevent fraud.
• To meet legal and tax obligations.

We do not sell your personal information. We do not use it to send marketing emails without your specific consent.

• Event organizers — for ticket validation (the QR code), capacity reporting, and any policies they set for their event.
• Our payment processor (Elavon Converge) — to authorize and capture your card payment.
• Our infrastructure providers (Supabase for database / auth / storage; Resend for email; Vercel for hosting and Web Analytics). These providers operate under their own contractual obligations to keep data secure.
• Law enforcement — only when required by a valid legal request.

Order, ticket, and account data are kept indefinitely so you can access your history. You can ask us to delete your account by contacting support@eventpassage.com; we'll honor that within a reasonable timeframe, subject to legal/tax record-keeping requirements.

All traffic between your browser and our servers uses HTTPS. Payment card data goes directly from your browser to Elavon — it never persists on our servers. Authentication cookies are HTTP-only and Secure. Internal access to production data is limited and logged.

• Sign in and review or download your orders at any time.
• Request access, correction, or deletion of your personal information by emailing us at the address below.
• Opt out of any non-transactional emails using the unsubscribe link they include (we don't currently send marketing emails).

We use a small number of strictly-necessary cookies for authentication (your session) and security (CSRF protection). No advertising / analytics cookies are set by us.

EventPassage is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we'll delete it.

We may update this policy from time to time. We'll update the “Last updated” date at the top, and if changes are material we'll provide more prominent notice (e.g., a banner on the Site).

• Email: support@eventpassage.com
• Phone: (306) 515-0040
• Mail: A-3302 Green Turtle Road, Regina SK  S4S 3A3