Privacy Policy

1. Introduction

Welcome to FanToFan. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our peer-to-peer ticket marketplace platform.

By using FanToFan, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, display name, and password
• Profile Information: Optional information you choose to add to your profile
• Transaction Information: Details about tickets you buy or sell, including event information, pricing, section, row, and seat numbers
• Communication Data: Messages you send through our platform, offer notes, and listing descriptions
• Payment Information: For Protected Transfer transactions, we collect payment information through our payment processor, Stripe, including payment method details, billing information, and transaction history. Stripe's processing is governed by their privacy policy at stripe.com/privacy
• Financial Account Information: For sellers using Protected Transfer, we collect Stripe Connect account information to facilitate payouts. For penalty enforcement, we may securely store payment method tokens
• Transfer Coordination: Email addresses for ticket delivery, transfer deadline tracking, and completion confirmation timestamps

2.2 Automatically Collected Information

When you access our platform, we automatically collect:

• Usage Data: Information about how you interact with our platform, including pages viewed, features used, and time spent
• Device Information: Device type, operating system, browser type, and IP address
• Log Data: Server logs, error reports, and performance data
• Cookies and Similar Technologies: See our Cookie Policy for more details

2.3 Third-Party Data

We collect market pricing data from publicly available sources (Ticketmaster, StubHub, SeatGeek) to provide market analysis and fair pricing recommendations.

3. How We Use Your Information

We use the collected information for the following purposes:

• Platform Operations: To create and manage your account, process transactions, and facilitate communication between buyers and sellers
• Market Analysis: To provide pricing comparisons, deal assessments, and offer analyzer functionality
• Trust and Safety: To maintain ratings and reviews, award trust badges, and prevent fraud or abuse
• Communications: To send transaction notifications, offer updates, and important platform announcements
• Improvement: To analyze platform usage, improve features, and enhance user experience
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Information Sharing and Disclosure

4.1 Public Information

The following information is publicly visible on our platform:

• Your display name and member since date
• Your ticket listings and associated details
• Your transaction counts as both buyer and seller
• Your ratings and reviews (both given and received)
• Trust badges you have earned

4.2 Between Users

When you engage in a transaction, certain information is shared:

• Your display name and profile information
• Messages exchanged through our platform
• Transaction details necessary for ticket transfer and payment coordination

4.3 Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

• Payment Processing: Stripe for processing payments, holding funds in escrow, and distributing payouts for Protected Transfer transactions. This includes sharing payment methods, transaction amounts, user identifiers, and payout information
• Authentication Services: Clerk for user authentication
• Email Services: SendGrid for transactional emails including payment confirmations, transfer deadline reminders, and dispute notifications
• Hosting Services: Vercel for platform hosting
• Database Services: Neon for secure data storage including payment records and transaction history

For Protected Transfer transactions, Stripe acts as both our payment processor and funds custodian. They hold buyer payments in escrow until sellers complete ticket transfers, at which point funds are released to sellers' connected accounts.

4.4 Legal Requirements

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety, or that of our users or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security assessments and updates
• Access controls and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Information: Retained while your account is active and for a reasonable period afterward
• Transaction History: Retained for record-keeping, tax compliance, dispute resolution, and trust/safety purposes
• Payment Records: Financial transaction data, including Stripe payment intents, transfers, and refunds, are retained for at least 7 years to comply with financial record-keeping requirements and facilitate tax reporting
• Dispute Records: Transaction disputes, refund requests, and penalty assessments are retained indefinitely for legal protection and pattern analysis
• Reviews and Ratings: Retained to maintain platform integrity and user trust
• Messages: Retained while relevant to active or recent transactions
• Deadline Tracking: Transfer deadline timestamps and completion confirmations are retained as part of transaction records

You may request deletion of your account and associated data, subject to legal retention requirements. Financial records may be retained longer to comply with applicable laws and regulations.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to certain limitations)
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the information provided in the Contact section below.

8. Children's Privacy

FanToFan is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Third-Party Links and Services

Our platform integrates with and links to third-party services:

• Stripe: All payment processing, including collecting payment information, holding escrow funds, and distributing payouts, is handled by Stripe. When you use Protected Transfer, you are subject to Stripe's Terms of Service and Privacy Policy
• Ticketing Platforms: Links to Ticketmaster, AXS, and similar services for ticket transfer coordination
• Payment Apps: References to Venmo, Zelle, and other peer-to-peer payment services for free tier transactions

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: