Privacy Policy

1. What we collect

We collect information you provide directly: name, email address, password, phone number, and business details when you register or apply. For vendor applications we also collect a government-issued photo ID image to verify your identity.

We collect information automatically when you use the Service: IP address, browser type, pages visited, events viewed, and device information via server logs and first-party session cookies.

We collect transaction data: ticket quantities, payment amounts, and payment processor transaction IDs (but not full card numbers — payment card data goes directly to the processor).

2. How we use it

We use your information to: operate and improve the Service; process your subscription and payments; send transactional emails (receipts, confirmations, password resets); respond to support requests; and enforce these Terms and our Acceptable Use policy.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

We may use aggregated, de-identified data about platform usage for internal analytics and product improvement.

3. Payment processors

Payments are processed by Stripe, PayPal, and Square. When you or your attendees complete a payment, that data is sent directly to the processor under their own privacy policies. We store only the transaction ID and amount returned by the processor.

We recommend reviewing the privacy policies of Stripe (stripe.com/privacy), PayPal (paypal.com/privacy), and Square (squareup.com/legal/privacy) to understand how they handle payment data.

4. Cookies

We use session cookies to keep you logged in and remember your preferences. These are first-party cookies only; we do not use third-party tracking or advertising cookies.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to the Service.

5. Who we share it with

We share data with service providers who help us operate the platform: our hosting provider, Amazon Web Services (email delivery), and our payment processors. These providers are contractually required to protect your data.

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of EventDSM, our users, or the public.

We do not share your personal information with event attendees beyond what you explicitly publish on your event pages.

6. How long we keep it

Account and event data is retained while your account is active and for 90 days after cancellation, after which it is permanently deleted unless you request earlier deletion.

Transaction records are retained for 7 years to comply with financial recordkeeping requirements.

Vendor application ID images are deleted within 30 days of a final decision (approval or denial) on your application, unless retention is required by law or to resolve a dispute.

Server logs are retained for 30 days and then deleted.

7. Your choices

You may update your account information at any time from your account settings page. You may request deletion of your account and personal data by emailing [email protected]; we will complete verified deletion requests within 30 days except where retention is required by law.

You may opt out of non-transactional emails (product updates, announcements) by clicking the unsubscribe link in any such email. You cannot opt out of transactional emails (receipts, security notices) while your account is active.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS), encrypted storage of credentials and sensitive fields, and access controls limiting who on our team can view your data.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at [email protected].

9. Changes to this policy

We may update this Privacy Policy at any time. We will notify you of material changes by email or by posting a notice on dsmpay.com at least 14 days before the changes take effect. Continued use of the Service after that date constitutes acceptance.

10. Contact

For privacy questions or data requests, contact EventDSM LLC at [email protected]. We will respond to written inquiries within 10 business days.