Privacy policy

What we collect

• Your university email address, and a made-up public name we generate.
• Your full name and, if you give one, the email you use on ticketing apps.
• Your listings, alerts and, later, orders and messages about them.
• Ticket files and photos you upload, reports you make, and who you’ve blocked.
• Technical information needed to keep accounts secure: IP address, browser, sign-in times, and when a ticket file is opened.
• If you use the iPhone app, the few things it sends us, listed below.

We don’t store card or bank details; our payment provider does. We don’t use advertising or tracking cookies.

Why we use it

• To run the marketplace you signed up to (contract).
• To prevent fraud and keep the service safe (legitimate interests).
• To meet legal duties, such as keeping transaction records.

Who sees it

Other people see your public name and listings. When you buy or sell a ticket, the other person sees your full name and delivery email so the ticket can be transferred. Our service providers (hosting, database, email and payments) process data on our behalf.

When you upload a ticket, an AI service, Anthropic’s Claude, checks that it looks like a ticket for the right event. We send it the ticket’s pages with every barcode blacked out, the event’s details and your full name (tickets usually carry the buyer’s name). Nothing about the buyer is sent.

Everyone who handles data for us (Vercel for hosting, Supabase for the database and files, Resend for email, Stripe for payments and payouts, Apple for iPhone notifications, and Anthropic for the ticket check) does so under contracts that protect it at least as well as this policy.

The iPhone app

The app shows this website, so everything here applies to it. When you sign in, the app also sends us: its notification token (Apple’s address for your iPhone), an installation ID the app makes up, your iPhone model and iOS version, the app’s version, and your language, region and time zone. We use them to send the notifications you’ve chosen, to stop sending them to an iPhone you’ve signed out of, and to tell you when the app needs updating. Apple delivers the notifications, so it handles their text: an event name, an amount, never a card or a ticket.

So your tickets open without signal, the app keeps a copy of the ticket files for your coming events on your iPhone, encrypted by iOS and left out of backups. A copy is removed the next time the app updates after its event has finished, when you sign out, or when you delete the app.

The app doesn’t track you, show adverts, use analytics, or read your location or contacts. It opens your camera or photos only when you choose a ticket to sell. Turn each kind of notification on or off under Account, or all of them in iOS Settings.

Reports and blocks

When you report a listing, a person or an event, we store who made the report, what it’s about, the reason and anything you add. Only our team sees reports, and the person reported is never told who reported them. When you block someone we store that you did. They aren’t told; neither of you sees the other’s listings or can buy from the other until you unblock them from your account.

How long we keep it

• Account data while your account is open; what happens when you delete it is below.
• Order records for 6 years for tax purposes, then deleted.
• Security logs for up to 12 months.
• What the iPhone app sends us, until you sign out of the app on that iPhone or delete your account.
• Reports, as safety records for up to 6 years. Blocks, until you unblock or delete your account.
• Help-form messages, as long as we need them to answer you and keep a record of what we said.

Deleting your account

Delete your account yourself: Delete account, at the bottom of your account page, on the website or in the app. It happens straight away. If a ticket, a refund or a payment to you is still on its way, you can ask for the account to be deleted as soon as that finishes. We email you to confirm.

• What goes: your profile, alerts, listings for sale, and sign-ins on every device. Your name and email are removed from your account.
• What stays: records of orders you were part of, including the name and email the other person saw, kept for 6 years as the law requires, then deleted. Reports you made or that were made about you stay with our safety records. On all of these you appear as “Deleted account”.
• Your payout details are switched off and we delete the bank name and last digits we held. Stripe keeps its own record, as the law requires of it.
• We keep a one-way fingerprint of your email address (not the address itself) with your account’s status and strikes. If the account was suspended or banned, that address can’t open a new one; if it had strikes, a new account with that address starts with them.

Your rights

You can delete your account yourself, as above. To see, correct or export your data, email support@bristoltix.co.uk. You can also complain to the Information Commissioner’s Office.