Privacy Policy

1. Introduction

DeepMicro Limited, operating as Purple Cow Tickets("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ticketing platform.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, phone number
• Profile Information: Bio, profile photo, social media links (for performers/venues)
• Payment Information: Processed securely by Stripe; we do not store credit card numbers
• Event Information: Event details, ticket types, pricing (for event creators)

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on site
• Device Information: Browser type, operating system, device type
• Location: General location based on IP address (city/province level)
• Error Data: Technical errors and performance data for platform stability

3. How We Use Your Information

We use your information to:

• Process ticket purchases and issue refunds
• Send order confirmations and event reminders
• Enable performers and venues to manage events
• Process payouts to event creators
• Improve our platform and user experience
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. How We Share Your Information

We share your information with:

• Event Creators: Name and contact information for ticket purchasers
• Payment Processors: Stripe processes all payments securely
• Communication Services: Twilio (SMS), Postmark (primary email), and Resend (backup email) for notifications
• Hosting Providers: Vercel for website delivery and infrastructure
• Error Monitoring: Sentry for platform stability and error tracking
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

5. Your Rights

Under Canadian privacy law, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and personal information
• Withdrawal of Consent: Opt out of marketing communications
• Portability: Request your data in a portable format

To exercise these rights, contact us at privacy@purplecowtix.com.

6. Notifications & Communications

6.1 Notification Types

We send two categories of notifications:

6.2 Communication Channels

• Email: Delivered via Postmark (primary) and Resend (backup). We share your email address and name with these providers solely for message delivery.
• SMS: Delivered via Twilio. We share your phone number with Twilio solely for message delivery. Standard message and data rates may apply. Message frequency varies based on your events and orders. Your phone number and SMS opt-in consent will not be shared with any third parties for marketing or promotional purposes.

6.3 How to Opt Out

• Email marketing: Click "Unsubscribe" in any marketing email, or update your preferences on the settings page
• SMS: Reply STOP to any SMS message, or disable SMS in your notification preferences
• All notifications: Set your notification preference to "None" in settings (transactional messages for active orders will still be sent)

6.4 Notification Data Retention

Notification preference records are retained for the duration of your account plus 2 years. Consent records (opt-in/opt-out events) are retained for 3 years after the last consent action to comply with CASL record-keeping requirements.

7. Data Retention

We retain your information for specific periods based on the type of data:

• Financial transaction records: 7 years (required by tax law)
• Account data: Duration of your account plus 2 years
• Marketing consent records: 3 years after last interaction
• Notification consent records: 3 years after last consent action
• Event data: 3 years after the event date
• Support communications: 3 years after resolution

You may request deletion of your account at any time. Some data may be retained longer to comply with legal obligations.

8. Security

We implement industry-standard security measures including encryption, secure authentication, and regular security audits. Payment information is processed by Stripe, a PCI DSS Level 1 certified payment processor.

9. Cookies

We use essential cookies to enable core functionality. We may use analytics cookies with your consent to improve our services.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through a prominent notice on our platform.

11. Privacy Officer

We have designated a Privacy Officer responsible for our compliance with privacy legislation. For privacy-related inquiries, requests, or complaints:

If you are not satisfied with our response to your privacy concern, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.