Privacy Policy

01Introduction

Revelree Tickets Inc. (“Revelree”, “we”, “us”) operates revelree.ca and the related ticketing, box office, and Ree•bates products. Our job is to connect attendees with the events they love, and to give event organizers the tools they need to run those events well. To do that, we collect and use a limited amount of personal information — and we want you to understand exactly what that is, why we collect it, and what you can do about it.

This Privacy Policy applies to anyone who visits our website, purchases a ticket, scans a ticket, manages an event, or otherwise interacts with our services. By using Revelree, you agree to the practices described here. If anything in this policy isn't clear, write us at privacy@revelree.ca and a real person will respond.

02Information we collect

The information we collect depends on how you use Revelree.

Information you give us

• Account details: name, email address, password (hashed), phone number.
• Order details: the events and tickets you've bought, the names you registered on each ticket, the email used to receive them.
• Payment information: handled by our PCI-compliant payment processors. We store only a token, the last four digits, the card brand, and the billing postal code — not the full card number.
• Partner information: if you apply to become a Revelree Partner, the legal name, mailing address, contact details, business banking information, and Canadian tax identifiers for your organization.
• Communications: messages you send to support, demo requests, and survey responses.

Information we collect automatically

• Device and log data: IP address, browser type and version, operating system, referring URL, and the pages you visit on Revelree.
• Cookies and similar technologies: small files we set in your browser to keep you signed in and remember your preferences. See Section 6.
• Approximate location: derived from your IP address, used to show events near you and meet regional pricing requirements.
• Scanning events: when a ticket is scanned at an event, we log the scan time, gate, and the staff account that scanned it.

Information from third parties

• Payment processors tell us whether a charge succeeded or failed and the resulting transaction reference.
• Fraud-prevention services provide a risk score we use to detect stolen cards and resale scams.
• Identity providers (such as Apple Sign-In or Google) provide the email and name on your account when you choose to sign in through them.

03How we use information

We use the information we collect for these purposes, and only these purposes:

• To deliver tickets: processing your purchase, sending your tickets, letting you re-download them, and getting you into the event.
• To run partner accounts: giving event organizers access to their tools, payouts, attendee lists, and reporting.
• To operate Ree•bates: calculating, crediting, and paying out cashback on eligible purchases.
• To support you: answering your questions, resolving disputes, and recovering compromised accounts.
• To improve the product: understanding which features are used, where checkout falls apart, and where to invest.
• To prevent fraud: identifying stolen payment methods, fake accounts, and ticket-resale abuse.
• To meet legal obligations: tax reporting, accessibility laws, and lawful requests from authorities.
• To send service messages: receipts, ticket delivery, event reminders, refund notices, and account security alerts.
• To send marketing (only if you opt in): occasional emails about new features and Canadian events you might love. Every email includes a one-click unsubscribe.

04When we share information

We don't sell your personal information. Here are the only situations where we share it with someone else:

• With the event partner whose ticket you bought. See Section 5.
• With service providers who help us run Revelree — payment processors, email delivery, SMS, fraud detection, cloud hosting, customer support, and analytics. Each is bound by a written agreement that limits their use of your data to what's required to provide that service.
• With professional advisers such as our accountants and lawyers, under confidentiality agreements.
• For legal reasons, when we believe in good faith that disclosure is required to comply with a law, court order, or government request, or to protect the rights, property, or safety of Revelree, our users, or the public.
• In a corporate transaction, such as a merger, acquisition, or sale of substantially all of our assets — in which case we'll notify you before your information is transferred and becomes subject to a different privacy policy.
• With your consent, for anything outside the above.

05Sharing with event partners

When you buy a ticket to an event, the event organizer (“Partner”) is the host of that event. They need certain information about you to actually let you in and to run their event — this is the entire reason Revelree exists.

We share the following with the Partner who is hosting your event:

• The name on each ticket and the name on the order
• The email address on the order
• The tickets purchased, prices paid, and any add-ons
• The promo or comp code used, if any
• Scan history at the event itself

Once shared with a Partner, your information is governed by that Partner's own privacy practices. The Partner may contact you about the event you purchased a ticket to. They may not use your information to market unrelated events without your consent, and Revelree's Partner Agreement prohibits selling or transferring your information to third parties.

06Cookies and tracking

We use a small number of cookies, grouped into three categories:

• Strictly necessary — keep you signed in, hold your cart, and remember which currency you're shopping in. These cannot be disabled.
• Performance — tell us anonymously how many people use which features, so we can fix the broken parts. We use a self-hosted analytics tool that does not share data across sites.
• Functional — remember your accessibility preferences and recently viewed events.

You can adjust these at any time from the cookie banner or from the Cookie Settings link in the footer. We do not use third-party advertising cookies and we do not honor third-party retargeting requests.

07Payments and Ree•bates

Card payments are processed by PCI-DSS Level 1 compliant providers. Card numbers, CVVs, and expiry dates never touch Revelree servers; they go directly to the processor over an encrypted connection. We receive only the transaction outcome and a tokenized reference.

For Ree•bates, we record your purchases on a per-account basis to calculate cashback. We disclose cashback totals to the Canada Revenue Agency where required by law and issue tax slips for accounts that receive more than the reportable threshold in a calendar year.

08How we protect your data

All traffic to and from Revelree is encrypted with TLS 1.2 or higher. Production data is stored in Canadian data centres and encrypted at rest. Access to production systems is limited to a small number of engineers, protected by hardware security keys, and logged. We follow a written incident response plan and will notify affected users without undue delay if a security incident is likely to result in a real risk to your rights.

Even so, no system is perfectly secure. Use a strong, unique password, enable two-factor authentication, and don't share your account.

09How long we keep your data

• Account data: while your account is open, plus 30 days after you delete it (so we can reverse accidental deletions and meet legal holds).
• Order and ticket records: seven (7) years, to comply with Canadian financial recordkeeping requirements.
• Partner financial records: seven (7) years, same as above.
• Support correspondence: two (2) years from the last message.
• Server logs and analytics: 90 days in identifiable form, then aggregated or deleted.

10Your privacy rights

Subject to applicable law (PIPEDA in Canada, Quebec's Law 25, and others depending on where you live), you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or out of date
• Delete your account and the personal information associated with it (subject to the retention rules in Section 9)
• Export your data in a machine-readable format
• Withdraw consent for any processing based on consent (including marketing emails)
• Object to certain uses of your data, including any automated decision-making
• Lodge a complaint with your local privacy regulator

Most of these can be exercised directly from your account settings. For anything you can't self-serve, email privacy@revelree.ca. We'll respond within 30 days.

11Children's privacy

Revelree is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Children aged 13 to the age of majority in their province may use Revelree with the involvement of a parent or guardian. If you believe a child has provided us with personal information, contact us and we'll delete it.

12International users

Revelree is operated from Canada and the data we collect is processed in Canada. If you are using Revelree from outside Canada, your information will be transferred to and processed in Canada, which may have data protection laws that differ from those in your home country. By using Revelree, you consent to that transfer.

13Changes to this policy

We update this policy from time to time. When we make material changes, we'll post the new version here, update the “Last updated” date at the top, and — for changes that meaningfully expand how we use your data — email account holders before the change takes effect. The current version always lives at revelree.ca/privacy.

14How to contact us

Questions, concerns, or privacy requests? Reach our Privacy Office:

Revelree Tickets Inc.
Attn: Privacy Office
Email: privacy@revelree.ca
Mail: 200 King Street West, Toronto, ON, Canada M5H 3T4

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.