Privacy Policy

1. Who we are

Assembly ("we", "us", "our") operates the website assemblytickets.com and the Assembly mobile application. This policy explains how we collect, use, and protect your information.

2. Information we collect

Account information: When you create an account we collect your email address, name, and optional profile details (city, date of birth, avatar, genre preferences).

Event data: If you create events we store event details, guestlist entries (name, email, phone, notes), and ticket purchases.

Usage data: We collect anonymous analytics data (pages visited, device type, browser) via Google Analytics to understand how people use Assembly. No personally identifiable information is shared with Google.

Push notification tokens: If you enable push notifications on the mobile app, we store a device token to send you event updates.

Payment information: Payments are processed by Stripe. We do not store your card details — they are handled entirely by Stripe's PCI-compliant infrastructure.

3. How we use your information

• To provide and operate the Assembly platform
• To process ticket purchases and manage guestlists
• To send push notifications about events you're involved with
• To send email confirmations (guestlist, tickets)
• To improve the platform based on anonymous usage patterns

4. Third-party services

We use the following third-party services:

• Supabase — authentication and database hosting
• Stripe — payment processing
• Google Analytics — anonymous usage analytics
• Firebase Cloud Messaging — push notification delivery
• Resend — transactional email delivery

Each service has its own privacy policy and processes data in accordance with their terms.

5. Cookies

We use essential cookies for authentication (keeping you logged in) and first-party analytics cookies via Google Analytics. We do not use third-party advertising or tracking cookies.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymous analytics data may be retained indefinitely.

7. Your rights

You can:

• Access and update your personal information via your profile settings
• Request deletion of your account and associated data
• Opt out of push notifications via your device settings

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication, and PCI-compliant payment processing to protect your data.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via the app or email.

10. Contact

If you have questions about this policy, contact us at hello@assemblytickets.com.