Privacy Policy

PopOutNow LLC ("we", "us", or "our") operates the PopOut platform (popoutnow.com). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.

1. Information We Collect

We collect the following categories of personal information depending on how you interact with our platform:

Account Information

When you create an account, we collect your name, email address, date of birth, and password hash. If you sign in with Google, we receive your name and email from Google OAuth and will prompt you to provide your date of birth. We also store a Supabase authentication identifier linked to your account.

Order & Transaction Data

When you purchase tickets or photos, we collect your name, email address, Stripe session and payment identifiers, any promo codes applied, and check-in timestamps.

Event Information

For events listed on the platform, we store venue addresses and event dates.

Photos

Event photographers upload photographs that may contain images of identifiable persons. If you purchase photos, we record your email address and Stripe payment identifiers.

Service Provider Information

If you register as a photographer, event hoster, or promoter, we collect your name, email address, and Stripe Connect account identifier to facilitate payouts.

2. How We Use Your Information

• Process ticket and photo purchases and deliver order confirmations
• Provide access to purchased tickets, event photos, and event details
• Communicate with you about your orders, account, and platform updates
• Improve our platform, troubleshoot issues, and analyze usage patterns
• Verify that you meet the minimum age requirement of 18 years to use the Platform, in compliance with Indiana Code § 7.1-5-7
• Comply with legal obligations, including tax and financial record-keeping
• Prevent fraud and enforce our terms of service

3. Third-Party Data Sharing

We do not sell your personal information. We share data with the following third-party processors to operate our platform:

Stripe

We use Stripe to process all payments. When you make a purchase, your payment information is transmitted directly to Stripe. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy at stripe.com/privacy.

Supabase

We use Supabase for user authentication and identity management. Your email address and authentication credentials are stored securely by Supabase.

Google (OAuth)

If you choose to sign in with Google, we receive your name and email address from Google. We access only the information necessary for authentication and do not request access to other Google services.

Cloudflare R2

We use Cloudflare R2 (S3-compatible object storage) to store event photos and media files.

Event Hosters

When you purchase tickets for an event, your name and email address are shared with the event hoster for that event. This enables hosters to manage their guest lists, communicate event updates, and facilitate check-in.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Transaction records are retained for the period required by applicable tax and financial regulations. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law.

5. Data Deletion

You may request deletion of your account and personal data at any time by contacting us at support@popoutnow.com. Upon receiving a verified deletion request, we will delete or de-identify your personal information within 30 days, except for data we are required to retain by law (such as transaction records for tax compliance). We will confirm completion of the deletion by email.

6. Data Security

We implement industry-standard security measures to protect your personal information, including encrypted connections (TLS/HTTPS), secure password hashing, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Breach Notification

In accordance with Indiana Code § 24-4.9 (Indiana Data Breach Notification Law), if we become aware of a security breach that results in the unauthorized acquisition of your unencrypted personal information, we will notify affected Indiana residents without unreasonable delay. Notification will be provided by email to the address associated with your account or by other methods permitted under IC 24-4.9.

8. Disposal of Personal Information

In accordance with Indiana Code § 24-4-14, when personal information is no longer needed for business purposes or legal retention requirements, we dispose of it using reasonable measures to prevent unauthorized access, including secure deletion of electronic records.

9. Children's Privacy

Our platform is restricted to users who are at least 18 years of age. We collect date of birth during account registration to enforce this requirement. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete that information and terminate the associated account promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a revised effective date. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us:

PopOutNow LLC
Email: support@popoutnow.com