This Privacy Policy includes important information about your personal data and we encourage you to read it carefully.

We provide ticketing services through the internet to businesses of all sizes who use our technology and services to sell tickets to consumers online. TicketFlo Limited wants to be clear about our use of the Personal Data that is entrusted to us.

This Privacy Policy ("Policy") describes the "Personal Data" that we collect about you, how we use it, how we share it, your rights and choices, and how you can contact us about our privacy practices. This Policy also outlines your data subject rights, including the right to object to some uses of your Personal Data by us.

Who We Are

"TicketFlo", "we", "our" or "us" means TicketFlo Limited which is the entity responsible for the collection and use of Personal Data under this Privacy Policy. This Privacy Policy applies to the collection and use of Personal Data on the purchase of tickets and items for events hosted in New Zealand, meaning that it could apply to residents of New Zealand or other countries who purchase tickets to events hosted in New Zealand.

Definitions

Personal Data

"Personal Data" means any information that relates to an identified or identifiable individual, and can include information that you provide to us to facilitate a transaction (such as first and last name, email address, billing address/shipping address, zip code and phone number) and that we collect about you, such as when you engage with our Services (e.g. device information, IP address).

Business Services

Our "Business Services" are services provided by Ticketflo to entities ("Business Users") who directly and indirectly provide us with "End Customer" Personal Data in connection with those Business Users' own business and activities.

Transaction Data

"Transaction Data" as used in this Privacy Policy includes Personal Data, and may include the following: your name, email address, billing address, shipping address, payment method information, location, purchase amount, date of purchase and your phone number.

User Types

Depending on the context, "you" means End Customer or Visitor:

When you do business with, or otherwise transact with, a Business User (e.g. when you buy tickets from a merchant that uses TicketFlo technology and services) but are not directly doing business with Ticketflo we refer to you as an "End Customer."
When you visit Ticketflo.org or otherwise communicate with Ticketflo we refer to you as a "Visitor" (e.g. you send Ticketflo a message asking for more information because you are considering being a user of our technology or services).

Third-Party Integrations

When you connect a third-party social media account to TicketFlo for marketing purposes, we receive and store data from that platform to enable posting on your behalf. The integrations we offer and the data they involve are:

Meta (Facebook & Instagram)

If you connect a Facebook Page or Instagram Business / Creator account, we use Meta's Graph API to publish content you create in TicketFlo. With your explicit consent during the OAuth flow, we request the following permissions and store the following data:

Permissions requested: pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish.
Data stored: your Meta user ID and name, the IDs and names of Pages you manage, page-level access tokens (encrypted at rest), and — if linked — the ID and username of your Instagram Business account.
How we use it: exclusively to publish posts and read engagement metrics on Pages and Instagram accounts you explicitly connected.
We do not: sell this data, share it with third parties, use it for advertising, or use it to train AI models.

You can revoke our access at any time in two ways:

Inside TicketFlo: Dashboard → Marketing → Social → click Disconnect next to the platform.
From Facebook: Settings & privacy → Settings → Apps and Websites → find TicketFlo → Remove. We are notified automatically and your tokens are invalidated.

Payment Processors

Card payments are processed by Stripe and Windcave. We do not store full card numbers; tokenized references are held by the processors under their own privacy policies.

Your Data Deletion Rights

You may request deletion of your TicketFlo account and associated data, including any connected social media tokens, by emailing [email protected] or by visiting our data deletion page.

If you remove the TicketFlo app from your Facebook account, Meta sends us an automated notification and we immediately revoke any stored access tokens for your account. To additionally delete your TicketFlo-side records of those connections, follow the data deletion process above.

Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected]