Privacy Policy

BlueBoxOffice, LLC, a North Carolina limited liability company (“BlueBoxOffice,” “we,” “us”), is committed to protecting your privacy. This policy explains what information we collect, how we use and share it, and your choices.

This policy applies to our websites, including blueboxoffice.com and app.blueboxoffice.com, our launch and early-access campaigns, and our ticketing services. Our services are intended for use in the United States in connection with U.S. events.

1Information We Collect

• Account information: Your name, email address, and hashed password when you register, together with your account settings and preferences.
• Marketing and early-access information: Your email address, whether you identify as an event organizer or ticket buyer, any other information you choose to provide, and records of your subscription and privacy choices.
• Order information: Your checkout contact information, ticket selections, order history, and payment, refund, and dispute information received from Stripe. We do not store your full payment-card number. Payment processing is handled by Stripe.
• Organizer information: Your organization name, contact information, published event content, and information associated with your Stripe Connect account and payouts. Stripe may collect additional business, identity, tax, and banking information directly for onboarding, verification, and payment processing.
• Usage and campaign information: Your IP address, browser and device information, pages visited, interactions with our websites, referring website, and campaign parameters. We may associate campaign information with your subscription or account to understand which campaigns lead to organizer registrations, published events, and ticket sales.
• Communications and submitted content: Information you provide when contacting us, using our support assistant, submitting event materials for import, responding to surveys, or otherwise communicating with us.
• Email engagement: Information about whether marketing emails are opened and links are clicked, where those measurement features are enabled.

We receive information directly from you, automatically through your use of our services, and from service providers such as payment processors and email providers.

Children’s information: Our services and marketing campaigns are not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action, including deletion where required. An adult purchasing tickets for a child should provide the adult’s contact information and avoid submitting unnecessary information about the child.

2How We Use Your Information

We use information to:

• Process ticket purchases, deliver tickets and confirmations, and manage refunds and payment disputes.
• Authenticate users, maintain accounts, and remember preferences.
• Communicate about purchased events, including changes and cancellations.
• Support organizers, publish events, and process payouts through Stripe.
• Respond to inquiries and provide support, including through our AI-assisted features.
• Send launch announcements, early-access invitations, onboarding information, and other marketing communications you subscribe to.
• Understand website and email engagement, evaluate campaigns, and improve our services.
• Understand how campaign leads become organizers and use our platform.
• Detect fraud, prevent misuse, maintain security, and enforce our terms.
• Meet legal, tax, accounting, and other applicable obligations.

Creating an account or purchasing a ticket does not automatically subscribe you to promotional emails. Where we use email confirmation, promotional subscription messages begin after you confirm your subscription.

3Information Sharing

We share information as described below:

• Event organizers: When you purchase tickets, we provide your email address and ticket information to the organizer responsible for that event for admission, event administration, and related communications. Organizers are responsible for their own handling of information they receive. Their separate privacy notices may apply. Purchasing a ticket does not automatically subscribe you to an organizer’s promotional mailing list.
• Stripe: For payment processing, organizer onboarding, verification, fraud prevention, refunds, and payouts. Stripe also processes information for its own legal and operational purposes, as explained in Stripe’s Privacy Policy.
• SendGrid: For transactional email delivery.
• Mailchimp: For subscription management, marketing email delivery, and email engagement reporting.
• Microsoft Azure: For cloud hosting, storage, and infrastructure.
• Cloudflare: For network security, content delivery, and protection against automated or abusive submissions.
• Google: For website analytics, location search suggestions, and Google Wallet pass generation when you choose to add a ticket to Google Wallet.
• Anthropic: For the support assistant and event-import features described below.
• Professional advisers and authorities: Where reasonably necessary for legal advice, compliance with law, responding to valid legal process, investigating fraud, or protecting rights and safety.
• Business transactions: Where necessary in connection with a proposed or completed merger, financing, acquisition, reorganization, or transfer of all or part of our business, subject to applicable safeguards and legal requirements.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.

AI features: Our support assistant and event-import features send support conversations and submitted event materials to Anthropic for processing. When you use the assistant while signed in, relevant account and order information may be included to help answer your questions. This information is not used to train third-party AI models. Please do not submit payment-card details, passwords, or unnecessary sensitive information through these features.

4Cookies and Similar Technologies

We use cookies and similar technologies for authentication, preferences, security, and analytics.

• Authentication and preferences: Session cookies and a persistent authentication cookie (bbo_auth) support sign-in. Other cookies remember your language (bbo_lang) and, if you request it, your email address on the sign-in page (bbo_remember_email).
• Security: Cookies such as bbo_af_web and bbo_sconv help protect forms and support conversations. Stripe uses cookies such as __stripe_mid and __stripe_sid to help detect payment fraud.
• Analytics: Google Analytics uses cookies such as _ga and _ga_* to help us understand website activity and performance.
• Email measurement: Marketing emails may contain tracking technologies that report opens and link clicks.

Your browser may allow you to block or delete cookies, although doing so can affect website functions.

We do not respond to legacy browser “Do Not Track” signals. We honor Global Privacy Control and other legally recognized opt-out preference signals as required by applicable law.

5Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, taking into account legal obligations, security needs, disputes, and your choices.

• Accounts: We retain account information while your account is active or otherwise needed to provide services, and until you ask us to delete it.
• Orders and payouts: We retain necessary transaction, refund, payout, and accounting records for at least seven years after the end of the tax year to which they relate, and longer where required by law or needed for an unresolved matter. These records are retained separately from account information and are not removed when an account is deleted. This retention does not apply to unrelated browsing or marketing information.
• Marketing subscriptions: We retain subscription information while you remain subscribed, and we retain evidence of your marketing consent for as long as necessary to demonstrate that our communications to you were lawful.
• Unsubscribe and privacy-choice records: We retain the minimum information needed to honor your choices and prevent unwanted marketing for as long as those records are necessary for that purpose.
• Support conversations: We retain support conversations for as long as needed to resolve your issue and to handle any related dispute, security investigation, or legal obligation.
• Security and administrative records: We retain security, error, and access logs for as long as needed to investigate and remediate incidents and to meet legal obligations. Administrative audit records of actions taken by our staff are kept as a permanent accountability trail and are not deleted on a routine schedule.
• Campaign information: We retain identifiable campaign-attribution information while it remains useful for understanding how campaigns lead to registrations and sales, and we may retain de-identified aggregate campaign results longer.
• Analytics: Google Analytics retains event and user information according to the retention period configured for our property. Aggregate reports may persist beyond that period.

We may delete information sooner when it is no longer needed or when required in response to a valid request. We may retain specific information longer where necessary to comply with law, preserve evidence, investigate an incident, or resolve a dispute. Information retained under an exception is restricted to the purpose supporting its retention.

Deleted information may remain in restricted backups until those backups expire, normally within 90 days. It is not used for ordinary business purposes during that period. If a backup is restored, applicable deletion instructions are reapplied.

6Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including HTTPS encryption and hashed passwords.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

Our providers may process information in the United States and other countries. Offering services for U.S. events does not mean that all information is stored or processed exclusively in the United States.

7Your Rights

Email marketing: You may unsubscribe using the link in any marketing email or by contacting us. Unsubscribing does not stop necessary communications about your account, purchases, refunds, or events.

Access, correction, and deletion: You may contact us to request access to, correction of, or deletion of your personal information. You do not need to create an account to make a request. Because we will not release or delete information without knowing that the request came from you, we verify it first: if you have a BlueBoxOffice account, make or confirm the request while signed in; if you do not, we will send a confirmation link to the email address associated with your records and act on the request once you use it.

Deleting your information removes your account information. Transaction and order records are kept as described in Data Retention.

Depending on your state of residence and applicable law, you may also have rights to obtain a portable copy of your information, opt out of certain profiling, limit or require consent for certain sensitive-information uses, or appeal a denied request.

To appeal a decision, email us with “Privacy Appeal” in the subject line. We will explain our decision and provide any additional information required by applicable law. Where permitted, an authorized agent may submit a request on your behalf, subject to appropriate verification of authority.

We respond within 30 days and explain any permitted extension. Some requests are subject to legal exceptions, including necessary retention of transaction records. We will not unlawfully discriminate against you for exercising your privacy rights.

Organizers and providers may independently hold information subject to their own obligations. Where appropriate, we will explain whether a request also needs to be directed to them.

8Changes to This Policy

We may update this policy as our services and practices change. We will revise the date above and notify you of material changes by email or a prominent notice on our websites, as appropriate.

Where required by law, we will obtain consent before using previously collected information for a materially different purpose. Updating this policy does not override your existing privacy choices.

9Contact

Questions about privacy or requests concerning your information may be sent to:

Email: hello@blueboxoffice.com

BlueBoxOffice, LLC
136 Lamplighter Circle
Winston-Salem, NC 27104