Privacy Policy

At FindVibe, your trust is the foundation of everything we build. We believe you should always know what data we collect, why we collect it, and how you can control it. This Privacy Policy is designed to be clear and transparent — not buried in legal jargon.

FindVibe is operated by FixAction Inc. (“FixAction,” “we,” “us,” or “our”), a corporation based in Seattle, Washington. This Privacy Policy explains what information we collect when you use the FindVibe platform, website, mobile application, and related services (collectively, the “Platform”), how we use and share that information, and the choices you have regarding your data.

By using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform.

Here is a brief summary of our privacy practices. For full details, please read the sections that follow.

We collect information in the following categories depending on how you interact with the Platform and whether you use it as an attendee, event organizer, or sponsor.

1.1 Account Information

When you create a FindVibe account, we collect:

• Name and email address (required)
• Password (stored only in hashed form using industry-standard cryptographic algorithms; we never store or have access to your plaintext password)
• Phone number (optional)
• City, zip code, and country (optional)
• Profile photo (optional)
• Authentication provider information (if you sign in via Google, we receive your Google user ID and email)

1.2 Demographic Information

You may optionally provide:

• Age range (18-24, 25-34, 35-44, 45-54, 55+)
• Gender (male, female, non-binary, or prefer not to say)
• Interests and music genre preferences (e.g., hip-hop, electronic, R&B, Latin)

This information is used to personalize your event recommendations and is never sold to third parties.

1.3 Purchase and Transaction Data

When you purchase tickets or interact with the checkout process, we collect:

• Order details, including event name, ticket tier, quantity, and total price
• Attendee name and email associated with each ticket
• Artist preferences selected during checkout (e.g., “coming to see” selections)
• Sale channel (online or at-door staff sale)
• UTM attribution data (source, medium, campaign, and content parameters that indicate how you found the event)

Payment information (credit card numbers, bank account details) is collected and processed directly by our payment processor, Stripe. FindVibe does not store, process, or have access to your full payment card details. We retain only the Stripe Payment Intent ID as a transaction reference.

1.4 Behavioral and Analytics Data

When you use the Platform, we automatically collect:

• Page views and screen views (which pages or screens you visit)
• Event views (which events you browse)
• Search queries
• Save and share actions (events you save or share)
• Cart and checkout activity (items added to cart, checkout started, completed, or abandoned)
• Sponsor ad impressions and clicks
• Notification delivery and interaction data (sent, delivered, opened, clicked)
• Time spent on pages (duration in seconds)
• Session identifiers (to group actions within a single browsing session)
• Referrer information (the page or source that directed you to FindVibe)

Analytics events are associated with your user ID if you are logged in, or with an anonymous session identifier if you are not.

1.5 Device and Technical Information

We automatically collect:

• User agent string (browser type, version, and operating system)
• IP address (stored in hashed form for ad impression tracking; not stored in plaintext for analytics)
• Device platform (web, iOS, or Android)
• Push notification tokens (if you opt in to push notifications, we store the device token and platform)

1.6 Acquisition and Referral Data

To understand how users discover FindVibe, we may collect:

• UTM parameters from your first visit (source, medium)
• Referral source (e.g., a sponsor name or advertising platform)
• Acquisition channel (e.g., event ad, social media, email)
• Registration cohort (the month you joined)
• First event (the event that prompted you to register)

1.7 Information Collected from Event Organizers

If you use FindVibe as an event organizer (tenant), we additionally collect:

• Organization name and contact email
• Stripe Connect account ID (for receiving payouts)
• Staff roster information (names, emails, and roles of staff you invite to your organization)
• Event details (venue name, address, lineup, ticket pricing, capacity)
• Financial records (revenue splits, expenses, vendor names, receipt uploads, payout details)

1.8 Information Collected from Sponsors

If you use FindVibe as a sponsor, we additionally collect:

• Company name, tagline, and description
• Logo and cover images
• Website URL
• Industry and location
• Public contact email and phone number
• Social media handles (Twitter, Instagram, Facebook, LinkedIn)
• Ad campaign creatives (images, alt text, click-through URLs)
• Campaign budget and spending data

2.1 Providing and Operating the Platform

• Processing ticket purchases and delivering digital tickets (including QR codes for event entry)
• Managing your account and authenticating your identity
• Sending transactional emails (order confirmations, ticket delivery, refund notifications)
• Enabling event check-in via QR code scanning
• Processing refunds and managing order disputes

2.2 Personalization and Recommendations

• Recommending events based on your genre preferences, purchase history, location, and browsing behavior
• Customizing the content and layout of your feed
• Suggesting relevant events when you search or browse

2.3 Sponsor Advertising

• Displaying sponsor advertisements within the Platform based on ad slot placements (banners, email, push notifications, in-app placements, ticket pages, confirmation pages)
• Measuring ad campaign performance through impression and click tracking
• Generating aggregated, AI-powered sponsor ROI reports that summarize campaign effectiveness (these reports use aggregated data and do not contain individual-level personal information)
• Targeting sponsor content based on affinity scoring derived from your interests, spending patterns, and location

2.4 Fraud Prevention and Security

• Calculating fraud risk scores on purchases using signals such as IP velocity, account age, and purchase patterns
• Flagging and reviewing orders with elevated risk levels
• Maintaining session security and detecting unauthorized access

2.5 Analytics and Platform Improvement

• Analyzing usage patterns to improve Platform features and user experience
• Conducting cohort analysis to understand user acquisition and retention
• Monitoring Platform performance and stability

2.6 Communications

• Sending push notifications about ticket confirmations, event reminders, and event updates (based on your notification preferences, which you may adjust at any time)
• Sending email communications related to your account and transactions

2.7 Organizer Operations

• Providing organizers with attendee data for the events they manage (see Section 4)
• Generating event profit-and-loss reports and financial summaries
• Facilitating staff management and role-based access for event operations

We do not sell your personal information. We share your information only in the following circumstances:

3.1 Service Providers

We engage the following third-party service providers who process data on our behalf:

Each service provider is contractually obligated to use your data only for the purposes of providing their services to FindVibe and to maintain appropriate security measures.

3.2 Event Organizers

When you purchase a ticket to an event, the event organizer receives:

• Your attendee name and email (as provided during checkout)
• Your ticket status (valid, used, refunded, cancelled)
• Check-in information (whether and when your ticket was scanned)
• Artist preferences selected during checkout

Organizers also have access to aggregated analytics about their events, including attendance statistics, revenue summaries, and scan breakdowns. See Section 4 for more information about organizer data ownership.

3.3 Sponsors

Sponsors receive aggregated campaign performance data including impression counts, click-through rates, and AI-generated ROI reports. Sponsors do not receive your individual personal information. Ad impression records contain only hashed IP addresses and user agent strings for deduplication purposes.

3.4 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or when we believe in good faith that disclosure is necessary to:

• Comply with applicable law or legal process
• Protect the rights, property, or safety of FindVibe, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

3.5 Business Transfers

If FixAction Inc. is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your information becomes subject to a different privacy policy.

Event organizers (“tenants”) on FindVibe maintain ownership of the attendee data collected through their events. This includes:

• Attendee names and email addresses associated with ticket purchases for their events
• Order and ticket data for their events
• Check-in and scan log data for their events
• Event-specific analytics and financial records

Organizers may use this data in accordance with their own privacy practices and applicable law. FindVibe provides organizers with tools to access and export their event data. Organizers are responsible for their own compliance with privacy laws when using attendee data outside the FindVibe Platform.

FindVibe retains a copy of this data to operate the Platform, provide customer support, process refunds, and fulfill our obligations to attendees.

5.1 Session Cookies

FindVibe uses session-based authentication. When you log in, we issue a JSON Web Token (JWT) that is stored on your device to maintain your authenticated session. This token expires after 15 minutes and is renewed using a refresh token that expires after 7 days.

5.2 Analytics Tracking

We collect behavioral analytics data (as described in Section 1.4) through our own first-party analytics system. We do not use third-party analytics cookies such as Google Analytics.

5.3 UTM Parameters

We capture UTM parameters from URLs (source, medium, campaign, content) to understand how users discover events and to attribute ticket sales to marketing channels. These parameters are stored with your order record and user profile.

5.4 Your Choices

• You may clear your browser cookies and local storage at any time, which will require you to log in again.
• You may disable push notifications through your device settings.
• You may adjust your notification preferences (ticket confirmations, event reminders, event updates) within your account settings.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Deletion Process

When you request account deletion, we perform a cascading deletion that:

1. Invalidates all active sessions
2. Deletes all saved events
3. Deletes all behavioral analytics events
4. Anonymizes ticket records (replaces your name and email with placeholder values to preserve financial records)
5. Deletes your user profile and personal information

Regardless of where you reside, FindVibe provides all users with the following rights:

7.1 Right to Access

You may request a copy of the personal information we hold about you. You can access most of your data directly through your account settings.

7.2 Right to Correction

You may update or correct your personal information at any time through your account settings, or by contacting us.

7.3 Right to Deletion

You may request deletion of your account and associated personal data. Upon receiving a verified deletion request, we will delete your data as described in Section 6, subject to any legal obligations that require us to retain certain records (such as financial transaction data).

7.4 Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format (JSON).

7.5 Right to Opt Out of Ad Targeting

You may opt out of personalized sponsor ad targeting by contacting us at support@findvibes.com. If you opt out, you may still see sponsor advertisements, but they will not be personalized based on your interests, spending patterns, or location.

7.6 Right to Opt Out of Automated Decision-Making

Our fraud detection system assigns automated risk scores to purchases. If a purchase is flagged or declined due to a high fraud score, you may request human review of the decision by contacting us.

7.7 Exercising Your Rights

To exercise any of these rights, please contact us using the information in Section 13. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

How to Opt Out

FindVibe provides multiple ways to manage your preferences:

• Account settings: Adjust notification preferences, personalization settings, and data sharing options directly from your profile.
• Email: Contact support@findvibes.com to opt out of ad targeting, request data export, or request account deletion.
• Device settings: Disable push notifications through your mobile device's system settings.
• Unsubscribe links: Every promotional email includes an unsubscribe link at the bottom.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information.

8.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

8.2 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.

8.3 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions permitted by law (such as completing a transaction, detecting security incidents, or complying with legal obligations).

8.4 Right to Correct

You have the right to request correction of inaccurate personal information.

8.5 Do Not Sell or Share My Personal Information

8.6 Right to Limit Use of Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes beyond those permitted under the CCPA/CPRA.

8.7 Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, a different quality of service, or be denied service for exercising your rights.

8.8 Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require verification that you have authorized the agent to act on your behalf.

8.9 How to Submit a Request

California residents may submit requests by contacting us using the information in Section 13. We will verify your identity by matching information you provide with information we have on file. We will respond to verified requests within 45 days, with a possible 45-day extension if necessary (with notice).

You may also email support@findvibes.com with the subject line “CCPA Request.”

FindVibe is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. The age ranges available during registration begin at 18-24.

If we learn that we have collected personal information from a person under 18, we will delete that information promptly. If you believe that a child under 18 has provided us with personal information, please contact us using the information in Section 13.

We implement technical and organizational security measures designed to protect your personal information, including:

• Encryption in transit: All data transmitted between your device and FindVibe is encrypted using TLS (Transport Layer Security)
• Encryption at rest: All data stored in our databases (DynamoDB, PostgreSQL, S3) is encrypted at rest using AWS-managed encryption keys
• Password security: Passwords are hashed using industry-standard cryptographic algorithms before storage; we never store plaintext passwords
• IP address hashing: IP addresses used for ad impression tracking are stored only in hashed form
• Access controls: Role-based access controls enforce the principle of least privilege across all Platform functions; multi-tenant data isolation ensures organizers can access only their own event data
• Session security: Authentication tokens have short expiration windows (15 minutes for access tokens, 7 days for refresh tokens)
• Fraud detection: Automated systems monitor for suspicious purchase activity
• QR code integrity: Ticket QR codes include cryptographic signatures to prevent forgery

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

FindVibe is operated from the United States. All data is processed and stored on servers located in the United States (AWS us-east-1 region).

If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. Data protection laws in the United States may differ from those in your jurisdiction.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: By using the Platform, you consent to the transfer of your personal information to the United States. We process your data on the legal basis of contractual necessity (to provide the services you have requested), legitimate interests (for fraud prevention and Platform improvement), and consent (for optional data such as demographic information and push notifications). You may withdraw your consent for optional data processing at any time.

If you are located in the EEA, UK, or Switzerland and wish to exercise rights under the General Data Protection Regulation (GDPR) — including the right to access, rectification, erasure, restriction of processing, data portability, or objection — please contact us using the information in Section 13. We will respond within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this policy;
• Notify you by email (if you have an account) or by posting a prominent notice on the Platform at least 30 days before the changes take effect.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should stop using the Platform and request deletion of your account.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a privacy concern, please contact us:

• Company: FixAction Inc.
• Email: support@findvibes.com
• Location: Seattle, WA, United States

For CCPA-specific requests, California residents may also email support@findvibes.com with the subject line “CCPA Request.”

We aim to respond to all privacy inquiries within 30 days of receipt.