Privacy Policy

1. Who we are

PresaleHQ (“PresaleHQ,” “we,” “us,” or “our”) operates the website at presalehq.io and the related application (the “Service”), a tool that helps you track upcoming Ticketmaster presales and other on-sales. This Privacy Policy explains what we collect, why, and what choices you have. Questions? Email support@presalehq.io.

2. Information we collect

We keep data collection deliberately narrow:

• Account details. When you sign in with Google, we receive and store your name, email address, and profile image from your Google account. We do not receive your Google password.
• Your tracking data. The artists, venues, and presales you add or track, plus preferences such as your timezone and the card or membership access tiers you tell us you hold (used only to filter which presales we show you).
• Notification settings. If you choose to receive Discord alerts, the Discord webhook URL you provide. This value is encrypted at rest.
• Billing data (Pro). If you subscribe to Pro, our payment processor (Stripe) handles your card details. We receive and store only a Stripe customer identifier and subscription status/metadata — we never see or store your full card number.
• Essential session data. A sign-in session cookie so you stay logged in, and standard server logs (such as IP address and request metadata) kept for security and debugging.

We do not run advertising trackers or third-party analytics pixels, and we do not scrape your email inbox or contacts.

3. How we use your information

• To authenticate you and provide the Service.
• To surface the presales you care about and, where you've enabled them, to send you alerts (via Discord, and — if you opt in — web/push notifications).
• To process and manage your Pro subscription via Stripe.
• To operate, secure, debug, and improve the Service, and to communicate with you about it.
• To comply with legal obligations.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

4. Service providers we share with

We share data only with the processors needed to run the Service, each handling data on our behalf:

• Google — sign-in (OAuth) and identity.
• Stripe — subscription billing and payments.
• Discord — delivery of alerts to the webhook you configure (only if you set one up).
• Fly.io — application hosting and our PostgreSQL database.

We also read event and presale information from Ticketmaster's public Discovery API. That is an outbound, read-only data source — we don't send your personal information to it. We may also disclose information if required by law or to protect the rights, safety, and security of our users or the Service.

5. Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or analytics cookies, so there is no tracking- consent banner. If we ever add analytics, we will update this policy and provide appropriate controls.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account or ask us to remove your data, we delete your personal information, except where we must retain limited records to meet legal, tax, or security obligations (for example, billing records held by Stripe). Server logs are kept for a limited period and then rotated out.

7. Security

We protect data with industry-standard measures, including encryption in transit (HTTPS), encryption at rest for sensitive values such as your Discord webhook, and row-level database access controls that isolate each account's data. No method of transmission or storage is perfectly secure, but we work to protect your information and limit access to it.

8. Your rights and choices

You can review and update much of your data in the app, disconnect Discord alerts at any time, and cancel Pro from your billing settings. You may also request access to, correction of, export of, or deletion of your personal information by emailing support@presalehq.io.

Depending on where you live, you may have additional rights. If you are in the EEA/UK, you have rights under the GDPR (access, rectification, erasure, restriction, portability, and objection), and our lawful bases are performance of our contract with you, your consent (for optional alerts), and our legitimate interests in operating and securing the Service. If you are a California resident, you have rights under the CCPA/ CPRA, including to know, delete, correct, and opt out of “sale”/“sharing” — and we do not sell or share your personal information as those terms are defined. To exercise any of these rights, contact us at the email above.

9. Children

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

10. International users

We operate from the United States and store data on infrastructure located there. If you access the Service from outside the U.S., you understand your information will be processed in the U.S., which may have different data-protection laws than your country.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

12. Contact us

Questions or requests about this policy or your data? Email support@presalehq.io.