Privacy Policy

1. Information We Collect

Account information: Name, email address, and optional profile details when you create an account.

Collective information: Collective name, city, description, social media handles, and member details.

Event data: Event titles, dates, venues, ticket tiers, pricing, and flyer images.

Payment information: Processed securely by Stripe. We do not store credit card numbers. We receive transaction confirmations including amounts and buyer email addresses.

Attendee data: Name, email address, phone number, check-in status, and attendance history of ticket purchasers and people who mark themselves Interested in events.

Interest data: When you mark yourself Interested in an event, we collect your email address and name, plus optional phone, Instagram, and city details you provide. Interest alone grants no communication permission. Event and collective marketing email/text choices are separate and optional. Buying a ticket also records you as interested in that event.

Usage data: Pages visited, features used, and interactions with the Platform for improving the service.

1a. Interest & Ticket Consent — Sharing With Event Organizers

When you mark yourself Interested in an event or purchase a ticket on Nocturn, you expressly consent to Nocturn sharing the following information with the event organizer (the collective, promoter, or individual running that event):

• Your name (if provided)
• Your email address
• Your phone number (if provided)
• Your interest in the event and/or your ticket purchase
• Check-in / attendance status on the night of the event

Organizers use attendee information to resolve orders, send essential event changes, and reconcile the door. Lineup announcements, offers, and other promotions require a separate event- or collective-marketing opt-in for the selected channel. Marking yourself Interested does not make you an operational attendee. You may withdraw marketing choices using the controls described below.

What other attendees and the public can see: On the public event page, only your first name and last initial (e.g. “Maya K.”) appear in the Interested list, alongside the total interested count. Your email address, phone number, and full last name are never shown publicly and are never shared with other attendees.

Your controls: If you have a Nocturn account, you can withdraw your interest at any time from the event page — withdrawal removes your contact details from that event's interest list. You can request that an organizer remove you from their attendee list by contacting them directly, or contact us at support@trynocturn.com and we will pass the request on.

2. How We Use Your Information

• To provide and maintain the Platform
• To process ticket purchases and provide financial records
• To send transactional emails (ticket confirmations, event updates, P&L reports)
• To send narrowly scoped service texts when a ticket buyer voluntarily supplies a phone number beside the operational disclosure
• To send event or collective marketing only for each scope and channel you separately select
• To share Interested and ticket purchaser information with the relevant event organizer, as described in Section 1a
• To display first name + last initial and the interested count on public event pages
• To power AI features (content suggestions, financial forecasts)
• To improve the Platform based on usage patterns
• To communicate updates about the service

3. Data Isolation

Each collective's data is isolated using row-level security in our database. Members of one collective cannot access another collective's data unless explicitly shared (e.g., co-hosted events).

4. Third-Party Services

• Stripe — Payment processing (Stripe Privacy Policy)
• Supabase — Database and authentication hosting
• Vercel — Application hosting and analytics
• Resend — Transactional email delivery
• Twilio — Text-message delivery, routing, and opt-out processing (Twilio Privacy Notice)
• Anthropic — AI features (no personal data sent to AI models)
• Sentry — Error monitoring (no personal data included in error reports)

We do not sell mobile phone numbers or SMS opt-in data. We do not share them with third parties for those third parties' own marketing. We disclose them only to the relevant event organizer as described in Section 1a, to service providers that deliver the requested communication on our behalf, or when required by law. SMS consent records themselves are not shared with unrelated third parties.

5. Data Retention

We retain your data for as long as your account is active. You may request deletion at any time by contacting us. Event and financial records may be retained for up to 7 years for tax and legal compliance.

6. Your Rights

• Access: Request a copy of your data at any time
• Export: Export your event, attendee, and financial data
• Deletion: Request deletion of your account and associated data
• Correction: Update or correct your information
• Opt-out: Manage event/collective email and text marketing independently; reply STOP to block the operational or marketing sender you replied to and HELP for help

7. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security for data isolation, secure authentication, and encrypted payment processing via Stripe. No system is 100% secure, and we cannot guarantee absolute security.

8. Cookies

We use essential cookies for authentication and session management. We use Vercel Analytics for aggregate usage data. We do not use third-party advertising cookies.

9. Children

The Platform is not directed to children under 18. We do not knowingly collect personal information from minors.

10. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

11. Contact

Questions about your privacy? Contact us at support@trynocturn.com.