Privacy policy

Who we are and what this policy covers

EventTix is a Shopify event-ticketing app operated by midorry. This policy explains how EventTix processes information when a Shopify merchant installs and uses the app. The merchant controls attendee and customer data submitted through its store; midorry processes that data to provide EventTix.

Information we process

EventTix processes the information needed to run the service:

• Shopify shop and authentication data, including the shop domain, access and refresh tokens, granted scopes, and available Shopify user profile fields.
• Merchant-supplied event, venue, schedule, ticket type, inventory, reminder, email, and terms settings.
• Order and ticket data, including Shopify order and line-item identifiers, buyer email, attendee name and email when supplied, signed ticket codes, delivery status, and check-in timestamps.
• Staff check-in link records, background-job state and errors, and records of Shopify privacy requests.

How we use information

We use this information to create inventory-backed event products, issue and deliver tickets for paid orders, retry failed deliveries, send reminders, display hosted tickets, operate door check-in, report delivery status, archive ended events, provide billing features, and respond to privacy requests. Order identifiers are also used to avoid issuing the same ticket twice.

EventTix does not sell personal information or use attendee data for unrelated advertising.

Service providers and disclosures

Shopify supplies shop, product, order, subscription, and webhook data. EventTix is hosted on Railway and uses Railway Postgres for application data. Production ticket email is delivered through Resend, which receives the recipient address and the event, venue, ticket-link, and ticket-content information required to send the message.

We may disclose information when required by law, to protect the service and its users, or to a successor involved in a merger, acquisition, or transfer of the EventTix business, subject to appropriate safeguards.

Retention and deletion

Event, ticket, delivery, check-in, job, setting, session, and privacy request records are retained while needed to provide the service and preserve admission and delivery history. Completed and archived events are not automatically deleted.

Shopify customer-redaction requests clear matching attendee names and attendee email addresses while retaining ticket and order records needed for admission integrity. Shopify shop-redaction requests delete the shop's events, tickets, check-in links, jobs, settings, privacy-request records, and remaining sessions. Uninstall also removes Shopify sessions.

Security and international processing

EventTix signs hosted-ticket codes, authenticates Shopify webhooks, and restricts merchant administration routes to authenticated Shopify users. No internet service can guarantee absolute security. Because our service providers may operate in multiple countries, information may be processed outside the merchant's or attendee's country under the safeguards used by those providers.

Your choices and requests

Attendees should normally contact the Shopify merchant that collected their information. Merchants and data subjects may also contact midorry about access, correction, deletion, or other privacy questions at info@midorry.com. We may need information that identifies the relevant shop or order before we can respond.

Changes to this policy

We may update this policy as EventTix or its legal obligations change. The date at the top shows when the current version took effect. Material changes will be communicated through an appropriate service channel.