Privacy Policy

1. What we collect

• Account info — email, name, optionally phone number.
• Order info — events you bought, ticket quantity, dollar amount.
• Payment info — handled entirely by our payment processors. We never see or store your card number.
• Technical data — IP address and user agent for fraud prevention.
• Marketing preferences — your email/SMS opt-in/opt-out status. We honor unsubscribe requests immediately.
• Door scans — timestamp and outcome (accepted/rejected) for entry analytics. No biometric data.
• Event-day song requests — on the day of an event you have a ticket or RSVP for, we may send you one text with a private link asking which songs you would like to hear (reply STOP to stop texts). If you answer, we keep the songs you type, linked to your ticket or RSVP, to plan that night's music. Answering is optional and does not sign you up for marketing; your answers are not used for advertising.

2. Why we collect it

To deliver tickets, prevent fraud, communicate about events you attend, manage event marketing for the organizers you bought from, and run our business. We do not sell your personal data.

3. Service providers we share data with

VIVELO uses the following third-party services. We share only the minimum data required for each:

• Payment processors — payment processing and refunds.
• Transactional email providers — transactional email (ticket confirmations, event updates).
• Marketing email providers — marketing email delivery for promoter campaigns.
• Text-message providers — SMS delivery: texts about tickets and events you have a ticket or RSVP for, and marketing texts if you opt in.
• Event organizers — only the data needed to admit you (name, ticket type, scan status). Not your card or contact info except where you specifically opted into the organizer's marketing.
• Law enforcement — only when legally required.

4. Advertising platforms (custom audiences)

With your consent (granted by opting in to marketing communications when buying a ticket), event organizers may build custom audiences from their VIVELO contact list to retarget you with ads on supported social media platforms. Additional social media and search custom-audience integrations are not yet active.

When this happens, your email address (and phone number if provided) is one-way hashed before being sent to the ad platform. The ad platform uses these hashes to match you against their own user database. We never send unhashed personal data to ad platforms.

You can opt out of ad-platform targeting independently from any other marketing channel. Your advertising choice is separate from email and SMS preferences — unsubscribing from email or SMS will notautomatically opt you out of ad audiences (and vice versa). To opt out of ad targeting specifically, email [email protected]with the subject line “Ad opt-out”. We mark you as opted-out within 1 business day, and your hashed identifiers are removed from existing ad-platform audiences within 30 days. To opt out of marketing email or SMS, click unsubscribe in any marketing email or reply STOP to any marketing SMS.

5. At-the-door age verification (ID scanning)

When you arrive at a 21+ event, venue staff may scan your government-issued ID using a VIVELO scanner. This practice is authorized under California Civil Code §1798.90.1 for age verification and the prevention of fraud, abuse, and material misrepresentation.

We extract only your age and a one-way cryptographic fingerprint of your ID. Your name, date of birth, address, and license number are processed in memory and immediately discarded — they are never stored in our database. The fingerprint cannot be reversed back to your identity even if our database were compromised.

We retain the fingerprint for up to two years to:

• Detect duplicate ticket scans across events (anti-resale fraud)
• Enforce venue-level banned lists for safety
• Defend against payment chargebacks where the ID at the door verifies attendance

We never sell, share, or use this fingerprint for marketing. To request deletion of your fingerprint records, email [email protected].

6. Cookies and similar technologies

VIVELO uses these cookies:

• Session cookies for admin and customer login. Removed when you log out.
• Temporary connection cookies (10-minute expiry) when you connect VIVELO to a third-party service.
• Cart cookies for in-progress orders. Cleared after checkout.
• Analytics cookies — a visitor identifier stored for up to 400 days and a 24-hour session identifier, used to understand how people find and use the site (which pages, which events, how many visits before a purchase).
• Advertising and measurement tools — third-party analytics tools (Google Analytics 4) and, where enabled, social media advertising pixels (Meta and TikTok). These are set when you use the site and may be used to measure ad performance and to show you relevant ads on those platforms. VIVELO event sites on their own web addresses (for example corridosy2k.com) use the same Meta and TikTok pixels to measure visits and clicks on their ticket links and to show you ads for future events.

Third-party payment forms and embedded services may set their own cookies subject to their privacy policies.

Your choices

• Global Privacy Control. If your browser or extension sends the GPC signal, we automatically treat it as an opt-out of advertising and marketing tracking. You do not need to do anything else.
• On VIVELO event sites.Event sites on their own web addresses (for example corridosy2k.com) have a “Your privacy choices” link at the bottom of the page. Choose “Opt out” there to stop the Meta and TikTok pixels on that site in that browser; the site and its ticket link work the same either way.
• Browser controls. You can block or delete cookies in your browser settings. The site — including browsing events, checkout, and your tickets — continues to work normally.
• Ask us. Email [email protected] to opt out of advertising or marketing tracking and we will apply it to your records.

Buying a ticket, receiving it, and getting scanned at the door never require optional analytics or advertising cookies.

7. Your rights

Depending on where you live, you may have the right to access, correct, port, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email [email protected]. We respond within 30 days. Note: completed orders may be retained for accounting and legal reasons even after account deletion.

We do not sell your personal data. We have never sold it, we do not accept money for access to it, and we do not provide it to data brokers or list resellers. Everything we collect is used to run VIVELO — delivering your tickets, keeping our events safe, and marketing our own events to people who want to hear from us.

In the interest of being straight with you about how ad platforms work: when we advertise our events, we use Meta (Facebook/Instagram), TikTok, and Google advertising tools. Those tools receive irreversibly hashedversions of an email address or phone number (a scrambled code, not your actual address or number) so they can match existing customers, avoid showing you ads for an event you already bought, and measure whether an ad worked. California law defines “sharing” broadly enough that this activity may fall under it, even though no money changes hands and no one buys anything from us. You can opt out of it at any time — see Your choices in section 6 — and we honor the Global Privacy Control signal automatically.

We never share ID-scan data, date of birth, or door-security records with any advertising platform. Those are used only for entry, safety, and fraud prevention.

8. Data retention

• Order records — retained for 7 years for tax and audit purposes.
• Marketing preferences — retained until you withdraw consent or delete your account.
• Door scan logs — retained for 90 days.
• Song requests — your answers and your private link are deleted 90 days after the event. After that we keep only anonymous song totals for the event (a song and how many guests asked for it), with no link to you. Our record of the text message itself stays in our SMS delivery records like every text we send (your number and the message, with the private link removed).
• Authorizations for connected advertising accounts — retained until disconnected by the account holder.

9. Security

We use industry-standard encryption in transit and at rest. Administrator tokens are stored as one-way hashes. Our database accepts connections only from the same server. We monitor for unauthorized access and will notify affected users in the event of a breach as required by applicable law.

10. International data transfers

VIVELO is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.

11. Children

The Service is not intended for users under 13. Many of our events are 21+; the venue verifies age at entry. We do not knowingly collect data from children under 13.

12. Changes to this policy

We may update this policy occasionally. Material changes will be announced via email to active users at least 30 days in advance. The “Last updated” date at the top reflects the most recent revision.

13. Contact

For privacy questions or to exercise your rights, email [email protected].

VIVELO is operated by PERREO TECH, San Diego, California, USA.