1. Introduction
SATO ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ticket resale management platform.
2. Information We Collect
Account Information
- Email address
- Password (stored securely using bcrypt hashing)
- Preferred currency
Ticket & Business Data
- Ticket information (artist, venue, dates, prices, seat details)
- Purchase and sale records
- Commission and expense records
- Profit and ROI calculations
Integration Data
- Gmail app passwords (encrypted with AES-256)
- Discord webhook URLs (encrypted)
- Email content parsed for ticket imports
3. How We Use Your Information
- To provide and maintain our service
- To process your ticket imports from Gmail
- To calculate profits, ROI, and generate reports
- To send Discord notifications (if configured)
- To send account-related emails (verification, password reset)
- To improve our platform and user experience
4. Data Security
We implement industry-standard security measures to protect your data:
- Passwords are hashed using bcrypt (never stored in plain text)
- Sensitive credentials (Gmail app passwords, webhooks) are encrypted with AES-256
- All communications are encrypted via HTTPS/TLS
- Authentication uses secure HTTP-only cookies
- Database access is protected by Row Level Security (RLS)
5. Data Sharing
We do NOT sell, trade, or rent your personal information to third parties.
We may share data only with:
- Service providers necessary to operate our platform (Supabase for database, Brevo for emails)
- Legal authorities if required by law
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion, all your personal data and associated records (tickets, expenses, commissions) are permanently deleted from our systems.
7. Your Rights
You have the right to:
- Access your personal data
- Export your data (via CSV export features)
- Correct inaccurate information
- Delete your account and all associated data
- Disconnect third-party integrations at any time
8. Cookies
We use essential cookies only for authentication purposes. We do not use tracking cookies or share cookie data with advertisers.
9. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at: privacy@usesato.com