Solutions
Industries
Resources
About
atVenu, Inc. ("atVenu" or "we") respects your privacy and is committed to protecting it through our compliance with this policy.
This policy describes the types of information we may collect from you or that you may provide when you visit atvenu.com or any other website operated by atVenu (together, our "Website"), use our Mobile Orders service, or use our applications such as Register and Artist Manager, and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This policy applies to information we collect through our Website, our applications, and email, text, and other electronic communications between you and atVenu, and to information we receive about you from third parties, as described below. It does not cover how other companies, such as the artists, venues, and vendors we work with, handle your information on their own websites or services. Their own privacy policies apply.
By accessing or using our Website or Services, you agree to this policy. Please read this policy carefully so that you understand how we handle your information. If you do not agree with our policies and practices, do not use our Website or Services. Where the law requires your consent before we do something, we ask for it separately.
atVenu participates in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as set forth by the U.S. Department of Commerce. When we receive personal data in the United States from the European Union, the United Kingdom, or Switzerland in connection with our products and services, we handle it according to the DPF Principles, as reflected throughout this policy. You can confirm our current certification at any time on the official DPF List: dataprivacyframework.gov/list. For personal data we receive under the DPF, we follow the DPF Principles. If anything in this policy conflicts with those Principles, the Principles take priority. To learn more about the DPF program, visit dataprivacyframework.gov.
This policy covers our general privacy practices for customers, event-goers, and other visitors. If you are an atVenu employee, contractor, or consultant, our separate Internal Privacy Policy applies to your information instead of this one.
For our Website, our account and subscriber data, and our own marketing, atVenu decides why and how your information is used. In legal terms, we are the "controller." This includes information about our customers and their users, such as account details, billing information, and how they use our Services.
Artists, venues, festivals, and event organizers use our point-of-sale, mobile ordering, and inventory tools to run their businesses. Information processed through those tools for the customer's purposes is controlled by that customer. That includes purchases made by fans and event-goers, and the customer's own sales, inventory, and settlement records. The customer decides why and how that information is used, and atVenu processes it on their behalf and according to their instructions. In legal terms, we are their "processor."
Even when we process information for a customer, we may also use some of it for limited purposes of our own. When we do, atVenu is the controller for that use. These purposes are:
Our Website and account services are not intended for anyone under 16. We do not knowingly collect personal information from anyone under 16. If we learn we have collected or received personal information from a child without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child, please contact us at the email listed at the end of this policy.
We collect several types of information from and about users of our Website and Services, including:
We collect this information directly from you when you provide it to us, automatically as you use our Website and applications, and from third parties, such as our business customers who use our Services (for example, when they add their staff as users of their account), our payment processors (for example, payout and transaction status), and our analytics providers.
For individuals using atVenu's Mobile Orders service at a live event, all cookies used as part of the Mobile Orders service are strictly necessary for the service to function properly. The third-party cookies are required by our payment processing partner(s). Declining or disabling these cookies through your mobile device settings may result in the Mobile Orders service not functioning properly, or at all.
In the past 12 months, we have collected the following categories of personal information:
We collect these categories from the sources described above, use them for the purposes described in "How We Use Your Information," and disclose them to the recipients described in "Disclosure of Your Information." We keep each category for the periods described in "How Long We Keep Your Information."
We share identifiers (such as IP address and cookie identifiers) and internet activity (such as pages visited) with advertising partners for targeted advertising, and only if you allow advertising cookies. Some laws may also consider this a "sale." We do not sell or share any other category of personal information.
We use information that we collect about you or that you provide to us, including any personal information:
We may also use your information to contact you about our goods and services that may be of interest to you. If you do not want us to use your information in this way, please see the choices available to you in "Choices About How We Use and Disclose Your Information" below.
No matter where you are, we rely on the same reasons to use your information: a contract with you, our legitimate interests, a legal obligation, or your consent. A contract with you means we process your information to provide the services you have asked for, including supporting your account. Our legitimate interests cover running, securing, and improving our Website and Services, understanding how people use them, and promoting them to business customers, and we rely on this only where it does not override your own rights. A legal obligation covers things like tax, accounting, and law enforcement requirements. And your consent covers things like non-essential cookies, which we ask for before we use them. If we are relying on legitimate interests, you can ask us for a summary of how we weighed that.
Across all the personal information we collect, regardless of where it comes from, we limit what we process to what is relevant for the purposes described above, and we do not use it in ways that are incompatible with those purposes. We take reasonable steps to keep it accurate, complete, and current.
Some information is required to provide the Services or to meet legal obligations. For example, we need contact and payment details to set up and bill a customer account, and certain transaction details to meet tax and fiscalization rules. If that information is not provided, we may not be able to provide the Services requested. Where providing information is optional, we will tell you.
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
We may disclose personal information that we collect, or you provide, as described in this policy:
Beyond the recipients listed above, we will not disclose your personal information to any other kind of third party, or use it for a purpose that is materially different from those described in this policy, without first telling you and giving you the chance to opt out.
When we share personal information with a service provider or business partner, we require them, by contract, to protect it appropriately, to use it only for the purposes we've authorized, and to tell us if they can no longer meet that standard so we can act. If a partner fails to meet that standard, we will take appropriate steps to address it, which may include requiring them to remediate the issue or ending our relationship with them.
This accountability comes with a specific complaint process for personal data we receive from the European Union, the United Kingdom, or Switzerland: under the DPF Principles, if one of our partners handles that information in a way that is inconsistent with these commitments, atVenu remains responsible unless we can show we were not responsible for the event that caused the harm. See Questions, Concerns, or Complaints below for how to raise a complaint under this process.
atVenu is based in the United States, and we store and process personal information in the United States, wherever you are located. Some of our service providers may also process it in other countries. Wherever your information is processed, we protect it as described in this policy. However, while it is held outside your country, it is subject to the laws of the country where it is held, and courts, law enforcement, and national security authorities there may be able to access it.
When we transfer personal information from the European Union, the United Kingdom, or Switzerland to a service provider in a country that does not provide an adequate level of protection, we rely on the European Commission's Standard Contractual Clauses (or the UK or Swiss equivalent) or another lawful transfer mechanism. You can ask us for a copy of the relevant safeguards.
We currently use two third-party payment processors, Braintree and Stripe. When you use our Website and Services, Braintree and Stripe may request additional personal data, including credit card information, postal code, and bank account information, and any other information they need to complete the services you request from them. PayPal, Apple Pay, and Google Pay are facilitated through Braintree and Stripe.
For EU transactions, we also use Fiskaly, a third-party cloud fiscalization and infrastructure provider, to securely process, format, and log transaction metadata (such as transaction amounts, timestamps, and terminal identifiers) so that we can comply with local tax and financial regulations.
If you transacted using a third-party payment processor on one of our Websites or in one of our applications, you may need to contact that processor directly for assistance in exercising your privacy rights over the information you gave them, in addition to contacting atVenu.
For more information on how these providers use and protect your information, please see their privacy policies:
When you make a purchase at a concert, festival, or other live event using atVenu's point-of-sale or mobile ordering technology, the artist, venue, festival, or event organizer you purchased from, not atVenu, is the merchant of record for that transaction. atVenu provides the software and payment processing technology used to sell to you, but the merchant of record is responsible for the products or services you purchased, and owns the transaction record and receipt for that purchase.
You may see atVenu's name or support contact information on your credit card or bank statement next to a charge from an event, because atVenu's technology powers that transaction. That does not mean atVenu is the seller.
If you have a question about a specific purchase, such as what you bought, the amount charged, or a request for a copy of an itemized receipt, please contact the artist, venue, festival, or event organizer you purchased from.
We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to give you the following control over your information:
We do not seek out special categories of personal information, and our Services are not designed to collect them. If that ever changes, we will ask for your express consent before using or disclosing that information.
You can review and change certain personal information, such as your name, email, phone number, and password, by logging into the Website and visiting your account profile page.
We cannot delete your personal information except by also deleting your user account. We may not be able to accommodate a request to change information if we believe the change would violate any law or legal requirement, cause the information to be incorrect, or is needed to address fraud or fraudulent activity.
We offer the following rights to everyone who uses our Website and Services, wherever you live, except where the law requires us to do something different. We will not treat you differently for using any of them. You can ask us to:
We do not use automated systems on their own to make decisions that would have a real legal or similar impact on you, such as denying you a service, and we do not carry out profiling of that kind.
We do not sell personal information for money. Some laws, including California's, treat our use of advertising cookies (see "Choices About How We Use and Disclose Your Information") as "selling" or "sharing" personal information. We do not knowingly sell or share the personal information of anyone under 18.
We will respond to your privacy requests without undue delay and in any event within one month of receiving your request. There is no charge for making a request or for our response.
In limited cases, we may not be able to provide full access to your information, for example where doing so would be disproportionately burdensome or expensive given the privacy risk involved or would violate someone else's rights. If we limit your access on one of these grounds, we will explain why and give you a contact point for follow-up questions.
To exercise any of these rights, please email us at privacy@atvenu.com. If you are a California resident, you may also call us toll-free at (888) 668-6126.
Before we act on a request, we will verify your identity by matching information you give us with information we hold. If you have an account, we may ask you to log in. You can use an authorized agent to submit a request for you, subject to verification.
If we decline to act on your request, you can appeal by emailing privacy@atvenu.com with the subject line "Privacy Request Appeal." We will respond to your appeal in writing within one month and explain our decision. If we deny your appeal, you can complain to a privacy regulator, as described under "Questions, Concerns, or Complaints" below.
If your request concerns information we process for a customer, such as a purchase record from a specific event, we will promptly pass it to that customer and help them respond (see "Purchases at Events: Our Role as a Service Provider").
We use administrative, technical, and physical safeguards designed to protect your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Any payment transactions are subject to the technical rules and protections of our third-party payment processors.
Where we have given you (or you have chosen) a password to access certain parts of our Website or Services, you are responsible for keeping that password confidential. Unfortunately, the transmission of information over the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website or through our Services.
If a personal data breach occurs that is likely to put your rights at risk, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it. If the breach is likely to be high risk for you, we will tell you directly without undue delay. Where we are handling information on behalf of an artist, venue, festival, or event organizer, we will notify that customer without undue delay so they can meet their own obligations.
We keep your personal information, in a form that identifies you, only for as long as it serves a purpose consistent with why we collected it, as described in this policy. Where we must keep information for longer to comply with a legal obligation, or to establish, exercise, or defend a legal claim, we keep it for that period and then delete it.
It is our policy to post any changes we make to this policy on this page, with a notice that the policy has been updated on the Website home page. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account and through a notice on the Website home page. The date this policy was last revised is identified at the top of this page. You are responsible for making sure we have an up-to-date, deliverable email address for you, and for periodically checking this policy for changes before you access our Website or use our Services.
atVenu has named a Privacy Officer who is responsible for protecting personal information within our organization. This includes answering requests to exercise your privacy rights and handling privacy complaints.
To ask questions or comment about this privacy policy and our privacy practices, or to register a complaint or concern, please email our Privacy Officer at privacy@atvenu.com, with the subject line "Privacy Question" or "Privacy Complaint" as applicable, and please include enough detail for us to look into it, such as the date and nature of your concern. We will respond to complaints about personal data received in reliance on the Data Privacy Framework within one month.
You can also reach our Privacy Officer by mail at:
Manager, Privacy & Compliance
atVenu, Inc.
927 Calle Negocio, Suite J
San Clemente, CA 92672
You also have the right to complain to a privacy regulator at any time. You do not have to raise your concern with us first, although we would welcome the chance to resolve it. Depending on where you live, the regulator is:
This right is separate from, and in addition to, the Data Privacy Framework recourse described below.
If you are located in the European Union, the United Kingdom, or Switzerland, you have the additional recourse described below, reflecting our commitments under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. These independent recourse mechanisms are available to you free of charge.
The U.S. Federal Trade Commission has jurisdiction over atVenu's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, atVenu commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC), with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
If your complaint cannot be resolved through our internal process, we will refer the dispute to the EU DPAs, the ICO, or the FDPIC, as applicable, and will follow their advice on bringing our practices in line with the DPF Principles, including any remedial steps they recommend.
If, after raising a concern with us directly and then with the relevant authority (the ICO, an EU data protection authority, or the Swiss FDPIC), your complaint is still not resolved, you may, in limited circumstances, be able to invoke binding arbitration under the DPF Principles for individual relief. This arbitration option does not provide for monetary damages and is not available for every type of dispute. You can learn more about this process at dataprivacyframework.gov. If you are not located in the European Union, the United Kingdom, or Switzerland, this arbitration option does not apply to you; please use the general contact information above instead.
Last updated: October 15, 2026
