Privacy Policy

Effective date: 17 July 2026

This policy explains what SEATMINDER LLC (“SeatMinder”, “we”, “us”) collects when you use SeatMinder, why we collect it, who sees it, and the control you have over it. It covers app.seatminder.com and seatminder.com.

1. What we collect

You give us

• Account: your name, email address, password (stored only as a salted hash, so we never see it), time zone, and your profile picture if you upload one.
• Season tickets: the team, league, season and seats you manage, and the people you invite to them.
• Contacts: names and email addresses of the people you share seats with, plus anything you choose to add yourself, such as a note or their favourite teams. We do not collect their phone numbers. See section 2.
• Attendance: who was invited to which game, who replied, and which seats were used.
• Support and feedback: what you send us, including any screenshot you attach. A screenshot may capture whatever was on the page.
• Payments: handled by our payment gateway. We receive a record that a payment succeeded and its amount. We never receive your full card number.
• Consent: the date you accepted these documents and which version, so we can show we asked and you agreed.

We collect automatically

• Usage: pages visited and actions taken in the app.
• Device and connection: IP address, browser and device type. Your IP is used to rate-limit sign-ins and other sensitive requests, and is deleted after about 24 hours. See section 7.
• Security: sign-in attempts, verification codes, and the activity log we keep to investigate problems and abuse.

2. Information about other people

When you add a contact, you are giving us someone else’s personal data. You are responsible for having a proper basis to share it, and for making sure they would expect to hear from you about your seats.

We use those details only to do what you ask: send an invitation, record a reply, show you who is coming. We do not market to your contacts, sell their details, or use them to build a profile. Their email addresses are encrypted in our database, and searching them uses a one-way index rather than the plain values.

If someone asks us to remove their details, we will pass the request to you or act on it directly.

3. Why we use it

• To run the Service: your season tickets, invitations, replies and calendar.
• To send transactional email you have asked for: verification, sign-in codes, invitations, reminders, receipts.
• To take payment and manage renewals.
• To keep the Service secure: detect and investigate abuse, fraud and technical problems.
• To support you when you contact us.
• To improve the Service by understanding, in aggregate, which parts are used.
• To meet legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

4. Our lawful bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, data protection law requires us to have a specific legal reason for using your personal data. Ours are:

• To perform our contract with you. The contract is our Terms of Service, which you accept when you create an account. We cannot run your season ticket, send the invitations you ask for, or take payment without using your data, so this covers most of what we do.
• Our legitimate interests. To keep the Service secure and prevent abuse, and to understand which parts are used so we can improve them. We have weighed these against your rights and privacy.
• Your consent. Where we ask for it, such as non-essential cookies. You may withdraw it at any time, which does not affect anything we did while it was given.
• Legal obligation. Where the law requires us to keep or disclose something, such as payment and tax records.

5. Who we share it with

We share personal data only with:

• The people you choose: those you invite to a season ticket see the games, the seats and who is coming.
• Service providers acting on our instructions: Amazon Web Services (hosting and email delivery, United States) and our payment gateway. They may use your data only to provide their service to us.
• Sponsors: if you redeem a sponsor code, the sponsor is told that a code was redeemed and when. They do not receive your contacts, your seats, or the personal data of anyone you invite.
• Authorities: where we are legally required, or where it is necessary to protect someone’s safety or our rights.
• A successor: if we are involved in a merger, acquisition or sale of assets, your personal data may transfer to the new owner. We will tell you immediately upon any change of control, and in any event before your data becomes subject to a different privacy policy. If you do not want your data to continue under new ownership, you can export it and delete your account at any time.

6. How we protect it

Data is hosted in the United States. It is encrypted in transit (HTTPS) and at rest. Passwords are stored only as salted hashes. Contact details are encrypted at the field level with keys held separately from the database. Sign-in requires a code sent to your email in addition to your password.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant regulator as the law requires.

7. How long we keep it

• Account and content: for as long as your account exists.
• Security data: the IP address behind a sign-in or other rate-limited request is kept for about 24 hours and then deleted automatically. We use it to stop brute-force attempts and abuse, never to track you. Sign-in codes are deleted within days of being used.
• Activity log: the record of actions taken on your account is kept for up to 12 months, so we can investigate problems and abuse.
• Deletion is immediate and cannot be undone: when you confirm, we erase your personal data straight away. Your name, email address, password and profile picture are overwritten, and your contacts and notifications are deleted. There is no grace period and no way for us to bring the account back, so export anything you want to keep first.
• What survives: an anonymous record with no personal data in it, so that shared season tickets and totals do not break for the people you shared with. It cannot be traced back to you or signed into.
• Backups: may retain data for a short period after deletion before they expire on their normal schedule.
• Records we must keep: payment and tax records, and records of your consent, are kept as long as the law requires even after deletion.

8. Your rights and choices

Wherever you live, you can:

• Access and export everything we hold about you, from Settings → Privacy → Export.
• Correct your details in Settings → Account.
• Delete your account and data from Settings → Account.

If you are in the EEA or UK, you also have the right to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority. If you are in California, you have the right to know, delete, correct, and to opt out of sale or sharing, neither of which we do, and we will not discriminate against you for exercising any right.

9. Cookies and tracking

We use cookies that are strictly necessary to run the Service: they keep you signed in and protect the sign-in form. These cannot be turned off without breaking the app, and they do not track you across other sites.

We do not currently use advertising or cross-site tracking cookies. If that changes, we will ask for your consent first where the law requires it. We do not currently respond to browser Do Not Track signals, as there is no common standard for them.

10. Advertising

Free season ticket accounts may show ads. Paid season ticket accounts are ad-free.

Some ads promote SeatMinder itself. Others promote a third party who has paid us for the space, and those are labelled Sponsored so you can tell the difference.

Either way, we serve the ads ourselves and the advertiser gets nothing about you. We do not share your personal data with advertisers or ad networks, we do not use third-party ad or tracking scripts, and which ad you see is not based on your behaviour, your profile, or anything you have done in the app. An advertiser buys the space, not you.

If we ever change this, for example by working with an ad network or personalising ads, we will say so here before it happens and ask for your consent where the law requires it.

11. Where your data is processed

SEATMINDER LLC is based in the United States, and all of our systems and service providers are in the United States. Your data is stored and processed there.

If you are in the EEA or the UK, this means the service you are signing up to is a US one, and using it involves your data going to the United States. You are providing it to us directly. We are not certified under the EU-US Data Privacy Framework, so no adequacy decision covers us.

Our service providers process your data only on our instructions, under their own data-processing terms, and only to provide their service to us. See section 5 for who they are and section 6 for how the data is protected.

12. Children

SeatMinder is for adults. You must be 18 or over to create an account, and we ask you to confirm that when you sign up and whenever you accept updated terms.

We do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it. If you believe a child has given us their data, email hello@seatminder.com and we will remove it.

Note that the people you invite are your contacts, not our users. You are responsible for who you add. See section 2.

13. Changes to this policy

We may update this policy. The new version will be posted here with a new effective date, and we will ask you to accept it the next time you sign in. If a change is significant, we will make that clear rather than leaving you to spot it.

14. Contact us

SEATMINDER LLC
PO Box 1187
Lakewood, CA 90714, USA
hello@seatminder.com

We have not yet appointed a representative in the EEA and UK under Article 27 GDPR. Until we do, please contact us at the address above.