Privacy policy
This describes what a standard Palco deployment stores and why. Adapt it to your jurisdiction and your actual processors before publishing.
What we collect
Account holders: email address, name and an optional avatar. Buyers: the name, email and optional phone given at checkout, plus the contents and status of the order. Door staff: a log of each scan, recording which member of staff scanned which ticket and when.
What we do not collect
Card numbers never reach the platform. When a payment provider is configured, card details go directly to that provider and only a payment reference is stored.
Who can see your data
Buyer details for an order are visible to the organizer of that event and to nobody else. This is enforced by row-level security in the database, not only by the interface — one organizer cannot read another organizer's orders, attendees or revenue even through a direct API call.
How long we keep it
Orders and tickets are retained while they are needed for accounting and dispute resolution. Check-in logs are retained for the run of the event plus a reasonable audit window. Delete your account and personal fields are removed from your profile.
Your rights
You can request a copy of your data, ask for corrections, or ask for deletion. For orders, contact the organizer named on the event first — they are the controller for that transaction.
Cookies
A session cookie keeps you signed in. A preference cookie remembers your light or dark theme. No advertising or cross-site tracking cookies are set.