Privacy Policy

Last updated: April 7, 2026

1. Introduction

TicketFlow ("we", "our", "us") operates the ticket-flow.net website and dashboard. This policy explains how we collect, use, and protect your personal data.

2. Data We Collect

Account information: Discord username, email address, and avatar (via Discord OAuth)
Google account data: Email address and access to Gmail (read-only) and Google Sheets (read/write) via Google OAuth
Gmail data: We scan your Gmail for ticket order confirmation emails from platforms like Ticketmaster, AXS, Eventim, SeeTickets, and Paylogic. We only read emails matching specific ticket platform senders.
Google Sheets: We create and manage a personal spreadsheet on your Google Drive to store your ticket inventory
Payment information: Processed by Whop (our payment provider). We do not store credit card details.

3. How We Use Your Data

To authenticate you via Discord
To scan your email for ticket order confirmations and import them to your personal inventory
To create and manage your personal Google Sheet with ticket data
To match sales from Viagogo and TicketSwap with your purchases
To provide the dashboard features you subscribed to

4. Data Storage & Security

Your data is stored on our secured server in Germany (Netcup GmbH)
Sensitive credentials (Gmail app passwords, Google tokens) are encrypted at rest using AES encryption
Each user's data is isolated in separate directories — no user can access another user's data
Your Google Sheet is created on your own Google Drive — you retain full ownership
We use HTTPS for all connections
Daily backups are maintained for 7 days

5. Data Sharing

We do not sell your personal data. We share data only with:

Google: Via OAuth to access Gmail and Sheets on your behalf
Discord: Via OAuth for authentication
Whop: For subscription management

6. Your Rights

You have the right to:

Access: View all data we store about you
Delete: Request deletion of your account and all associated data
Disconnect: Revoke Google or Discord access at any time via your account settings
Export: Your Google Sheet is already on your own Drive — you always have access

7. Data Retention

We retain your data as long as your subscription is active. When you cancel, your account is deactivated. You can request full data deletion by contacting us.

8. Cookies

We use a session cookie to keep you logged in. We do not use tracking cookies or third-party analytics.

9. Contact

For privacy questions or data deletion requests, contact us via Discord or email at privacy@ticket-flow.net.

10. Changes

We may update this policy. Changes will be posted on this page with an updated date.