Privacy Policy

This Policy explains how Encore, operated by Daytona Lab Agency LLC (a Florida limited liability company), handles personal data for both organizers (who run events) and buyers (who buy tickets or register). It covers the Encore website and the Encore apps for iPhone and Android. It takes effect on 4 November 2026.

1Two roles under data protection law

Encore’s relationship to attendee data is deliberately split:

• The organizer is the controller of their attendees’ personal data. They decide what to collect, why, and what to do with it.
• Encore is the processor, acting on the organizer’s instructions to operate checkout, deliver tickets, and run the dashboard they use.

That split shapes Encore’s obligations under the GDPR for EU and UK data subjects, and its CCPA/CPRA posture for California residents: notice, deletion, correction, and opt-out rights generally flow to the organizer as controller, with Encore obliged to support them.

For data about organizers themselves as account holders (billing and payout contact details, login credentials, Stripe Connect identifiers), Encore is the controller.

Encore does not offer a separate data processing addendum. How Encore processes attendee data for an organizer is set out in this Policy and in the Terms.

2What Encore collects

About buyers, through an organizer’s checkout

• Name and email: needed to issue a ticket and its entry credential.
• Payment details: collected and processed by Stripe, not stored by Encore in raw form. Payment goes to the organizer’s connected Stripe account.
• Phone number: only if you give one, and only when you opt in to text updates about the event you bought a ticket for.
• Order and ticket data: what you bought, when, and its status, scoped to the event and organizer you transacted with.
• Transfers and waitlists: if a ticket is sent to you, Encore records who sent it and the email address it went to, and the organizer sees the current holder and who it came from. If you join a waitlist, we store your account, the ticket type, how many tickets you asked for and the time you joined, and we email you if tickets come back. Joining takes no payment.
• Check-in records: when your ticket is scanned at the door, Encore records that it was admitted, to which event, at what time, by which method, and which organizer staff account scanned it. That record is what stops one ticket being used twice, and it is used to answer a payment dispute about the order, by sending the admission time and method to the payment processor.
• Payment disputes: if a card payment for a ticket is disputed with the cardholder’s bank, we send Stripe, on the organizer’s behalf, information about that order so the organizer’s response can be considered by the bank. That is: the event name, place, date and ticket types; the order time, reference number and amount; the email address the order was placed with and the times we emailed the tickets to it; when and how tickets on the order were admitted at the door, and if a guest was later recorded as let out (for offline door phones, the time we recorded the scan, the time the device reported, and a short identifier of the door phone); whether the tickets were passed to another person (not who); and any refunds already made. We do not send ticket links or QR codes, phone numbers, IP addresses, other people’s names or emails, door staff names, or your other orders. The card network or bank may see this information. We act on the organizer’s instruction, and the organizer is the controller of your attendee record (section 1). We keep a record of what we sent (field names and a fingerprint), and the text itself is deleted from our records after the response has gone, normally within 48 hours.

About visitors to an organizer’s event pages

• Traffic and attribution data: Encore records page views, event views, checkout opens, payment starts, and completed orders on an organizer’s pages, together with the referring site and any campaign tags carried in the link you arrived on (the utm_source, utm_medium and utm_campaign values). The organizer sees this in their dashboard as counts grouped by source, not as a list of named people.
• A first-party visitor identifier: a random identifier is created in your browser’s local storage, not in a cookie, so that repeat visits from the same browser are counted once rather than many times. On a completed order that identifier is recorded alongside the order reference, which is what connects the visit to the purchase.

About fans who follow an organizer

• Who you follow: if you are signed in and choose to follow an organizer, Encore stores a record of your account, the organizer, and the time you followed. Its purpose is to build your feed of upcoming events from the organizers you follow. Only you can read your list of follows. The organizer sees how many followers they have, not who they are. You can remove a follow at any time by unfollowing, and deleting your Encore account deletes all your follows.

About anyone who signs in

• Sign-in: if you sign in with Apple or Google we receive your name and email address (for Apple, possibly a private relay address Apple makes for you) and an identifier from that provider. We do not receive your Apple or Google password.
• Your account: your email address, your name, and an account ID we create to tell accounts apart. If you sign in with a password, we store it only as a one-way hash.
• Your purchases: the orders and tickets on your account (the event, the ticket type, what you paid, when, and whether a ticket has been used, transferred or refunded), so the app and website can show your tickets and receipts.
• Card payments: you type your card into Stripe’s payment form, in the app or on the website. The card details go straight to Stripe. Encore never receives or stores your full card number or security code; we get the result of the payment from Stripe.

What the apps use on your phone

The apps ask for a phone permission only when you reach the feature that needs it, and you can turn each one off in your phone’s settings.

• Camera: used only by organizer staff, to scan ticket QR codes at the door. The picture is read on the phone and is not recorded, stored or uploaded; only the ticket code it finds is checked with Encore.
• Location: approximate and precise location, asked for only on the door screen for selling tickets at the door, and only on a phone where Stripe’s Tap to Pay, which takes the card, needs the phone’s location before it can accept a payment. The location goes to Stripe under Stripe’s privacy policy. Encore does not receive or store it.
• NFC (Android and iPhone): used only when door staff take a card payment with Tap to Pay. The card is read by Stripe’s software on the phone, and Encore never sees the card number.
• Calendar (iPhone): adds an event to your calendar only when you ask it to. The app cannot read your calendar.
• Notifications: if you allow them, we store the push token your phone gives the app, linked to your account, so we can send you ticket, transfer and event updates. It is deleted with your account, and you can turn notifications off at any time in your phone’s settings.
• Lock-screen updates (iPhone): if you allow them, we store the tokens Apple gives your iPhone for live ticket and door-time updates on the lock screen, linked to your account, so we can send those updates. They are deleted with your account.

About organizers

• Account and login information.
• Stripe Connect identifiers and payout status. Encore does not see full bank details. Those live at Stripe.
• The events, ticket types, and pricing they configure.
• The photos and files they upload (posters, cover images, logos) and what they write on their event and organizer pages. These are public once the page is published.

Encore lets fans browse public events, listed by date with no promoted placement. It does not sell, share or remarket one organizer’s attendees to another organizer, and does not email one organizer’s attendee about a different organizer’s event.

3Your data stays scoped to your organizer

Attendee and order data collected through one organizer’s events is kept scoped to that organizer and is not exposed to other organizers through the product.

4Data ownership and no cross-marketing

The organizer owns their attendee data. Organizer owners and admins can download their customers as a CSV file from the Customers tab of the dashboard. The file has one row per buyer email address and currency, with these columns: name, email, orders, refunded orders, tickets, face value spent, amount the buyer paid, amount refunded, first event, last event, last purchase date, and currency. It covers buyers whose orders are paid, partially refunded, or refunded; orders that are pending, failed, or cancelled are not included. It is a list of buyers, not of individual ticket holders, and it does not include phone numbers or text consent. Downloads are rate-limited, and a list too large for one file has to be narrowed with the search box first. There is no separate export that runs once an organizer account is gone, so an organizer should download what they need first (see section 5 of the Terms, closing an account). Encore will never market one organizer’s attendees to another organizer, or to itself. That is a privacy commitment as much as a contractual one: attendee data collected on one organizer’s behalf is not used for Encore’s own marketing, or sold or shared for anyone else’s. The full commitment is in section 5 of the Terms.

5Text messages and consent

If you opt in to SMS at checkout, Encore sends event-related texts (reminders and day-of changes) from the organizer’s own sender identity, each ending with an opt-out instruction. What Encore records as proof of your consent today is an opt-in flag stored on your order, alongside that order’s own timestamps.

6Sub-processors

Encore uses third-party vendors to operate the Platform. The ones identified so far:

7Account security: a known gap

Encore is working on an identified account-security issue: creating an account does not always require the person registering to prove they control the email address they used. Until that is closed and re-verified, Encore does not represent that accounts are email-verified, or that only the holder of an address can reach an account registered to it. This Policy will be updated, and people notified as appropriate, once it is closed.

8Retention and deletion

A signed-in person can delete their own Encore account from inside the Encore app: Profile, then Sign-in and security, then Delete account. Anyone can also ask without the app, by email; the steps are on the account deletion page. Deletion removes the sign-in, the profile (name and email), the organizers they follow, and the emails and texts we hold for them, sent or queued (if the person never confirmed their email address, emails we hold that were addressed to it are not deleted). Records of orders, tickets and memberships are kept, for tax, accounting and card disputes; the email address on them is replaced with a random placeholder that does not identify anyone, and the phone number and account link are removed. Order and ticket records hold no name of their own; the name was on the profile, which is deleted. The exception is a ticket sold or given at the door, which keeps the name door staff typed in for it. Tickets already bought stay valid. Door check-in records are handled differently from order and ticket records. If a person who worked an event door deletes their account, the records of the check-ins and check-in undos they performed keep an internal identifier for the former account. That identifier is no longer linked to a name or email, so the organizer’s admission history stays complete, showing which ticket was admitted or undone and when, and that the same former account did it, but no longer shows who that person was. An account that owns an organizer cannot be deleted until ownership is transferred, and an account named on a payment audit record needs a request to Encore to complete. Account data is kept until the account is deleted. Order, payment and ticket records, with the person removed from them as described above, are kept for seven years after the order, for tax, accounting and card disputes, and then deleted.

If you signed in with Apple. When you delete your account, we ask Apple to cut off Encore’s access to your Apple account whenever we hold the token that lets us do that. We normally hold it when you signed in through our iPhone app. If you signed in with Apple on our website, we may not hold that token, and in that case we cannot ask Apple on your behalf. To remove Encore from your Apple account yourself: on an iPhone or iPad, open Settings, tap your name, then Sign-In & Security, then Sign in with Apple, choose Encore and tap Stop Using Apple ID; or at account.apple.com, Sign-In & Security, then Sign in with Apple. Until you do, Apple may still list Encore as an app you use. Deleting your Encore account removes your profile and sign-in from us either way.

9Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict some processing. Because Encore is the processor for attendee data collected through an organizer’s event, requests about that data should go to the organizer first; Encore supports the organizer in fulfilling verified requests. For data where Encore is the controller (your own organizer account details), contact Encore at support@daytona-lab.com.

10Children’s privacy

Encore is not directed at children under 13 and does not knowingly collect personal data from them. You must be at least 13 to create an account; tickets for all-ages events are bought by an adult. If you believe a child under 13 has given us personal data, contact us at support@daytona-lab.com and we will delete it.

11Changes to this policy

Encore may update this Policy. When it does, the date at the top of this page changes. If a change materially affects how your personal data is used, we will email account holders before it takes effect.