Privacy Policy

HaloGather is a product of Halo Logic, operated by Bear Media Services, LLC ("we," "us," or "our"). This Privacy Policy explains how we handle personal information across halogather.com, the HaloGather web application and gate check-in tools, the embeddable checkout widget, and related services (together, the "Service").

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

HaloGather serves two kinds of users: Organizers, who create events and sell tickets, and Buyers (attendees), who purchase them. Gate staff invited by an Organizer also use our check-in tools.

For an Organizer's own account information and how they use HaloGather, we act as a "controller" — we decide how that information is handled. For personal information about Buyers that an Organizer collects by selling tickets to their event, we act as a service provider (processor) on that Organizer's behalf: the Organizer decides how their attendees' information is used and is also responsible for it under applicable law.

If you bought a ticket and want to know how a specific Organizer uses your information, contact that Organizer directly. This policy describes our own practices.

From Organizers

• Account details: your name, email address, and password (stored only in hashed form by our authentication provider).
• Business and event details you enter, such as your organization name, event descriptions, ticket types, and pricing.
• Payout setup: you connect a Stripe account to receive ticket payments. We store identifiers that link to your Stripe account, but not your bank account or card numbers.
• Subscription billing details for your HaloGather plan, which are processed by Stripe.
• Communications you send us, such as support requests.

From Buyers and attendees

• The information you enter at checkout: your name, email address, and (if the Organizer requests it) your phone number.
• Your order and ticket details, including what you purchased and your check-in status.
• We deliberately do not collect your billing address, and we never receive your payment card number.

Automatically

• Basic technical and log data (such as IP address, browser type, and timestamps), used to operate and secure the Service.
• Strictly necessary cookies that keep you signed in and protect your session.

What we never collect or store

Your payment card number, security code, or bank account details. When you pay, your card information goes directly from your browser to Stripe — it never passes through or is stored on HaloGather's servers. Card data stays with a PCI-certified processor at all times.

We use personal information to:

• Operate the Service — create events, sell and deliver tickets, generate QR codes, and run gate check-in.
• Give Organizers the sales and attendee information for their own events, including a downloadable buyer list.
• Process Organizer subscription and per-ticket software billing.
• Send transactional messages such as ticket confirmations and receipts.
• Provide support and respond to your requests.
• Protect the Service, prevent fraud and abuse, and maintain security.
• Comply with our legal obligations, such as keeping tax and accounting records.

We do not use your information for cross-context behavioral advertising, and we do not sell it.

Ticket payments are processed by Stripe directly on the Organizer's connected Stripe account. HaloGather is not in the money flow — funds move from the Buyer to the Organizer's account, and we never take custody of them. Organizer subscription fees are also processed by Stripe.

• Stripe's handling of your payment information is governed by Stripe's Privacy Policy. (stripe.com/privacy)

We share personal information only in these ways:

• With the Organizer of the event you bought from. A Buyer's name, email, phone, and order details are made available to the Organizer running that event so they can manage attendance and contact ticket holders. This is an intended function of ticketing.
• For legal and safety reasons — to comply with law, enforce our terms, or protect the rights, safety, and property of users, the public, or us.
• In a business transfer — if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, and we will require the recipient to honor this policy.

We also rely on the following service providers (sub-processors) to run the Service, under contracts that limit their use of the data:

• Stripe — payment processing. (stripe.com/privacy)
• Supabase — database, authentication, and data storage, hosted in the United States. (supabase.com/privacy)
• Vercel — application hosting and content delivery. (vercel.com/legal/privacy-policy)
• Resend — sending transactional email such as ticket confirmations. (resend.com/legal/privacy-policy)

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We use only strictly necessary cookies — primarily to keep you signed in and to secure your session. We do not use advertising or cross-site tracking cookies. Because we rely on essential cookies only, blocking them may prevent you from logging in.

• Buyer contact details (name, email, phone) are retained for 24 months after the related event has finished, then anonymized so they can no longer identify you. We may keep aggregate, non-identifying sales records after that.
• Organizer account information is kept while your account is active and for a reasonable period afterward, except where we must keep certain records (such as transaction and tax records) longer to meet legal obligations.
• Security and log data is kept for a limited period for operational and security purposes.

Depending on where you live, you may have some or all of these rights regarding your personal information: to access it, correct it, delete it, receive a copy (portability), restrict or object to certain processing, and to opt out of any "sale" or "sharing" (we do neither). You will not be treated differently for exercising these rights.

To make a request, email us at info@halogather.com. We will verify your request and respond as required by law. If your request concerns a ticket you bought, we may need to coordinate with — or direct you to — the Organizer of that event, since they control their attendees' information. We may retain certain information where the law allows or requires it (for example, records needed for tax, accounting, or fraud prevention).

California residents

Under the CCPA/CPRA, you have the right to know, access, delete, and correct your personal information, and to opt out of its sale or sharing. We collect the categories described above (identifiers such as name, email, and phone; commercial information such as tickets purchased; and limited internet or network activity such as logs) for the business purposes described above. We do not sell or share your personal information, and we do not knowingly collect or sell the personal information of minors. You may use an authorized agent to submit a request.

EEA and UK residents

Where the GDPR or UK GDPR applies, our legal bases for processing are: performance of a contract (to provide tickets and the Service), our legitimate interests (to secure, operate, and improve the Service and prevent fraud), compliance with legal obligations, and your consent where required. You may withdraw consent at any time and may lodge a complaint with your local data protection authority. Your information is processed in the United States; where required, we rely on appropriate safeguards for international transfers.

We protect personal information with measures including row-level database access controls that isolate each Organizer's data, encryption of data in transit, restricted internal access, and reliance on a PCI-certified processor (Stripe) for all card payments so that we never hold card data. No method of transmission or storage is completely secure, but we work to protect your information and to limit what we collect in the first place.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

HaloGather is operated from the United States, and the information we collect is stored and processed in the United States. If you use the Service from outside the United States, you understand your information will be processed here, where data protection laws may differ from those in your country.

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

Questions or requests about this policy or your personal information:

• Email: info@halogather.com
• Mail: Bear Media Services, LLC (Halo Logic / HaloGather), Suite 148, 301 S 3rd St, Ironton, OH 45638