Max Capacity Privacy Policy

1. Information We Collect

We collect the following types of information:

• Personal Information: When you create an account, buy tickets, or sell tickets, we may collect your name, email address, phone number, billing information, payment details (e.g., credit card or bank account information), and, for sellers, verification details (e.g., government-issued ID).
• Transaction Information: Details about your ticket purchases or sales, including event details, ticket prices, and transaction dates.
• Usage Information: Information about how you interact with the Service, such as pages visited, features used, and device information (e.g., IP address, browser type, operating system).
• Communication Information: Records of your communications with us, such as customer support inquiries or feedback.
• AI Assistant Conversations: If you use the in-app AI assistant, the messages you send it, its replies, the actions it takes on your behalf, and any rating or comment you leave on a reply. See Section 7.

2. How We Use Your Information

We use your information to:

• Facilitate ticket purchases, sales, and transfers.
• Process payments and distribute payouts to sellers.
• Verify identity and ensure ticket legitimacy.
• Provide customer support and respond to inquiries.
• Improve the Service, including analyzing usage patterns, reviewing AI assistant conversations to improve the assistant’s accuracy and safety, and developing new features.
• Send transactional communications and, with your consent, marketing communications.
• Comply with legal obligations and prevent fraud or abuse.

3. How We Share Your Information

We may share your information as follows:

• With Event Organizers and Ticket Buyers/Sellers: To facilitate ticket transactions.
• With Service Providers: For services like payment processing, hosting, data storage, and the artificial intelligence services that power the AI assistant, under confidentiality agreements.
• For Legal Purposes: To comply with laws, respond to legal processes, or protect rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties for marketing purposes.

Mobile / SMS: No mobile information or text-messaging opt-in data will be shared with, sold, or transferred to third parties or affiliates for marketing or promotional purposes. Your phone number is used only to send the messages you have opted into, via Max Capacity or service providers acting on our behalf under confidentiality obligations, and is not shared with those providers for their own marketing.

4. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security.

5. Your Choices and Rights

• Access and Update: You can access and update your account information through the Service.
• Opt-Out: You may opt out of marketing communications by following unsubscribe instructions in our emails, by replying STOP to any SMS message, by adjusting your notification preferences in the app, or by contacting us.
• Data Deletion: You may request deletion of your personal information, subject to our legal obligations.
• Jurisdiction-Specific Rights: Depending on your U.S. state of residence, you may have additional privacy rights such as requesting a copy of your data or restricting its use.

To exercise these rights, contact us using the details in Section 14.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can manage cookie preferences through your browser settings, but disabling cookies may affect functionality.

7. AI Assistant

The Service includes an AI assistant that answers questions about the Service and your account. It is powered by Anthropic’s Claude models, provided through Amazon Web Services (Amazon Bedrock).

• What we keep: We store your conversations with the assistant: your messages, its replies, the details of any actions it takes on your behalf (such as information you provide to transfer tickets or update your profile), and any rating or comment you leave on a reply. Before storing a conversation, we automatically remove common identifiers such as email addresses, phone numbers, payment card numbers, Social Security numbers, employer identification numbers, and other long numbers. This removal is automated and may not catch everything, so please do not share sensitive personal information with the assistant.
• What we don’t keep: When the assistant looks up information to answer you, such as your listings, orders, or account details, we do not store the information it retrieves. Its replies to you may summarize that information, and those replies are stored as described above.
• Who it’s linked to: If you are signed in, your conversations are linked to your account. If you are not signed in, they are stored without being linked to an account. If you sign in during a conversation, the earlier messages in that conversation become linked to your account.
• How we use it: We review conversations to understand how the assistant is used and to improve its accuracy, helpfulness, and safety. We do not use your conversations to train artificial intelligence models, and neither Amazon nor Anthropic uses them to train models.
• How long we keep it: We automatically delete each conversation 30 days after its last message. Deleting your account also deletes your assistant conversations.
• Your choice: Using the assistant is optional. If you do not want your conversations stored, do not use the assistant.

8. Data Retention

We retain your personal information for as long as necessary to provide the Service, fulfill transactions, or comply with legal obligations. For example, we may retain transaction records for tax or auditing purposes even after you delete your account. AI assistant conversations are deleted 30 days after their last message, as described in Section 7.

9. Security Incident Response

We take the security of your information seriously and have procedures in place to respond to potential data breaches and security incidents.

If we determine that a breach involving your personal information has occurred, we will:

1. Investigate Promptly: Assess the nature, scope, and impact of the incident.
2. Notify Affected Users: Provide notice without undue delay, and within the timeframes required by applicable U.S. laws and regulations.
3. Provide Relevant Details: Our notice may include the nature of the incident, the types of data involved, recommended steps you can take to protect yourself, and the actions we have taken to mitigate the issue.
4. Use Multiple Channels: We may notify you via email, in-app messages, SMS, or prominent notices on the Service, depending on severity.
5. Coordinate with Authorities: Work with law enforcement and regulatory bodies when appropriate.
6. Protect Your Account: If account credentials are involved, we may require a password reset and recommend updating passwords on other services.
7. Document and Improve: Maintain records of the incident and update security measures, policies, and employee training to reduce the risk of recurrence.

10. Children’s Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it promptly.

11. Third-Party Links and Integrations

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site or service you interact with.

12. ACH Authorization

If you register to create an account to receive payments via our application, you expressly authorize Max Capacity's service provider, Dwolla, Inc. to originate credit transfers to your financial institution account. You must be at least 13 years old and obtain parental permission if under 18 to receive funds. You authorize Max Capacity to collect and share with Dwolla your personal information including full name, email address and financial information, and you are responsible for the accuracy and completeness of that data. Dwolla's Privacy Policy is available at https://www.dwolla.com/legal/privacy/.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service or through other reasonable means. Your continued use of the Service after such changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Information