Privacy Policy

Who we are

This policy explains what SLASH FM LLC ("slash.fm", "we", "us") collects when you use the slash.fm app or our website, why, who we share it with, and the choices you have. It applies to people who buy tickets or RSVP, and to organizers who sell tickets on slash.fm. Privacy questions go to [email protected].

What we collect

We only collect what we need to sell you a ticket, get you in the door and run the service:

• Your mobile phone number. You sign in with a one-time code we text to it; we do not use passwords. We store the code only in hashed form and it expires after a few minutes.
• Your name and email address, used on your tickets and for receipts.
• Profile details you choose to add: username, bio, photo and Instagram handle.
• Your orders and tickets: what you bought or RSVP'd to, the amount, refunds, and when your ticket was scanned at the door.
• Events you save, organizers you follow, and organizers you block.
• A push notification token if you allow notifications in the app.
• Your notification and privacy settings, including whether you appear on public guest lists and whether you agreed to marketing texts.
• Technical details sent with each request, such as IP address and device or browser type, which we keep with orders and door scans to prevent fraud and duplicate entry.

What we do not collect

• Card numbers. Payments are handled by Stripe; your card details go straight to Stripe and we never see or store them.
• Your precise location. If you allow it, the app asks for location only while you are using it, works out the nearest city on your phone, and sends us only the city name so we can show events there. Your coordinates never leave your device.
• Your calendar. When you tap Add to calendar, the app writes that one event to your phone's calendar. Nothing from your calendar is sent to us.
• Your contacts, photos or other files, unless you choose to upload a profile photo or, as an organizer, an event flyer.

How we use it

• To sign you in, deliver your tickets and show them at the door.
• To process payments and refunds through Stripe, and to pay organizers.
• To send messages about your orders: confirmations, ticket links, receipts, reminders and changes to an event.
• To prevent fraud, duplicate scans and abuse, and to keep the service secure.
• To show you events in your city and from organizers you follow.
• To send marketing texts or emails, only if you opted in. You can stop them at any time.

No ads, no selling

slash.fm has no advertising. We do not sell your personal information, and we do not share it for targeted advertising.

The website uses Google Analytics to count visits and see which pages people use, so we can improve the site. Google Analytics sets its own cookies and receives your browser type, the pages you view and an approximate location derived from your IP address. We have turned off Google Signals and ad personalization, and we do not send Google your name, email, phone number or orders. You can block it with your browser's privacy settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The app does not use Google Analytics.

Apart from that, the website stores one item in your browser to keep you signed in. It sets no advertising cookies.

Who we share it with

• Organizers. When you buy a ticket, RSVP or are added to a guest list, the organizer running that event sees your name, email and phone number so they can manage the door, contact you about the event and handle refunds. Organizers are responsible for how they use it.
• Other guests, only if you allow it. If your profile is public and you have not turned off guest list visibility, your first name and photo can appear in an event's list of attendees.
• Service providers that run parts of slash.fm for us, under contracts that limit their use of your data: Stripe (payments and payouts), Telnyx and Twilio (text messages), Amazon Web Services (email), Google (website analytics), Expo (push notifications) and DigitalOcean (hosting and databases, in the United States).
• Authorities, when the law requires it, or to protect people from harm or fraud.
• A buyer of our business, if slash.fm is ever sold or merged, under the same promises as this policy.

Text messages (SMS)

slash.fm (SLASH FM LLC) sends three kinds of text messages:

• Sign-in codes: a one-time code each time you ask to sign in.
• Account and order texts: messages about your tickets and orders, such as ticket transfers, door receipts and replies to your support requests.
• Optional marketing texts: news about nights from organizers you follow and from slash.fm, only if you opt in at checkout or in your settings. Agreeing to marketing texts is never a condition of buying a ticket.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to stop receiving texts, or HELP for help. You can also turn marketing texts off in your settings at any time. After you reply STOP we send one text confirming you are unsubscribed. Carriers are not liable for delayed or undelivered messages.

We do not sell, rent or share your mobile number or your text-message consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are never shared with any third party, other than the providers that deliver our texts (Telnyx and Twilio).

Push notifications are separate from texts: turn them on or off in your phone's settings and in the app.

How long we keep it

We keep your account details while your account is open. Order, payment and refund records are kept as long as tax, accounting and chargeback rules require, even after you delete your account, but with your name, phone and email removed. Sign-in codes expire within minutes.

Your choices and rights

• See and change your profile, notification and privacy settings in the app.
• Delete your account in the app under Profile, then Settings, then Delete account. This removes your name, phone number, email, username, bio, photo and social handles, signs you out everywhere, and deletes your push tokens, saved events, follows and team memberships. If you are the only owner of an organization, transfer ownership first.
• Ask for a copy of your data, or ask us to correct or delete it, by emailing [email protected] with the phone number you sign in with. We confirm the request by texting a code to that number, and reply within 30 days.
• Depending on where you live, including California, you may have additional rights to know, correct and delete your information and to not be discriminated against for using them. We honor these requests for everyone, wherever they live.

Security

Data is encrypted in transit. Sign-in codes and session tokens are stored as hashes, not in readable form, and ticket QR codes are signed so they cannot be forged. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Age

You must be 18 or older to create a slash.fm account. slash.fm is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a minor has an account, email [email protected] and we will delete it. Individual events also set their own door policy, such as 18+ or 21+.

Changes

If we change this policy, we will update the date at the top of this page, and for important changes we will tell you in the app or by email before they take effect.

Contact

Privacy requests: email [email protected]. Anything else: use the contact forms in the slash.fm Help Center . slash.fm does not provide customer support by email; emails about orders, tickets, refunds, resale, transfers or accounts will not receive a response.