Privacy Policy

Syncafy ("Syncafy", "we", "us", or "our") operates the Hypafy platform at events.hypafy.com and related mobile applications (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.

We are committed to protecting your privacy and handling your data transparently. By using the Platform, you consent to the practices described in this Privacy Policy.

2.1 Information You Provide

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Profile photo, bio, and preferences you choose to add
• Payment Information: Billing address, payment card details (processed and stored by our third-party payment processor — we do not store full card numbers)
• Event Information (Organizers): Event details, venue information, ticket pricing, images, descriptions, and organizer profile information
• Purchase Information: Ticket orders, merchandise orders, transaction history, and order details
• Communications: Messages you send through the Platform, customer support inquiries, and feedback

2.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, unique device identifiers
• Usage Data: Pages visited, features used, search queries, click patterns, and time spent on the Platform
• Location Data: Approximate location based on IP address, and precise location if you grant permission (used to show nearby events)
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies & Tracking: See our Cookie Policy for details

2.3 Information from Third Parties

• Social Login: If you sign in with a third-party service (e.g., Google, Apple), we receive basic profile information as authorized by you
• Payment Processors: Transaction status and confirmation from our payment partners
• Analytics Providers: Aggregated usage and performance data

We use the information we collect to:

• Provide, operate, and improve the Platform
• Process ticket and merchandise purchases and deliver order confirmations
• Create and manage your account
• Send transaction-related emails (receipts, order updates, event reminders)
• Personalize your experience and show relevant events
• Provide customer support and respond to inquiries
• Send marketing communications (with your consent, and with the ability to opt out)
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations
• Generate anonymized, aggregated analytics to improve our services

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Event Organizers

When you purchase a ticket, the event Organizer receives your name, email, and any information required for event entry (e.g., answers to custom questions on the ticket form). Organizers are responsible for their own use of attendee data and must comply with applicable privacy laws.

4.2 With Service Providers

We share data with trusted third-party service providers who assist us in operating the Platform, including payment processors, email delivery services, cloud hosting providers, analytics tools, and customer support tools. These providers are contractually obligated to protect your data.

4.3 For Legal Compliance

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If Syncafy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We retain your personal information for as long as your account is active or as needed to provide you with the Platform's services. We also retain data as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.

Transaction records are retained for a minimum of seven (7) years for tax and legal compliance purposes. You can request deletion of your account data at any time (see Section 7).

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through our identity provider
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data
• PCI-compliant payment processing through certified third-party processors

While we take reasonable precautions, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the link in any marketing email or through your account settings
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@syncafy.com. We will respond within 30 days.

The Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

Hypafy is based in Canada. If you access the Platform from outside Canada, your information may be transferred to, stored, and processed in Canada or other jurisdictions where our service providers operate. By using the Platform, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to access your personal information, challenge its accuracy, and file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

We may update this Privacy Policy periodically. When we make material changes, we will post the updated policy on the Platform and update the "Last updated" date. We encourage you to review this policy regularly. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@syncafy.com
• Through our Contact page