Privacy policy
What we collect, why, who sees it, and your rights under the New Zealand Privacy Act 2020.
Last updated 14 October 2026.
- Who we are
- This service is run by AIM Dev Ltd, a software studio in Auckland, New Zealand. For anything about your details, write to us through the AimDev support page linked below.
- If you book a ticket
- We keep your name, email, phone number if you gave one, your answer to the organiser's question, what you booked, how you paid and whether you arrived. The organiser of that event and the people they named to help run it see these. Nobody else does.
- If you give or pass a ticket to someone
- We keep the name and email you enter for that person and use them to send the ticket and the reminder for that event. Nothing else is sent to them.
- If you pay by bank transfer
- You pay the organiser directly from your bank. We never see your bank details. If you choose PayPal, you pay the organiser inside PayPal and we see nothing of that payment. If you are refunded by transfer, we ask for the account number to send the money to and show it to the organiser who is refunding you.
- If you pay by card
- You pay on Stripe's page, into the organiser's own Stripe account. Stripe receives your email address and the amount. We never see or store your card number; we keep only Stripe's reference for the payment, so that a refund can go back to the same card.
- If you organise events
- We keep your name, email, the identifier of the AimDev account you sign in with, the photo, description and link you add, your events, and the bank account number you want guests to pay into. Guests who choose bank transfer see your name and that account number. We also keep the monthly statements of our fees.
- If you join a waitlist or ask us for help
- We keep your name and email and use them only for that: to offer you a place, or to answer you.
- What we use it for
- To run bookings, send tickets and reminders, pass on messages from the organiser about the event you booked, and stop abuse. We do not send marketing to guests, sell or rent anyone's details, show advertising, or run analytics trackers.
- Cookies and what stays on your device
- One cookie keeps an organiser signed in, one remembers your language, and one remembers for 30 days the name of the link that brought you here, if that link carried one (for example a post in a group), so we can see which posts bring people. It holds nothing about you. The door screen keeps the guest list on the organiser's phone so entry works without a signal.
- Who else handles your details
- The service runs on servers we operate ourselves in Auckland. Cloudflare carries the traffic and stores our backups. Resend, in the United States, delivers our emails. Stripe handles card payments. Sign-in uses the AimDev account service, which offers Google, Facebook, Apple or email. An event page may show an OpenStreetMap map or a YouTube video the organiser added; those services see your IP address when the page loads. Our servers keep IP addresses in short-lived logs and use them to limit repeated requests.
- How long we keep it
- For as long as the event's organiser keeps their account, or until you ask us to delete it. We delete on request unless the law requires us to keep a record: fee statements, for example, are kept for seven years.
- Your rights
- You can ask to see the details we hold about you, to have them corrected, or to have them deleted. We answer within 20 working days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
- Changes
- If this policy changes we will publish the new version here with its date.