Privacy Policy
The short version
- We verify your identity through Persona, a third-party verification service. Persona checks your government ID and your face.
- We never see or store your ID photo or your face scan. Persona processes them and tells us one thing: whether you passed.
- What we keep about your verification: a pass/fail result, a reference number, and a match score. That's it.
- Payments go through Stripe. We never see your full card number.
- You can delete your account and data anytime. How, below.
We wrote this in plain English on purpose. If anything is unclear, email privacy@vouchtix.com and a human will answer.
Who we are
VouchTix is a peer-to-peer ticket marketplace operated in Ontario, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law.
What we collect and why
| What | Why | Where it lives |
|---|---|---|
| Phone number | Account login, sale and purchase notifications | Our database (encrypted) |
| Display name & profile photo | Shown to other users | Our database |
| Verification result | Proving to other users you're real | Our database — result only, never images |
| Listings, messages, reviews, vouches | Running the marketplace | Our database |
| Payment info | Processing purchases | Stripe only — we never store card numbers |
| Device token | Push notifications | Our database |
| Linked social handles (optional) | Boosting your trust score | Our database |
What we do NOT collect or store
- Your ID photo or scan — Persona handles it under their own privacy policy
- Your face scan or any biometric template — same
- Your card number or banking details — Stripe handles those
- Your location beyond what you tell us (e.g., event city)
When you verify, you share your ID and face with Persona directly. We recommend reading Persona's privacy policy. We chose this pass-through setup deliberately: a breach of VouchTix could never leak your ID or your face, because we don't have them.
Who we share data with
- Persona — identity verification (they process; we get the result)
- Stripe — payments and payouts
- Other users — your display name, badge status, reputation stats, listings, reviews, and vouches are visible in the app. Your phone number and legal name are never shown.
- Law enforcement — only when legally required (e.g., a valid Canadian court order)
We do not sell your data. We do not run ads. We do not share your data with marketers.
How long we keep it
- Account data: as long as your account exists
- Messages: as long as both accounts exist
- Transaction records: 7 years (Canadian tax law requires this)
- Verification result: as long as your account exists
Deleting your account and data
Two ways:
- In the app: Profile → Settings → Delete my account
- By email: privacy@vouchtix.com — tell us your phone number
When you delete: your profile, listings, messages, and verification record are erased within 30 days. Transaction records are kept 7 years (tax law) but disconnected from your profile. We confirm by text when it's done, and we trigger a deletion request to Persona for their copy of your verification data.
Your rights under PIPEDA
You can ask us at any time: what we have about you, to correct it, to delete it, or to explain how it's used. Email privacy@vouchtix.com — we respond within 30 days. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Security
Data is encrypted in transit and at rest. Access is limited to what's needed to run the service. If a breach ever affects your data, we'll notify you and the Privacy Commissioner as PIPEDA requires.
Changes
If we change this policy in a way that matters, we'll notify you in the app before it takes effect. We won't quietly start collecting more.
Questions: privacy@vouchtix.com