Legal

Privacy Policy

How we collect, use, and protect personal data, for visitors, customers, and ticket buyers.

Last updated: 21 September 2026.

Privacy at a glance

  • Ticket buyers never have to give us personal data. Browsing and selecting seats on an embedded seat map works without you disclosing anything to us. The venue or organizer runs its own checkout and is responsible for your booking data.
  • On this website, we collect what you type into our forms, plus usage analytics only if you allow them in the cookie banner.
  • We never sell personal data. Advertising measurement (LinkedIn Insight) runs only if you opt in to marketing cookies.
  • You have full control: access, correct, delete, or object: email hello@repizel.com at any time.
  • Questions or complaints: email us first (see Complaints).

1. Who we are

PIZEL PLAZA, LLC (“we”, “us”) is the data controller for the processing described in this policy, including the Seatmap website and products.

2. Who this policy covers

This policy applies to three groups of people:

  • Website visitors: anyone browsing seatmap.io, our demos, or our documentation.
  • Customers: people working for venues, promoters, and ticketing platforms who contact us, request a demo, or hold a Seatmap account.
  • End users: ticket buyers who interact with a Seatmap seat map embedded in a customer’s website or app. Section 3 explains the different role we play for end users.

3. Controller vs. processor: who is responsible for what

For the embedded seat map and the Seatmap platform, the roles are split:

  • The venue, promoter, or ticketing platform is the data controllerfor its ticket buyers’ personal data. It decides what data is collected at checkout and why.
  • Seatmap acts as a data processor, processing that data only on the customer’s documented instructions under a Data Processing Agreement (DPA).

In practice this means: any personal data you enter when booking a ticket, your name, contact details, payment, is collected by the organizer and its payment provider, not by us. We never see or store card details; payments settle directly with the customer’s own payment provider. If you are a ticket buyer with a question or request about your booking data, please contact the organizer you booked with. They are the controller and are best placed to respond. Where they need our help to answer you, our DPA obliges us to assist.

For everything else, this website, our sales and demo process, and our own business contacts, Seatmap is the controller, and the rest of this policy applies directly.

4. What we collect

Data you give us directly:

  • Contact, demo, and feedback forms: your name, work email, company, role, and the message you send us.
  • Sales and support correspondence, and meeting bookings.
  • Account registration details when you sign up for the Seatmap platform.

Data collected automatically on this website:

  • Essential technical data needed to serve and secure the site: IP address, browser and device type, and server logs.
  • Usage analytics, pages visited, interactions, approximate region, only if you allow analytics cookies in the cookie banner (see Cookies).

Data from third parties: business contact details you made publicly available (for example on a company website or professional network), and introductions or referrals from partners.

We do not ask for, and do not want, special category data (health, beliefs, biometrics, and similar). Please do not send it to us.

5. How we use data, and the legal basis for each use

We use personal data only for the purposes below:

  • Responding to your enquiries, demo requests, and support messages: our legitimate interest in running a B2B software business, and steps towards a contract at your request.
  • Providing the Seatmap platform and support to customers: performance of our contract with the customer.
  • Operating, securing, and defending our website and platform (server logs, abuse and bot prevention, capacity planning): our legitimate interest in a secure, reliable service.
  • Understanding how the site is used and improving it: your consent, given or withheld in the cookie banner.
  • Occasional marketing to business contacts: our legitimate interest, or your consent where the law requires it. Every message carries an unsubscribe option, and we honour it.
  • Meeting legal obligations: tax, accounting, and responding to lawful requests from authorities. Legal obligation.

6. Cookies and similar technologies

The full detail lives in our Cookie Policy. In short:

  • Essential storage, security, load balancing, and remembering your cookie choice, is always on. The site does not work without it.
  • Analytics cookies (Google Analytics via Google Tag Manager, where enabled) and marketing storage load only if you allow them in the cookie banner. Declining is as easy as accepting, and you can change your choice at any time. The banner reappears once you clear your stored preference.
  • Third-party tools on this site, Rybbit (cookieless analytics), Userback (feedback widget), Typebot (chat), Mapbox (maps in demos), are reviewed before deployment. Rybbit loads without setting cookies. Userback loads only after analytics consent. Tools that store data on your device load no tracking storage before you consent.
  • The embedded seat map viewer itself does not set tracking cookies for ticket buyers.

7. Who we share data with

We share personal data only with the following categories of recipients, only for the purposes in section 5:

  • Infrastructure and service providers acting as our processors: Cloudflare (hosting and content delivery), Rybbit / Sideguard (cookieless product analytics at hey.sideguard.io), Resend (transactional email), Userback (feedback), Typebot (chat), Mapbox (demo maps), Stripe (payments within the Seatmap platform), and, if you opt in to marketing cookies, LinkedIn (advertising measurement via Insight).
  • Professional advisers: lawyers, accountants, insurers, under confidentiality obligations.
  • Authorities, where the law requires disclosure.
  • A successor in a merger, acquisition, or asset sale, subject to this policy’s protections continuing to apply.

We do not sell personal data, and we do not share it with data brokers. If you opt in to marketing cookies, LinkedIn Insight receives advertising measurement data as described in the Cookie Policy. We may use and share aggregated or irreversibly anonymised data (for example, total seats rendered per month) freely. It no longer identifies anyone, and we do not attempt to re-identify it.

8. International transfers

Some of our service providers process data in the United States and in other countries. Where they do, we put contractual safeguards in place with those providers. You can ask us for a copy of the relevant safeguard via hello@repizel.com.

9. How long we keep data

  • Enquiries and demo requests: up to 24 months after our last correspondence, then deleted.
  • Website analytics: 14 months, then deleted or aggregated.
  • Server and security logs: 90 days.
  • Customer account data: for the life of the contract, plus a 30-day backup window after termination, unless our DPA with the customer says otherwise.

Where a legal obligation or a dispute requires longer retention, we keep only what is needed for that purpose. Otherwise data is deleted or irreversibly anonymised when its retention period ends.

10. How we protect data

We apply technical and organisational measures appropriate to the risk: encryption in transit (TLS) and at rest, least-privilege role-based access for staff, multi-factor authentication on internal systems, audit logging, risk assessment of third-party scripts and vendors before deployment, and a documented incident-response process. If a personal data breach creates a risk to you, we will notify affected individuals, and any regulator the law requires us to notify, without undue delay.

No system is perfectly secure, and we will not pretend otherwise, but the measures above are how we keep the risk low, and we review them as the service evolves.

11. Your rights

You can ask us, free of charge, to:

  • request access to the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we process it;
  • receive it in a portable, machine-readable format;
  • withdraw consent at any time, where we rely on consent. Withdrawing is as easy as giving it and does not affect processing already carried out.

Your right to object. You can object at any time to processing based on our legitimate interests, including any direct marketing, which we will stop immediately on objection.

To exercise any right, email hello@repizel.com. We respond within one month; we may need to verify your identity first. If your data is held through a booking you made with a venue or organizer, contact them directly. As the controller they handle such requests, with our assistance where needed.

We do not make decisions with legal or similarly significant effects about you by purely automated means.

12. Complaints

If something is wrong, tell us first: email hello@repizel.com or use the contact form. We acknowledge complaints within 30 days and respond without undue delay.

13. Children

Our services are business software and are not directed at children under 13. We do not knowingly collect children’s personal data, and our customers must not submit children’s data to us through the service. If you believe a child has sent us personal data, contact us and we will delete it.

14. Changes, translations, and contact

We may update this policy as the product and the law evolve. The current version and its date always appear at the top of this page; for material changes we will give reasonable notice on this site and, where appropriate, by email to account holders.

This policy is translated into French and Spanish for convenience. The English version is the authoritative text and prevails in case of any conflict.

Questions, requests, or complaints: hello@repizel.com. PIZEL PLAZA, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

Contact us