Privacy Policy
Last updated July 4, 2026
This policy explains what Mainroom collects, why, and who sees it.
What we collect
- Organizers: your email address and the events you create. Identity and bank details for payouts go directly to Stripe — we never see or store them.
- Buyers: your email address, optional name, and order details, so we can deliver tickets and the organizer can run their door list. Card numbers go directly to Stripe and never touch our servers.
- Usage analytics and session recordings: product analytics (pages viewed, feature usage) via Umami, which we host ourselves on our own infrastructure (analytics.shovelware.ai) — no third-party analytics vendor ever sees this data. We also record how people move through the product — clicks, scrolling and navigation — so we can find and fix the confusing parts. Recordings mask every form input: passwords, email addresses and anything else you type into a field are never captured, and recordings are deleted after 30 days. We respect Do Not Track — switch it on and we record nothing at all — and we don't put emails or names in analytics events.
How it's used
- Delivering tickets by email and validating them at the door.
- Showing organizers their own attendee lists for their own events.
- Fraud prevention and rate limiting.
- Improving the product (aggregate analytics).
What we don't do
- We don't sell or rent your data to anyone.
- We don't send marketing email to buyers. Buyers hear from us only about their tickets.
- We don't share buyer emails across organizers — each organizer sees only their own attendees.
Where data lives
Data is stored on Cloudflare's infrastructure (database, file storage) and processed by Stripe (payments). Analytics and session recordings run on Umami, which we host ourselves — that data is not shared with any third-party analytics vendor. Ticket emails are sent through Cloudflare's email service.
Retention & deletion
Order and ticket records are kept as long as the organizer's account is active, since they are the organizer's sales records. To delete your account or your personal data, email tickets@shovelware.ai and we'll handle it within 30 days, except records we must keep for financial compliance.