Privacy Policy

1. Introduction

LiveArena Inc. (“LiveArena”, “we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the LiveArena application and related services (the “Service”).

This policy applies to all users of the Service, including event attendees, event organizers, venue operators, and team members. By using the Service, you acknowledge that you have read and understood this Privacy Policy.

LiveArena Inc. is the data controller for the purposes of the EU General Data Protection Regulation (GDPR), the Brazilian General Data Protection Law (LGPD, Lei n. 13.709/2018), and other applicable data protection legislation.

2. Information We Collect

2.1 Information You Provide

• — Account information: Name, email address, phone number, profile image
• — Business information: Organization name, venue details, business contact information (for organizer and venue accounts)
• — Transaction information: Purchase history, ticket details, subscription status, refund records
• — Content you create: Event listings, descriptions, images, campaign materials
• — Communications: Messages, support requests, feedback

2.2 Information Collected Automatically

• — Device information: Device type, operating system, unique device identifiers
• — Usage data: Pages visited, features used, interaction patterns, session duration
• — Technical data: IP address (anonymized where possible), browser type, crash logs, performance metrics
• — Location data: Approximate location (city or region level) when you grant permission, used to display nearby events and venues

2.3 Information from Third Parties

• — Authentication providers: When you sign in via Google, Apple, or other OAuth providers, we receive your name, email, and profile image as authorized by you
• — Payment processors: Transaction confirmation and status from Stripe or Apple (we never receive or store full payment card details)

3. Legal Basis for Processing (GDPR / LGPD)

We process your personal data on the following legal bases:

• — Contract performance: Processing necessary to provide the Service, process transactions, and manage your account (GDPR Art. 6(1)(b); LGPD Art. 7, V)
• — Legitimate interests: Improving the Service, preventing fraud, ensuring security, and conducting analytics (GDPR Art. 6(1)(f); LGPD Art. 7, IX)
• — Consent: Where required, such as for location data collection and marketing communications (GDPR Art. 6(1)(a); LGPD Art. 7, I)
• — Legal obligation: Compliance with applicable laws, tax requirements, and regulatory obligations (GDPR Art. 6(1)(c); LGPD Art. 7, II)

4. How We Use Your Information

We use the information we collect to:

• — Provide, operate, and maintain the Service
• — Process subscriptions, ticket purchases, payments, and refunds
• — Authenticate your identity and manage account access
• — Send transactional communications (purchase confirmations, account notifications, security alerts)
• — Improve, personalize, and optimize the user experience
• — Detect, investigate, and prevent fraud, abuse, or unauthorized access
• — Generate anonymized and aggregated analytics
• — Comply with legal obligations and enforce our Terms of Service

5. Data Sharing

We do not sell your personal data.

We may share your information only in the following circumstances:

• — Service providers: Trusted third-party vendors who assist in operating the Service (hosting, analytics, payment processing, email delivery), bound by contractual data protection obligations
• — Event organizers: When you purchase a ticket, the event organizer receives your name and email for event management and admission purposes
• — Legal requirements: When required by law, regulation, legal process, or governmental request
• — Safety and rights: To protect the rights, safety, or property of LiveArena, our users, or the public
• — Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the same privacy protections

6. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. When transferring data outside the European Economic Area (EEA) or Brazil, we ensure appropriate safeguards are in place, including:

• — EU Standard Contractual Clauses (SCCs)
• — Adequacy decisions by relevant data protection authorities
• — Binding corporate rules where applicable

7. Data Retention

We retain your personal data only for as long as necessary to:

• — Provide the Service and fulfill the purposes described in this policy
• — Comply with legal, accounting, and regulatory obligations
• — Resolve disputes and enforce agreements

When you delete your account, personal data is scheduled for deletion within 90 days. Certain records (transaction history, tax-related data) may be retained for up to 7 years as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Under GDPR (EU/EEA residents)

• — Right of access (Art. 15)
• — Right to rectification (Art. 16)
• — Right to erasure / right to be forgotten (Art. 17)
• — Right to restriction of processing (Art. 18)
• — Right to data portability (Art. 20)
• — Right to object to processing (Art. 21)
• — Right to withdraw consent at any time (Art. 7(3))
• — Right to lodge a complaint with a supervisory authority

Under LGPD (Brazilian residents)

• — Confirmation of the existence of processing (Art. 18, I)
• — Access to personal data (Art. 18, II)
• — Correction of incomplete, inaccurate, or outdated data (Art. 18, III)
• — Anonymization, blocking, or deletion of unnecessary or excessive data (Art. 18, IV)
• — Data portability (Art. 18, V)
• — Deletion of data processed with consent (Art. 18, VI)
• — Information about shared data with third parties (Art. 18, VII)
• — Revocation of consent (Art. 18, IX)

To exercise any of these rights, contact us at contact@livearena.ai. We will respond within 30 days (or within the timeframe required by applicable law). We may request identity verification before processing your request.

9. Cookies and Tracking Technologies

The Service may use cookies and similar technologies (local storage, session identifiers) for authentication, security, preferences, and analytics. We do not use cookies for advertising or cross-site tracking.

You can manage cookie preferences through your browser or device settings. Disabling certain cookies may affect the functionality of the Service.

10. Security

We implement industry-standard technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure credential storage, access controls, and regular security assessments.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

11. Children's Privacy

The Service is not directed to individuals under the age of 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly. If you believe a child has provided personal data to us, please contact us at contact@livearena.ai.

12. Third-Party Services

The Service integrates with third-party services including:

• — Clerk — Authentication and identity management
• — Stripe — Payment processing and financial operations
• — Apple — In-App Purchases and subscription management
• — Amazon Web Services — Cloud infrastructure and data storage

These providers have their own privacy policies. We encourage you to review them. LiveArena is not responsible for the privacy practices of third-party services.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Material changes will be communicated through the Service or via email at least 30 days prior to taking effect. The “Last updated” date at the top of this page indicates when this policy was last revised.

Continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Data Protection Officer

For questions, concerns, or requests related to your personal data or this Privacy Policy, contact our Data Protection Officer at: