How we protect your data. Last updated: April 7, 2026
1. Introduction
W69 AI Consultancy ("we", "us", "our"), operating TicketMatch.ai, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our Platform, in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy law.
2. Data Controller
The data controller for your personal data is:
W69 AI Consultancy
Email: [email protected]
The Netherlands
3. Data We Collect
We collect the following categories of personal data:
- Account data: Name, email address, company name, phone number, KVK number, VAT number.
- Authentication data: Login method (Google, Microsoft, email OTP), session tokens.
- Booking data: Group details, passenger names, travel dates, venue selections, booking history.
- Usage data: Pages visited, features used, timestamps, IP address, browser type.
- Payment data: Processed by our payment providers Mollie (tickets) and Stripe (subscriptions); we do not store credit card or bank details.
- Uploaded data: Passenger lists (Excel, CSV, Word files) uploaded by you.
4. Purpose of Processing
We use your personal data for the following purposes:
- Service delivery: To provide and maintain the Platform, process bookings, and manage your account.
- Communication: To send booking confirmations, login codes, and service updates.
- Improvement: To analyze usage patterns and improve the Platform.
- Legal compliance: To comply with legal obligations, such as tax and accounting requirements.
- Marketing: Only with your explicit consent, to send promotional offers or newsletters.
5. Legal Basis
We process your data based on:
- Contract: Processing necessary for the performance of our service agreement with you.
- Legitimate interest: For improving our services and ensuring platform security.
- Consent: For marketing communications and optional data processing.
- Legal obligation: For compliance with tax, accounting, and other legal requirements.
6. Data Sharing
We may share your data with:
- Venue/ticket providers: To process and confirm your bookings (group name, number of guests, date).
- Payment providers: Mollie B.V. (Amsterdam, NL) for ticket payments and Stripe Payments Europe Ltd. (Dublin, IE) for subscription billing.
- Hosting provider: Vercel Inc. and Supabase Inc. for platform hosting and database services.
- CRM: HubSpot for customer relationship management.
We do not sell your personal data to third parties.
7. Data Transfers
Some of our service providers (Vercel, Supabase, HubSpot) are based in the United States. Data transfers to the US are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission.
8. Data Retention
- Account data is retained for the duration of your account plus 12 months after deletion.
- Booking data is retained for 7 years for tax and legal purposes.
- Uploaded passenger lists are stored for the duration of the associated booking only.
- Usage data is retained for 26 months.
9. Your Rights
Under the GDPR, you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Restriction: Request restriction of processing.
- Portability: Request your data in a machine-readable format.
- Objection: Object to processing based on legitimate interest.
- Withdraw consent: Withdraw consent for marketing communications at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Cookies
The Platform uses essential cookies for authentication and session management. We do not use tracking or advertising cookies. No consent banner is required for essential cookies under GDPR.
11. Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), encrypted database storage, access controls, and regular security reviews.
12. Children
The Platform is a B2B service intended for business use only. We do not knowingly collect data from individuals under 16 years of age.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The latest version is always available at ticketmatch.ai/privacy.
14. Complaints
If you believe we are not handling your data correctly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
15. Contact
For any privacy-related questions or requests:
W69 AI Consultancy
Email: [email protected]
The Netherlands