Last Updated: January 1, 2026
This Privacy Policy describes how Dynadata LLC, doing business as SeatData.io ("SeatData," "we," "us," or "our"), collects, uses, discloses, and protects your personal information when you access or use our website at seatdata.io, our APIs, our data analytics platform, and any related services (collectively, the "Services").
SeatData.io is a business-to-business (B2B) software-as-a-service (SaaS) platform providing concert and event ticket sales data analytics. We are committed to protecting your privacy and handling your personal information with transparency and care.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.
"Personal Data" (also "Personal Information") means any information that relates to an identified or identifiable individual, including but not limited to name, email address, payment information, and usage data.
"Processing" means any operation performed on Personal Data, whether automated or not, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, or erasure.
"Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Privacy Policy, SeatData is the Data Controller.
"Data Processor" means an entity that processes Personal Data on behalf of the Data Controller.
"Account" means a unique account created for you to access our Services or parts of our Services.
"Device" means any device that can access the Services, such as a computer, mobile phone, or tablet.
"Usage Data" means data collected automatically, either generated by your use of the Services or from the Services infrastructure itself.
"Cookies" means small files placed on your Device by a website, containing details of your browsing history and preferences.
When you register for an account, subscribe to our services, or contact us, you may provide:
When you access or use our Services, we automatically collect:
We may receive information about you from:
We use your Personal Data for the following purposes:
We process your Personal Data based on the following legal grounds:
| Legal Basis | Processing Activities |
|---|---|
| Contract Performance | Providing Services, processing payments, managing your Account, fulfilling subscription obligations |
| Legitimate Interests | Service improvement, analytics, fraud prevention, security, direct marketing to existing customers |
| Legal Obligation | Tax reporting, responding to legal requests, compliance with applicable laws |
| Consent | Marketing communications to prospects, optional cookies, specific data uses where consent is requested |
We may share your information in the following circumstances:
We share information with third-party service providers who perform services on our behalf, such as payment processing, email delivery, hosting, and analytics. These providers are contractually obligated to use your information only for the purposes of providing services to us.
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Services of any change in ownership or uses of your Personal Data.
We may disclose your information when required by law, regulation, legal process, or governmental request, including:
We may share your information with third parties when you have given us explicit consent to do so.
We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose, including research, analytics, and marketing.
We use the following categories of third-party service providers to process your data:
| Provider Category | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment card details, billing address, email, transaction data |
| SendGrid | Email delivery | Email address, name, email content |
| Cloud Hosting (PostgreSQL) | Data storage and processing | All account and service data |
| Redis | Caching and rate limiting | Session data, API usage metrics |
| Analytics Services | Website analytics | Usage data, device information, browsing behavior |
All service providers are contractually bound to protect your information and may only use it for the specific purposes for which we engage them.
We use cookies and similar tracking technologies to collect and track information and to improve and analyze our Services:
You can control cookies through your browser settings. Most browsers allow you to:
We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account Information | Duration of account + 3 years | Service provision, legal compliance |
| Transaction Records | 7 years after transaction | Tax and financial regulations |
| API Usage Logs | 2 years | Service analysis, security, billing |
| Support Communications | 3 years after resolution | Customer service, legal protection |
| Marketing Preferences | Until consent withdrawn | Respect user preferences |
| Server Logs | 90 days | Security, troubleshooting |
When data is no longer needed, we securely delete or anonymize it. Anonymized data may be retained indefinitely for analytics and research purposes.
We implement appropriate technical and organizational measures to protect your Personal Data:
In the event of a data breach that affects your Personal Data, we will:
SeatData is based in the United States. Your Personal Data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
When we transfer Personal Data outside your jurisdiction, we ensure appropriate safeguards are in place:
Your data is primarily processed and stored on servers located in the United States. By using our Services, you acknowledge and consent to this transfer and processing.
Depending on your location and applicable law, you may have the following rights regarding your Personal Data:
You have the right to request a copy of the Personal Data we hold about you.
You have the right to request correction of inaccurate or incomplete Personal Data.
You may request deletion of your Personal Data, subject to certain exceptions (e.g., legal obligations, ongoing disputes).
You may request that we limit how we use your Personal Data in certain circumstances.
You may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
You may object to processing of your Personal Data for direct marketing or based on legitimate interests.
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at support@seatdata.io. We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
You have the right to request that we disclose:
You have the right to request deletion of Personal Information we collected from you, subject to certain exceptions.
You have the right to request correction of inaccurate Personal Information.
You have the right to opt-out of the "sale" or "sharing" of your Personal Information. SeatData does not sell or share Personal Information as defined under the CCPA/CPRA.
You have the right to limit the use and disclosure of sensitive Personal Information. We only use sensitive Personal Information for purposes permitted under the CCPA/CPRA.
We will not discriminate against you for exercising your privacy rights. This means we will not:
In the preceding 12 months, we have collected the following categories of Personal Information:
To submit a request under the CCPA/CPRA:
We verify requests by matching information you provide with information we have on file. For requests made through an authorized agent, we may require proof of authorization.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and similar laws:
Dynadata LLC (dba SeatData.io) is the Data Controller for your Personal Data:
We process your Personal Data based on the legal grounds described in Section 5, including contract performance, legitimate interests, legal obligations, and consent.
Under the GDPR, you have the rights described in Section 12, including:
We do not use fully automated decision-making that produces legal or similarly significant effects on you without human involvement.
If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory authority in your member state of residence, place of work, or place of the alleged infringement.
When we transfer your Personal Data outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms as described in Section 11.
Our Services are designed for business users and are not intended for children. We do not knowingly collect Personal Data from anyone under the age of 18 (or the age of majority in your jurisdiction).
If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us immediately at support@seatdata.io. If we become aware that we have collected Personal Data from a child without verification of parental consent, we will take steps to delete that information.
Our Services may contain links to third-party websites, applications, or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
We will notify you of material changes by:
We encourage you to review this Privacy Policy periodically. Your continued use of our Services after changes are posted constitutes your acceptance of the updated Privacy Policy.
If you do not agree with any changes, you should discontinue use of our Services and contact us to request deletion of your Personal Data.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We will respond to your inquiry within a reasonable timeframe, typically within 30 days.
For data subject requests (access, deletion, correction, etc.), please include:
If you are not satisfied with our response to your privacy concerns, you may have the right to file a complaint with your local data protection authority.