Silver Screen Mavericks LLC ("BEET", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. BEET stands for Bringing Entertainment and Events Together. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our website at gobeet.app (including **www.**gobeet.app), our mobile apps where available, and related services (collectively, the "Services").

By using the Services, you agree to this policy. If you do not agree, please do not use the Services.

Account and profile information

• Identifiers and contact: email address; phone number when you choose phone sign-in or add it to your profile; display name; profile photo; date of birth if you provide it.
• Authentication: when you sign in with email, Google, Apple, or phone, our authentication providers process credentials and related account data according to their terms and this policy.
• Verification: for phone sign-in we use Google reCAPTCHA, which may collect usage and device-related data as described by Google.
• Preferences: notification settings; push notification device tokens (used to deliver notifications to your device via Firebase Cloud Messaging); in-app preferences such as theme and language; discovery preferences (for example location, categories, saved events, and similar choices stored on your device—see Cookies and similar technologies).
• Host and business accounts: if you create or manage venues (spaces), events, deals, or business features, we collect information you submit (such as business or venue names, contact emails, locations, social media links, and payout-related setups through our payment partners).
• Influencer profiles: if you register as an influencer, we collect your display name, contact information, social media links and follower counts, and service regions.

Event registration and ticket purchase

• When you register for or purchase tickets to an event, we collect your first and last name, email, phone number, and billing details (name and address).
• Hosts may include custom questions on their registration forms; your responses are collected and shared with the host.
• We may also collect dietary restrictions, accessibility needs, and referral source if you choose to provide them.

Guest checkout

• You may purchase tickets or vouchers without creating an account. Guest checkout requires your first and last name, email address, and phone number.
• Some features (for example registered-user-only promo codes and order history) require a registered account.

Location information

• We may collect city, region, address, or coordinates when you provide them or when you use location-based discovery features, to show relevant events, deals, and places.

Transactions

• Events and deals: booking and purchase history, tickets, vouchers, promo codes applied, discount amounts, and related order information.
• Payments: payments are processed by Stripe (and, for hosts, Stripe Connect). Card and bank details are handled by Stripe under its policies; we receive limited payment-related information needed to operate the Services (for example confirmation of payment, Stripe Customer ID, Payment Intent ID, Charge ID, transaction amounts, payment status, and refund records). We do not store your full card number, CVV, or PIN.

Usage and technical information

• How you use the Services (such as pages or features you interact with, and support conversations you start).
• Device and connection data typically found in server logs (for example IP address, browser type, device type and name, app version, time zone settings, and approximate timing).
• Login timestamps, login attempt history, and account activity dates.
• Information needed to secure the Services and prevent abuse (including signals processed through Firebase, reCAPTCHA, and similar tools).
• Product analytics: pages and features you interact with, and the steps you complete or abandon during ticket and voucher checkout, processed on our behalf by PostHog. We use this to find where the Services are confusing or broken. It is not used for advertising or behavioral ad profiling, and it is not sold or shared for those purposes.
• Session recordings: we record how you interact with our website—pages viewed, clicks, scrolling, and navigation—so we can see where people get stuck. Recordings are processed by PostHog and retained for 30 days. Text you type into forms is masked and not recorded, and payment card details are entered in Stripe's own secure frames, which we cannot record. Browser diagnostic messages are captured alongside recordings to help debug errors.
• Error and crash diagnostics: when something in the Services fails—on the website or in our mobile apps—we record the error, the software release it occurred on, the page or screen involved, and the sequence of actions leading up to it. Where you are signed in, this is associated with your account identifier. Processed by Sentry. We have configured it to exclude your IP address and email address, and it does not record your screen or capture screenshots.

Content you provide

• Information you submit when you create events, deals, listings, announcements, or other content through the Services.
• Images and media you upload (profile photos, event banners, posters) which are stored and served via Cloudinary.

We use the information above to:

• Provide, operate, and improve the Services, including event discovery, BoxOffice movie experiences, MovieAgent and similar recommendation features, deal and voucher flows, spaces (venues), dashboards for hosts and partners, and account management.
• Process purchases, tickets, vouchers, QR code generation for check-in and redemption, promo code validation and discount calculation, refunds when applicable, and host payouts through Stripe Connect.
• Authenticate you, remember preferences, personalize content and suggestions, and send service-related and (where allowed) promotional communications.
• Send transactional emails (booking confirmations, receipts, refund notifications, coupon notifications) via our email delivery provider.
• Deliver push notifications you have opted into, and enforce rate limits on notifications to prevent excessive messaging.
• Enforce platform security (rate limiting, login attempt monitoring, account lockout after repeated failed attempts, security event logging).
• Detect and prevent fraud, abuse, and unauthorized access.
• Meet legal obligations, enforce our Terms of Service, and protect users, the public, and Silver Screen Mavericks LLC.
• Generate aggregated, anonymized analytics to improve the Services.

We do not sell your personal data to third parties for marketing or advertising purposes.

AI-powered features

MovieAgent, BoxOffice, and similar recommendation features use your event preferences, interaction patterns, and location to generate personalized suggestions. This processing happens on our own infrastructure. We do not share your personal data with third-party AI providers or use it to train external AI models.

Custom event question responses

When you respond to custom questions on an event registration form, your responses are stored by BEET and shared with the event host. Hosts determine what questions to ask; we process and retain responses as part of the order record. See our Terms of Service for host data responsibilities.

We comply with the CAN-SPAM Act for all commercial email communications. Every promotional email includes a clear unsubscribe mechanism, our physical mailing address, and accurate sender information. You can unsubscribe from promotional emails at any time via the link in any email or by managing preferences in your account settings. Transactional emails (booking confirmations, receipts, refund notifications, security alerts) are necessary for the operation of the Services and are not subject to unsubscribe.

We do not sell your personal information. We may share information as follows:

Organizers, venues, and partners

When you book an event, purchase a deal, or interact with a space or host on the platform, we share information reasonably necessary to fulfill your request (for example name, contact, order details, custom question responses, or attendance information).

Service providers

We use trusted vendors who process data on our behalf, including payment processing (Stripe and Stripe Connect), authentication and app infrastructure (Google Firebase, Apple as applicable), fraud prevention and bot protection (Google reCAPTCHA) for certain sign-in flows, product analytics (PostHog, US region), error and crash monitoring (Sentry), media storage and delivery (Cloudinary), transactional email delivery (Zoho ZeptoMail), push notifications (Firebase Cloud Messaging), cloud hosting, and customer support tools. They may access information only as needed to perform those services.

Legal and safety

We may disclose information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect rights, safety, or security.

Business transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to standard protections.

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor.

• Your payment card details are collected and processed directly by Stripe—we never see or store your full card number, CVV, or PIN.
• We receive and store only: Stripe Customer ID, Payment Intent ID, Charge ID, transaction amounts, payment and refund status, and processing fee records.
• Hosts who receive payouts connect their bank accounts directly through Stripe Connect; we do not access their bank credentials.

We use commercially reasonable technical and organizational measures designed to protect personal information, including:

• SSL/TLS encryption for all data in transit
• Secure password hashing via Firebase Authentication
• Encrypted QR code tokens for ticket check-in and voucher redemption
• Rate limiting on API requests and authentication attempts
• Account lockout after repeated failed login attempts
• Security event logging and monitoring
• Role-based access control for platform operations
• Input validation and sanitization to prevent injection attacks
• Refresh token rotation for session security

No internet transmission or storage is completely secure; we cannot guarantee absolute security.

Data breach notification

In the event of a data breach that affects your personal information, we will notify affected users and applicable regulatory authorities as required by law. For California residents, notification will be provided in accordance with California Civil Code 1798.82. We will make reasonable efforts to notify you promptly and include a description of the breach, the types of information involved, and steps you can take to protect yourself.

We retain your personal information for as long as your account is active or as needed to provide our services.

• Account data: retained until you request deletion.
• Transaction records: retained for 7 years for legal, tax, and compliance purposes.
• Security logs: retained for 1 year for fraud prevention and incident investigation.
• Deleted accounts: when you request account deletion, your account enters a 60-day grace period during which you can cancel the deletion. After the grace period, your profile is deactivated and personal data is queued for permanent removal, subject to the retention periods above for transaction records and security logs.

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to opt out of certain processing or marketing messages.

• Access: request a copy of the personal data we hold about you.
• Correction: update or correct your personal information through the profile and settings areas of the Services.
• Deletion: request deletion of your account and personal data via the in-app account deletion feature or by contacting us. Some data may be retained for legal or compliance reasons (see Data Retention).
• Portability: request a copy of your data in a structured, machine-readable format.
• Opt-out of communications: unsubscribe from emails via the unsubscribe link in any email, or manage push notification preferences in the App or your device settings.

To submit a privacy request, contact support@gobeet.app. We will acknowledge your request within 10 business days and respond substantively within 45 days (extendable to 90 days for complex requests, with notice). To protect your privacy, we may verify your identity before processing a request by confirming your account email address or requesting additional information. You can also visit our Help Center for product support.

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: what personal information we collect, use, and disclose.
• Right to Delete: request deletion of your personal information.
• Right to Opt-Out: we do not sell personal information.
• Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact support@gobeet.app.

We and our partners use cookies, local storage, and session storage where needed for the Services to work—for example to keep you signed in, remember preferences (such as items stored under our app's preference keys), and cache content for performance.

When you use Stripe checkout, social or phone sign-in, or reCAPTCHA, those providers may set or read cookies or similar technologies under their own policies.

We use PostHog for product analytics and session recording, which stores an identifier on your device so we can tell one visit from the next and see where people get stuck in the Services. Requests are served from our own domain. We do not store your IP address with these events; approximate location (such as city) is derived first and the address is then discarded.

Note: We do not integrate third-party advertising trackers (such as advertising pixels) for behavioral ad profiling, and we do not sell or share personal information for cross-context behavioral advertising. Our product analytics are used only to operate and improve the Services; if that changes, we will update this policy.

Do Not Track: We do not currently respond to "Do Not Track" (DNT) browser signals, as there is no industry-standard technology for honoring them. If a standard is established, we will update this policy accordingly.

The Services are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact support@gobeet.app.

We operate from the United States and may process and store information in the United States or other countries where we or our service providers operate. Those countries may have different data protection rules than your country. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

BEET or event hosts may run promotional sweepstakes, giveaways, or contests ("Promotions") through the Services. In connection with these, we may collect additional information for the purpose of verifying eligibility, selecting winners, and delivering prizes. This may include your name, email, mailing address, and -- for prizes valued at $2,000 or more -- tax identification information (W-9) as required by IRS regulations.

No purchase is required to enter or win any Promotion. Data collected for Promotions is used strictly for administering the Promotion, complying with applicable sweepstakes laws, and fulfilling tax reporting obligations. For host-run Promotions, the host is the sponsor and their own privacy practices apply to data they collect; see the Promotion's Official Rules for details.

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the Last updated date above. Material changes may require additional notice where required by law.

Questions about this Privacy Policy:

• Email: support@gobeet.app
• Help Center: help.gobeet.app