FestiShare Privacy Policy

Last Updated: June 9, 2026

This Privacy Policy ("Policy") describes how Party Express 360 LLC, the owner and operator of FestiShare ("FestiShare," "we," "us," or "our"), collects, uses, stores, shares, and protects information about you when you access or use the FestiShare website, mobile applications, and related services (collectively, the "Platform"). By using the Platform, you agree to the practices described in this Policy.

If you are a resident of California, Virginia, or another jurisdiction with specific data privacy rights, please see the supplemental sections at the end of this Policy for information about your additional rights.

1. Information We Collect

a. Information You Provide Directly

We collect information you provide when you create an account, purchase tickets, host an event, or otherwise interact with the Platform, including:

• Account information: first name, last name, username, email address, phone number, date of birth, gender, and profile picture.
• Payment information: billing name, address, and payment card details. Card numbers are processed and tokenized by our third-party payment processor (Stripe) and are never stored on FestiShare servers.
• Event information: event name, description, date, location, ticket tiers, pricing, and any images or media you upload when hosting an event.
• Communications: messages sent through the Platform's in-app group chat and direct messaging features.
• Guest purchase information: email address and name provided when purchasing a ticket without a registered account.
• Identity documents: government-issued identification or other documents uploaded for verification purposes, where applicable.
• Profile content: biography, fun fact, personal link, and any other optional profile fields you choose to complete.

b. Information Collected Automatically

When you use the Platform, we automatically collect certain technical and usage information:

• Device information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: pages visited, features used, search queries entered, links clicked, time spent on pages, and referring URLs.
• Location data: approximate location inferred from IP address. Precise GPS location is collected only if you grant permission through your device settings.
• Cookies and similar technologies: see Section 5 below for details.

c. Information From Third Parties

We may receive information about you from third parties, including:

• Payment processors (e.g., Stripe), who confirm payment status and flag potential fraud.
• Analytics providers, who provide aggregated data about Platform usage.
• Social login providers, if you choose to connect a third-party account to FestiShare (where available).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Platform: creating and managing your account, processing ticket purchases and payouts, facilitating in-app messaging, and delivering event QR codes and confirmations.
• Account security: verifying your identity, authenticating logins, detecting and preventing fraud, and enforcing our User Agreement.
• Communications: sending transactional emails (ticket confirmations, payout notifications, password resets), service announcements, and — with your consent — marketing and promotional emails about events or features.
• Personalization: recommending events, displaying relevant content, and tailoring your experience based on your preferences and usage history.
• Analytics and improvement: analyzing how users interact with the Platform to improve features, fix bugs, and develop new services.
• Legal compliance: meeting applicable tax, financial reporting, anti-money-laundering, and other regulatory obligations, including issuing IRS Form 1099-K to qualifying Hosts.
• Dispute resolution: investigating complaints, enforcing our policies, and responding to legal requests.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

a. With Other Users

Certain profile information (username, profile picture, summary) is visible to other users of the Platform. When you attend an event, your name may be visible to the Host and to other attendees within the event's group chat. Private messages are visible only to you and the recipient(s).

b. With Service Providers

We share information with trusted third-party vendors who process data on our behalf, including payment processors (Stripe), cloud hosting providers, email delivery services, analytics providers, and customer support tools. These vendors are contractually required to protect your information and may only use it to perform services for FestiShare.

c. With Event Hosts

When you purchase a ticket or RSVP to an event, we share your name and email address with the Host to facilitate check-in and event management. Hosts are prohibited from using this information for any purpose other than administering the specific event.

d. For Legal Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to: (i) comply with applicable law, regulation, or legal process; (ii) protect the safety, rights, or property of FestiShare, our users, or the public; or (iii) detect, prevent, or address fraud, security, or technical issues.

e. Business Transfers

If FestiShare is involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as necessary to provide the Platform and fulfill the purposes described in this Policy. Specifically:

• Account data: retained for the life of your account and for up to seven (7) years after account deletion to satisfy legal, tax, and financial reporting obligations.
• Transaction records: retained for seven (7) years from the date of the transaction to comply with IRS and other financial recordkeeping requirements.
• Messages: retained for the duration of your account. After account deletion, messages may remain visible to other participants in group chats for up to 90 days before being anonymized.
• Identity documents: retained only as long as needed for the verification purpose and deleted within 90 days of verification completion, unless required by law.
• Anonymized/aggregated data: may be retained indefinitely for analytics and product improvement.

You may request early deletion of your account and associated personal data at any time through the Platform's account settings. We will honor such requests subject to our legal retention obligations.

5. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Strictly necessary cookies: required for the Platform to function, including authentication tokens and session cookies. These cannot be disabled.
• Performance cookies: help us understand how users interact with the Platform (e.g., which pages are most visited, error rates). Data is aggregated and anonymous.
• Functional cookies: remember your preferences (e.g., language, display settings) to improve your experience.
• Analytics cookies: used by third-party analytics providers (e.g., Google Analytics) to collect usage statistics. You may opt out by using browser extensions or adjusting your browser settings.

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. We do not currently respond to "Do Not Track" browser signals, but we do honor opt-out requests for marketing emails.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), hashed storage of passwords, access controls limiting employee access to personal data on a need-to-know basis, and regular security assessments.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

7. Children's Privacy

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected personal information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at [email protected].

8. Your Rights and Choices

a. Access and Correction

You may access and update most of your personal information directly through your account settings. If you need assistance correcting inaccurate data, contact us at [email protected].

b. Account Deletion

You may delete your account at any time through the Platform's account settings. Upon deletion, we will remove or anonymize your personal information, subject to our legal retention obligations described in Section 4.

c. Marketing Communications

You may opt out of marketing emails at any time by clicking "Unsubscribe" in any marketing email or by adjusting your notification preferences in account settings. Transactional emails (e.g., ticket confirmations, password resets) cannot be opted out of while your account is active.

d. Do Not Sell / Do Not Share (CCPA)

We do not sell your personal information. We also do not share your personal information with third parties for cross-context behavioral advertising. If your rights under California law entitle you to a formal "Do Not Sell or Share My Personal Information" request, you may submit one to [email protected].

9. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following additional rights:

• Right to Know: the categories and specific pieces of personal information we have collected about you, the sources, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: request deletion of personal information we have collected, subject to certain exceptions (e.g., completing transactions, legal obligations).
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out: we do not sell or share personal information for cross-context behavioral advertising, but you may formally invoke this right.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, submit a verifiable consumer request to [email protected] or through the account settings page. We will respond within 45 days of receiving a verifiable request. You may designate an authorized agent to submit requests on your behalf.

10. Virginia and Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with applicable consumer privacy laws may have similar rights to those described in Section 9, including rights to access, correct, delete, and opt out of certain processing of personal data. To exercise these rights, please contact us at [email protected].

11. Third-Party Links and User-Generated Links

The Platform may contain links to third-party websites, services, or social media platforms. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you visit.

The Platform also includes messaging features (group chat and direct messages) through which users may share links to external websites. FestiShare applies technical measures to detect and block certain categories of malicious content (such as messages containing dangerous URI schemes like javascript: or data:). However, we cannot guarantee that every link shared by another user is safe, legitimate, or free from malware, phishing, or other harmful content.

You should exercise caution before clicking any link shared by another user, particularly if you do not recognize the destination. FestiShare is not responsible for any harm, data loss, financial loss, or privacy violation arising from your decision to visit a third-party website linked to by another user on the Platform. If you encounter a suspicious or malicious link in a chat, please report it to us immediately at [email protected].

12. International Data Transfers

FestiShare is based in the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to the transfer of your information to the United States.

13. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated Policy on the Platform with a revised "Last Updated" date and, where required by law, by sending you an email notification. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

This Privacy Policy is incorporated by reference into and governed by the FestiShare User Agreement.