Privacy Policy

This Privacy Policy explains how CelebrityPass (“we”, “us”, or “our”) collects, uses, stores, protects, and shares information when you use the CelebrityPass application and website. By using CelebrityPass, you agree to the practices described here. This policy is effective as of its “Last updated” date and reviewed regularly.

1. Information We Collect

We collect the following categories of information in order to provide and operate the service:

• Account information: your name and email address, and (optionally) the country you choose. A phone number is optional and is only stored if you voluntarily add it later in Account Settings.
• Fan card information: your digital fan card number (Fan ID), the celebrity communities you join, your chosen membership level, your card status, and your shareable card page with a QR code.
• Order information: your order reference, ticket selection, event attendance details, customer name, email, phone, and country entered at checkout.
• Payment information: For Bank Transfer payments we store the transfer amount, currency, your payment reference, and your uploaded transfer receipt. Payment card details are processed by an external card merchant and are not stored on our servers.
• Support and data-request messages: when you contact us, we keep your message so we can respond. If you submit a data request, we record it so we can act on it.
• Technical information: standard server logs (approximate IP address, device type, pages visited, timestamps) are used to operate, secure, and improve the service. When you submit a support message or a data request, we also record your IP address and browser details so we can respond, prevent abuse, and secure the service.

1a. Cookies & Analytics

CelebrityPass uses cookies only where needed for essential functionality, such as keeping you signed in. Session cookies are HttpOnly and are not used for advertising or cross-site tracking. We do not currently use third-party advertising cookies or third-party analytics beacons. If this ever changes, we will update this policy and provide appropriate notice.

2. How We Use Information

We use the information we collect to:

• Create and manage your account and fan cards.
• Process and fulfill your event ticket orders and membership purchases.
• Facilitate and verify Bank Transfer and card payments, including manual verification of bank-transfer receipts.
• Provide visual search: a photo you upload is sent to our AI provider (Google Gemini) solely to identify the celebrity or event shown in the image.
• Send order confirmations, tickets, and account notifications.
• Provide customer support and respond to inquiries.
• Maintain security, prevent fraud, and comply with legal obligations.

3. How We Share Information

We do not sell your personal data. We share information only as needed to run the service:

• With payment processors and card merchants to process your payments securely.
• With trusted service providers that host the application and its database.
• With our AI provider (Google Gemini) when you use visual search, so it can identify the celebrity or event in a photo you upload. The image is processed on the fly and is not stored by us.
• Where required by law, regulation, or a valid legal request.
• With your consent, or as otherwise described at the time you provide the information.

4. Data Retention & Account Deletion

We retain your account and order data for as long as your account is active or as needed to provide the service, satisfy legal or tax obligations, resolve disputes, and enforce our agreements. Bank-transfer receipt uploads are retained for the verification period and as legally required.

When you delete your account, we permanently remove your account, fan cards, and associated payment rows through our deletion flow. You can delete your account in the app (sign in and open Account Settings › Delete account) or on the web by submitting a deletion request on the User Rights & Data Requests page — no app download or sign-in is required. Deletion is permanent and cannot be undone. For legitimate reasons such as tax, anti-fraud, or regulatory compliance, some financial records may be retained only as long as the law requires, and we will tell you when we need to retain them.

4a. Service Providers

We use trusted service providers to run the service. These may include an application and database host (which stores the data described above), and an email delivery provider used to send transactional messages and manage support email. We do not sell your personal data to any third party.

5. Data Security

We apply appropriate technical and organizational measures to protect your data, including secure transmission (HTTPS), hashed account credentials, signed session cookies, restricted server-side access to payment verification tools, and least-privilege access to sensitive data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. For more detail, see our Security & Trust page.

6. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to withdraw consent. To exercise these rights, use our User Rights & Data Requests page, or contact us at the address below. We will respond within a reasonable time. If you are signed in, you can update your details or delete your account directly from Account Settings.

7. Policy Updates

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest revision. We encourage you to review this page periodically, and we will post any material changes here.

8. Children's Privacy

CelebrityPass is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, please contact us so we can delete it.

9. Contact Us

For privacy questions or requests, contact us at support@celebritypass.app, use our Contact & Support page (choose the Privacy category), or use the User Rights & Data Requests page.