Aftershock Promotions

This Privacy Policy explains what information Aftershock Promotions (“we”, “us”) collects, how we use it, who we share it with, and your rights. It applies to our website, the admin portal, and any related services (collectively, the “Platform”).

1. Information we collect

From buyers

Contact information: name, email address, and (optionally) phone number provided during checkout.
Purchase information: the event, ticket tier, quantity, order total, and ticket serial numbers.
Payment information: handled by Stripe. We do not see, store, or have access to your card number or bank details. Stripe provides us a token that represents the transaction.
Check-in data: timestamp and door-staff identifier when your ticket is scanned at an event.

From promoters and admin users

Account credentials (email + hashed password).
Organization name, website, logo, contact email, and Stripe Connect identifiers.
Content you upload: event listings, fighter records, gym details, poster art.
Session cookies used for authentication and to remember which organization you’re viewing (platform admins only).

Automatically

Standard web-server logs (IP address, user-agent, timestamps) for security and abuse prevention.
We do not use third-party analytics, advertising trackers, or session-recording tools.

2. How we use your information

Deliver tickets, receipts, and event updates.
Authenticate your account and operate the admin portal.
Process payments through Stripe and keep an auditable record of each transaction.
Support anti-fraud, anti-abuse, and rate-limiting measures.
Comply with legal obligations, including tax and accounting records.

We do not sell your personal information. We do not show third-party advertising on the Platform.

3. Who we share it with

Stripe — processes payments and manages Connect payouts to promoters. See Stripe’s own privacy policy at stripe.com/privacy.
Resend — sends transactional emails (ticket confirmations). See Resend’s privacy policy.
Promoters — if you buy a ticket to a Promoter’s event, that Promoter can see your name, email, phone (if provided), and purchase details so they can support you, verify admission, and handle refunds. Each Promoter is responsible for their own use of that data in accordance with applicable law.
Legal or safety reasons — if required by valid legal process, to protect users, or to investigate fraud or abuse.

4. Retention

We keep order and ticket records for as long as we need to operate the Platform and comply with legal, tax, and accounting obligations — typically seven years for financial records. Account data is retained while your account is active and for a reasonable period afterward so we can respond to disputes and chargebacks.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to restrict or object to certain processing. To exercise these rights, email support@aftershocknetwork.com from the address associated with your account. We’ll respond within the timeframe required by applicable law (30–45 days in most jurisdictions).

We will not discriminate against you for exercising a privacy right. Note that some records (e.g., financial transactions retained for tax purposes) may be retained in redacted form even after a deletion request.

6. Security

We encrypt data in transit using TLS, hash passwords with bcrypt, and delegate payment-card handling to Stripe (a PCI-DSS Level 1 provider). No system is perfectly secure; if we experience a breach that affects you, we will notify you in line with applicable law.

7. Cookies

We use a small number of first-party cookies, all strictly necessary:

aftershock_session — authenticates you to the admin portal.
aftershock_active_org — lets platform administrators view a specific organization’s data.

We do not use third-party advertising or analytics cookies.

8. Children

The Platform is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

9. International users

Aftershock Promotions operates in the United States. If you access the Platform from another country, you consent to the transfer of your information to the U.S., which may have different data-protection laws than your home jurisdiction.

10. Changes

We may update this Privacy Policy as the Platform evolves or to reflect changes in law. If we make a material change, we’ll notify registered users by email or post a notice on the Platform. The “Effective” date above always reflects the current version.

11. Contact

Privacy questions or rights requests: support@aftershocknetwork.com.