This policy explains what personal information Drive-In Online (provided by [Company legal name], "we") collects, how we use it, and your choices. For tickets, the theater you buy from also receives your information and handles it under its own policies.
What we collect
- Account information: your email address, display name, and a salted hash of your password (never the password itself). If you sign in with Google, we receive your email address and whether Google has verified it.
- Theater information: what owners and staff enter: the theater's profile, screens, schedule, prices, and staff names, email addresses and roles.
- Ticket purchases: the showing, spot, ticket options and add-ons, amount, time of purchase, the email address the receipt goes to, and gate check-in times. For card payments we keep only the card brand and last four digits; the full card number goes to the payment processor and isn't stored by us.
- Technical information: server logs with IP addresses, browser type and the pages requested, kept to operate and secure the Service.
Cookies
We use only cookies needed for the Service to work: to keep you signed in and to protect forms against forgery. We don't use advertising or analytics cookies. Our pages and their fonts are served only from our own servers.
How we use it
- to provide the Service: sign-in, running theaters, selling and checking tickets, and sending receipts, invitations and account emails;
- to bill theaters for their subscriptions;
- to keep the Service secure, prevent fraud and abuse, and fix problems;
- to meet legal obligations.
We don't sell personal information, and we don't use it for advertising.
Who we share it with
- Theaters: when you buy a ticket, the theater sees your purchase and receipt email. Staff see what their roles allow.
- Service providers who process data for us: Amazon Web Services (hosting, database, backups and email delivery), Google (if you choose Google sign-in), and our payment processor (card payments).
- When the law requires it, or to protect the rights and safety of users, theaters or the public.
- In a business transfer, such as a merger or sale, subject to this policy.
How long we keep it
Account information is kept while your account exists. Ticket sales are kept as the theater's business records. Database backups are kept for 30 days. Server logs are kept only as long as needed to operate and secure the Service.
Your choices
- Update your email address and password under your account settings.
- Download your personal data, or delete your account, under Account → Personal data. Tickets you bought stay with the theater as sales records but are no longer linked to your account.
- Depending on where you live, you may have other rights, such as to access or correct your information; contact us to use them.
Security
Connections are encrypted, passwords are hashed, and access to data is limited to what's needed to run the Service. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.
Children
The Service isn't directed to children under 13, and we don't knowingly collect their personal information.
Changes
We'll post any changes here with a new effective date, and email account holders about material changes.
Contact
[Company legal name] · [Mailing address] · [contact email]