1) Who we are

ShowsTown LLC and our affiliated companies and subsidiaries (“ShowsTown,” “we,” “us” or “our”) recognize the importance of privacy, security, and transparency. We provide services including the Fantaztix Venue Management System and related services (the “Services”).

This Privacy and AI Policy (“Policy”) explains how we collect, use, and disclose Personal Data as a controller/business, how we protect data processed through the Services, and how AI-enhanced features work when you choose to use them.

2) Scope and audience

This Policy applies to Personal Data we process as a controller/business in connection with:

• Visitors of ShowsTown LLC website(s)
• Business partners
• Individuals who register to use our products and Services
• Other individuals who communicate or interact with us about our products, Services, or business

This Policy also describes administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of data processed through the Fantaztix Venue Management System (the “Service”) by venues, theaters, resellers, and their authorized staff (B2B use).

This Policy does not apply to Personal Data we collect and process about employees, applicants, or contractors; separate notices apply to those data sets.

3) Customer Data (processor/service provider role)

When we process data on behalf of Customers (“Customer Data”), we act as a processor/service provider and process Customer Data only in accordance with the instructions of our Customers, who are the controllers/businesses for their respective Customer Data.

Customer Data is owned and controlled by our Customers. Customer Data may include information from endpoints and other systems, tools, or devices that Customers manage or monitor using our Services, and end user data related to activities on relevant networks and systems. It may also include event logs, end user information (such as IP address, email address and computer name), and other Personal Data, where relevant.

Our Customers’ respective privacy policies apply to and govern the processing of Customer Data, not this Policy. For privacy information related to Customer Data, please reach out to the Customer directly.

4) Data covered and categories of Personal Data collected

The Personal Data we collect, and how we use it, varies depending upon the nature of our relationship and interactions with you and your configuration and use of the Service.

Depending on configuration and usage, Fantaztix may process:

• Venue/theater business information and operational settings
• Staff and reseller account information (e.g., usernames, roles, permissions)
• Event and inventory information (e.g., show/event titles, showtimes, pricing, seating/sections, availability)
• Ticketing and transaction information (e.g., order details, barcodes/e-tickets, refunds/exchanges)
• Customer contact information provided to the venue (e.g., name, email, phone number)
• Customer identification photos, where a venue enables optional photo capture (e.g., for season pass or membership verification)
• Technical and security data (e.g., access logs, audit trails, device/browser information, IP address)

We may also collect the following types of Personal Data:

• Identifiers: name, username, account name, address, phone number, email address, online identifiers, IP address, or other similar identifiers
• Customer records: contact information and payment information provided to purchase or obtain products/Services; billing address; financial accounts; credit card information; order details; subscription and license information; usage details; user credentials and profile data (name, contact, authorized users)
• Customer support and service information: support tickets and other records related to requests; voicemail messages and transcriptions, call recordings related to support and customer service-related calls
• Commercial information: records of products or Services purchased, obtained, or considered, or other purchasing or use histories
• Usage details: domain, date/time/duration of visits, page visits, device/browser information, browsing history, clickstream data, search history, access logs, and interactions with our websites/Services, marketing emails, and online ads
• Geolocation data: precise location information about a particular individual or device
• Professional information: current and former employer(s) and position(s) and business contact information

5) Payment data (Stripe)

Fantaztix integrates with Stripe for payment processing. Fantaztix does not store full payment card numbers on Fantaztix servers. Payment processing is handled by Stripe in accordance with Stripe’s security and compliance obligations.

6) Customer identification photos (optional)

Fantaztix offers venues an optional feature allowing staff to capture a photograph (via webcam) or upload an image of a customer, typically to help verify identity for season pass or membership holders.

This feature is enabled at the venue’s discretion and is not required to use the Service; most customer records will not have a photo attached.

Photographs captured through this feature are stored as ordinary image files. Fantaztix does not perform facial recognition and does not extract, generate, or store any biometric identifier, faceprint, or scan derived from a photo. The feature is intended solely for human visual verification by venue staff.

Venues are responsible for obtaining any customer consent or notice required by their own policies or by applicable law prior to capturing or uploading a photo.

Customer identification photos are protected using the same encryption-at-rest and access control safeguards described in this Policy, and may be deleted by authorized venue staff at any time.

7) How we collect Personal Data

ShowsTown LLC collects Personal Data through normal business operations and in the administration of Customer relationships, which may include:

• Data submitted on websites: forms (e.g., making a purchase or completing a “Contact Us” form), downloading/accessing Services, downloading/accessing documentation, subscribing to newsletters, or corresponding with us by phone/email/other
• Customer support and service: when Customers contact us for support or other customer service requests, we maintain support tickets and other records; we may also collect call recordings
• Business contact and customer relationship management: company name, business contact name and title, phone number, email, other contact details; billing address; financial account and credit card information; order details; subscription/license information; usage details; user credential and profile data
• Usage details: server automatically collects certain browser/device-generated information (domain, IP address, date/time/duration, browser type, operating system, page visits, and other information about your computer or device)
• Cookies: for login features, storing temporary user settings, and analyzing system usage and traffic

8) How we use Personal Data

We use Personal Data to:

• Provide, operate, maintain, and improve the Services
• Administer accounts, subscriptions, licensing, billing, and customer relationships
• Provide customer support and respond to requests
• Communicate about the Services, including marketing where lawful and subject to consent where required
• Maintain security, prevent fraud, and protect our systems and users
• Comply with legal obligations and enforce agreements

9) Hosting and subprocessors

Fantaztix is hosted with DigitalOcean and CloudFlare.

Fantaztix also relies on the following key subprocessors to provide specific functionality:

• Stripe (payment processing)
• Twilio (SMS delivery, where used)
• Zoho Zeptomail (email delivery, where used)
• Anthropic (AI-assisted features, where enabled)

ShowsTown LLC takes reasonable steps to evaluate vendors’ security practices and to limit vendor access to what is necessary to provide their services.

10) Encryption and secure transmission

Fantaztix uses industry-standard security controls designed to protect data.

• Encryption in transit: Data transmitted between users, partner systems, and Fantaztix is encrypted in transit using HTTPS/TLS.
• Encryption at rest: All database information is encrypted at rest.

11) Access controls and authentication

ShowsTown LLC implements access controls designed to reduce the risk of unauthorized access:

• Role-based access control (RBAC) to support appropriate permissions for venue staff, resellers, and administrators
• Least-privilege access principles to limit access to data and systems
• Administrative access restricted to authorized personnel

12) Monitoring, logging, and auditability

Fantaztix uses logging and monitoring practices designed to support service reliability and security investigations, including:

• System and application logging
• Audit trails for key actions where applicable
• Review and investigation of suspected misuse or anomalous activity

13) Secure operations and maintenance

ShowsTown LLC maintains operational practices designed to protect the Service, which may include:

• Regular patching and updates to systems and dependencies
• Vulnerability remediation based on risk and operational impact
• Segmentation and separation of environments where appropriate

14) Backups, recovery, and availability

ShowsTown LLC maintains safeguards designed to support availability and recovery, such as:

• Regular backups of critical systems and data
• Recovery procedures designed to restore service after incidents

15) Security (general)

ShowsTown LLC maintains (and requires its service providers to maintain) organizational and technical measures designed to protect the security and confidentiality of Personal Data we process. However, no environment or security procedures or protocols are ever guaranteed to be 100% secure or error-free. Accordingly, except in the case of gross negligence or willful misconduct we cannot be held responsible for unauthorized or unintended access that is beyond our control.

We encourage you to take care when disclosing Personal Data online and use readily available tools and security measures to protect yourself online.

16) Data retention

ShowsTown LLC retains Personal Data only as long as necessary to:

• Provide and improve the Service
• Provide historical reporting
• Meet legal, accounting, tax, and dispute/chargeback obligations
• Maintain appropriate security logs and audit trails

Retention periods may vary depending on data type, venue configuration, and contractual requirements.

Customer identification photos, where used, are retained until removed by authorized venue staff or until the associated customer record is deleted.

We may also retain Personal Data for longer periods where required by legal process, legal authority, or other governmental entity, or where needed to maintain an accurate record of dealings in the event of complaints or challenges, including where a statute of limitations may apply.

17) Incident response

ShowsTown LLC maintains procedures designed to identify, respond to, and mitigate security incidents. If ShowsTown LLC becomes aware of a confirmed breach affecting Personal Data or venue business data, ShowsTown LLC will take reasonable steps to notify affected parties as required by applicable law and contractual obligations.

18) AI features and scope (optional)

ShowsTown LLC and Fantaztix offer features that are augmented by AI from Anthropic. These features are labeled as “Taz” or an “assistant” or “powerup” and are optional to the functioning of the application. These features are provided on an opt-in basis.

If you choose to utilize the AI-enhanced features, the following information is typically sent to the AI to help complete your request:

• The titles of your shows/events
• The names of your approved resellers
• The current conversation’s history (your messages and the AI’s replies)

When providing a response, the AI may query your transaction data. It will only access the minimum amount of data needed to answer your request. When displaying a preview of a custom report, the AI may query a small subset of representative database records to show a preview of what the report or answer may look like. Customer or reseller information (names, emails, etc.) may be included in this preview. In the case of answering a direct question, the AI is able to query your data directly to provide the most accurate response.

What is not sent to the AI:

• A full copy of your data
• Any data that the AI didn’t query to complete your request

As detailed in Anthropic’s policies, none of the information sent is used to train models or is otherwise disclosed to other entities. Anthropic retains the conversation history and data related to the chat for 30 days, after which it is deleted permanently.

ShowsTown LLC does routine usage logging of all interactions with our system, but otherwise does not store the details of your interaction with any AI features.

19) Marketing choices

Where lawful to do so, and subject to your consent where required, we may communicate with Customers (and related business contacts) about our Services. If you wish to opt out from receiving marketing communications, please send a request to [email protected].

20) Children

The ShowsTown LLC websites, Services and portal are not for use by children under the age of 18 years and ShowsTown LLC does not knowingly collect, store, share or use the Personal Data of children under 18 years. If you are under the age of 18 years, please do not provide any Personal Data to ShowsTown LLC, even if prompted to do so. If you are under the age of 18 years and you have provided Personal Data, please ask your parent(s) or guardian(s) to notify ShowsTown LLC, and ShowsTown LLC will delete all such Personal Data.

21) Third-party links

The websites may contain links to third party websites. ShowsTown LLC does not control and is not responsible for the privacy practices of such websites. We encourage you to review the privacy policies of these third-party websites. ShowsTown LLC accepts no responsibility arising from or regarding such third-party websites.

22) Policy updates

ShowsTown LLC will review and update this Policy periodically to respond to changing legal, technical, and business developments. We will note the date of its most recent revision herein. We will notify you directly where we have made substantial updates to this Policy, and we also recommend that you review this Policy periodically.

23) Contact

For the most current version of this Policy, please refer to www.fantaztix.com.

If you have any questions in relation to this Policy, or to report a suspected security issue, please contact us:

• Email: [email protected]
• Phone: 417-413-3850
• Mail: ShowsTown LLC, 1440 State Hwy 248, Suite Q-480, Branson, MO 65616

Updated October 22, 2026