Privacy Policy

This policy explains what personal information Kilikood Inc. ("Kilikood"), Toronto, Canada, collects, why, and what you can do about it. It is written to meet our obligations under PIPEDA and applicable provincial privacy legislation.

What we collect

When you buy a ticket, whether or not you have an account:

• your name and email address;
• your phone number and city, where the organizer requires them;
• the name of each attendee on the order, and their email or phone where the organizer requires per-attendee contact details;
• answers to any custom questions the organizer has added to their checkout;
• whether you consented to marketing email.

When you pay, your card details go directly to our payment processor, Stripe. We never receive or store your full card number. We retain the payment identifier, the amount, and the last four digits for reconciliation and refunds.

Automatically, we record the IP address associated with sensitive actions (checkout, refunds, administrative changes) for fraud prevention and audit purposes.

Why we use it

• To sell you a ticket, issue it, and admit you to the event — this is necessary to perform our contract with you.
• To send transactional email: order confirmations, refund notices, event reminders. These are not marketing and you cannot opt out of them while you hold a ticket.
• To prevent fraud and abuse.
• To send marketing email, only where you have given express consent. See the CASL Notice.

Who we share it with

• The organizer of the event you bought a ticket to. They receive the attendee details for their event, including names and any contact details and custom answers their checkout collected. They use this to run the event and are independently responsible for how they handle it.
• Stripe, to process payments and organizer payouts.
• SendGrid, to deliver email.
• Supabase, which hosts our database.
• Law enforcement or regulators where we are legally required to.

We do not sell personal information.

Where it is stored

Our infrastructure providers may process data outside Canada, including in the United States. Information stored outside Canada may be accessible to foreign courts and law enforcement under the laws of that jurisdiction.

How long we keep it

Order and ticket records are retained for seven years to meet tax, accounting and dispute-resolution obligations. Marketing consent records are retained for as long as consent is current and for three years after it is withdrawn, as CASL requires us to evidence consent.

Your rights

You may ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it where we are not required to retain it. Write to info@kilikood.ca.

If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner of Canada.

Cookies

We use only the cookies needed to keep you signed in and to complete a checkout. We do not use advertising or cross-site tracking cookies.

Door check-in app (Kilikood.ca Check-in)

Event staff use our check-in app to admit attendees at events.

What the app collects from staff. The name a staff member types when signing in, and a random identifier created when the app is installed (it is not your advertising identifier) that we use to limit failed sign-in attempts. Staff sign in with an access code created by the event organizer; the sign-in lasts until the code expires or the organizer revokes it.

What it records. Each admission, refusal or undo, with the time and the staff member's name. The organizer of the event can see this log for their event.

What it keeps on the phone. While a staff member is signed in, the phone keeps a copy of the event's ticket list so it can keep working without signal: attendee names, ticket type, seat and ticket status. It does not include attendees' email addresses or phone numbers. The copy is protected by iOS data protection, left out of device backups, and deleted when the staff member signs out.

How we use it. To admit attendees, prevent the same ticket being used twice, show the organizer how the door is going, and keep a record of check-ins.

Who sees it. The organizer of the event, and the service providers described above that host our systems. We do not sell this data. The app has no advertising and no analytics, and it does not track people across other companies' apps or websites.

How long we keep it. Check-in records are kept for 12 months.

Questions: info@kilikood.ca