01 / Scope and roles
Who this policy covers
This Privacy Policy applies to TicketOpus websites, applications, APIs, account administration, sales and support interactions, and other services that link to it (the Services). Cordelio LLC, a legal entity registered in Texas, builds, markets, and operates TicketOpus. “TicketOpus,” “we,” “us,” and “our” mean Cordelio LLC.
TicketOpus serves businesses that sell and operate tours, activities, tickets, classes, rentals, camps, private events, and similar experiences (each a Subscriber).
TicketOpus determines how information is used for its own marketing, account administration, security, support, and service improvement. When a Subscriber uses TicketOpus to handle its guests, participants, staff, or customers, the Subscriber generally determines why that information is collected and TicketOpus processes it on the Subscriber’s behalf. The Subscriber’s privacy notice also applies to that information.
If your question concerns a booking, waiver, event, marketing message, or guest record, contact the experience business first. We will assist that business with verified requests as required by our agreement and applicable law.
02 / Collection
Information we collect
Information you provide
- Account and business information: names, business names, email addresses, phone numbers, locations, time zones, credentials, roles, permissions, and account preferences.
- Sales and support information: demo or contact requests, website addresses, business type, location count, implementation goals, notes, correspondence, support records, and consent choices.
- Subscriber content and guest information: catalog and schedule content, customer and participant details, custom checkout answers, accessibility or accommodation requests, emergency contacts, waiver and signature records, tickets, memberships, gift cards, private-event records, communications, uploaded files, and operational notes.
- Transaction information: booking and order totals, taxes and fees, payment status, refunds, disputes, payout and reconciliation records, provider identifiers, and masked payment details. Payment providers, rather than TicketOpus, collect and process full payment-card credentials when their payment forms or devices are used.
- Mobile and field-operations information: device registration and push-notification tokens, offline synchronization records, scanner events, assigned work, and security or incident records. TicketOpus does not require uploaded camera frames to scan a ticket.
Information collected automatically
We may collect IP address, browser and device type, operating system, referring page, requested URL, timestamps, diagnostic and security logs, authentication events, feature interactions, and cookie or session identifiers. The marketing site records page type, page slug, referral category, campaign parameters, and calls to action so we can understand the path to a signup or sales request.
Information from other sources
We may receive information from Subscribers and their authorized users, guests or participants acting through a Subscriber’s site, payment and communications providers, distribution or accounting integrations, identity providers, implementation partners, and other services a Subscriber chooses to connect.
03 / Use
How we use information
We use personal information to:
- provide, configure, secure, maintain, and support the Services;
- create accounts, authenticate users, enforce permissions, and prevent fraud or misuse;
- support catalog, availability, booking, checkout, payments, communications, guest service, reporting, and other Subscriber workflows;
- process demo, sales, onboarding, migration, and support requests;
- send requested service communications and marketing communications where permitted, with available opt-out controls;
- measure performance, diagnose errors, audit activity, improve usability, and develop features;
- comply with law, enforce agreements, resolve disputes, and protect people, Subscribers, TicketOpus, and the public; and
- create aggregated or de-identified information that does not reasonably identify a person.
AI-assisted features
If a Subscriber enables an AI-assisted feature or a connected AI provider, relevant prompts, selected records, and generated content may be processed to provide that feature. AI output can be incomplete or incorrect. Subscribers must review output before using it for guest communications, policy, safety, pricing, eligibility, or other consequential decisions.
04 / Disclosure
How we disclose information
We may disclose information to:
- Subscribers and authorized users according to company, location, role, and permission settings;
- service providers that support hosting, storage, security, communications, support, analytics, payments, AI-assisted features, and other platform functions;
- connected services when a Subscriber or user enables an integration or directs a transfer;
- professional advisers and authorities when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or establish or defend legal claims; and
- transaction participants in connection with financing, reorganization, merger, acquisition, or sale of all or part of the business, subject to appropriate confidentiality protections.
TicketOpus does not sell personal information for money. TicketOpus does not currently use personal information from its marketing site for cross-context behavioral advertising. A Subscriber may configure third-party analytics or advertising tools on its hosted site; those tools and the Subscriber’s choices are described by the Subscriber’s notice and privacy controls.
06 / Lifecycle
Retention and security
We retain information for as long as reasonably necessary to provide the Services, maintain the account or Subscriber relationship, complete transactions, preserve security and audit records, comply with financial or legal obligations, resolve disputes, and enforce agreements. The period depends on the type and sensitivity of the information, the Subscriber’s configured retention schedule, contractual requirements, and whether a legal hold or other exception applies.
When information is no longer required, we take reasonable steps to delete, de-identify, or securely dispose of it. Deletion from backups and distributed systems may occur on a delayed cycle.
TicketOpus uses administrative, technical, and organizational safeguards designed for the nature of the information, including encrypted transport, password hashing, authentication controls, company-scoped access, permission checks, audit records, and security monitoring. No storage or transmission method is completely secure, and we cannot guarantee absolute security.
Information may be processed in the United States and in other places where TicketOpus or its providers operate. Where required, we use contractual or other recognized safeguards for cross-border transfers.
07 / Minors
Children and participant information
The TicketOpus marketing site and platform accounts are directed to businesses and adults, not children under 13. Some Subscribers operate camps, classes, and family activities and may use the Services to collect information about minor participants. In those cases, the Subscriber is responsible for deciding what to collect, providing required notices, obtaining verifiable parental or guardian consent when required, limiting collection, and honoring parental rights. TicketOpus processes that information for the Subscriber and supports appropriate access, retention, and deletion controls.
Do not create a TicketOpus platform account if you are under 18. If you believe a child submitted personal information directly to TicketOpus without appropriate authorization, contact us.
08 / Choices
Your choices and privacy rights
Depending on where you live and how TicketOpus handles your information, you may have the right to request access, correction, deletion, or a portable copy; to limit or object to certain processing; to withdraw consent; or to appeal a decision. Applicable rights can have exceptions, including for security, legal compliance, transactions, and the rights of others.
- Account information: authorized users can update many account and business fields in the Services.
- Marketing: use the unsubscribe method in a marketing message or contact us. Service and security messages may still be necessary.
- Hosted-site analytics: use the privacy banner or the “Disable analytics and personalization” control on the Subscriber’s cookie page.
- Booking and participant records: contact the experience business that collected the information. TicketOpus will assist the business with its response.
- TicketOpus-controlled information: email [email protected] with enough detail for us to identify the interaction and the right you wish to exercise.
We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted. If applicable law provides an appeal right, reply to our decision with “Privacy appeal” in the subject line. We will not discriminate against you for exercising an applicable privacy right.
Subscribers that need a data processing addendum or current information about subprocessors and international-transfer safeguards may contact [email protected]. Availability and terms may depend on the applicable service agreement and processing.
09 / Contact
Changes and contact
We may update this policy as the Services, providers, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required.
Cordelio LLC / TicketOpus privacyRegistered in Texas
[email protected]
For the rules governing use of the Services, see the Terms of Service.