Privacy Policy.

Who we are

SiTIKET ("we", "us") operates https://sitiket.com, an event ticketing platform where event organizers publish events and sell tickets, and buyers discover events, purchase tickets, and check in at the gate. This policy explains what personal data we collect, why, and how we handle it. Questions or requests: hello@sitiket.id.

Data we collect

• Account data — when you sign in with Google we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.
• Order data — when you buy a ticket (signed in or as a guest) we collect your name, email address, and phone number so the organizer can issue your tickets and contact you about the event. Guest buyers verify their email with a one-time code.
• Payment proof— payments go directly from you to the event organizer (bank transfer or QRIS). You upload an image of your payment receipt, which we store and show to that event's organizer for manual verification. We never collect card numbers, bank credentials, or e-wallet logins.
• Organizer data — organizers provide business/contact details, payout bank account numbers, a QRIS code image, and an outgoing email configuration (see the Google section below, or SMTP credentials for other providers).
• Check-in data— when a ticket's QR code is scanned at the gate we record when and by which device it was checked in, to prevent ticket reuse.

Google user data

SiTIKET uses Google services in two ways:

• Google Sign-In — used only to authenticate you. We store the basic profile Google shares (name, email, avatar) to create your account.
• Connect Gmail (organizers only) — an organizer may authorize SiTIKET to send email on their behalf via the Gmail API (gmail.send scope). We use this authorization solely to send transactional emailsfor that organizer's events — buyer verification codes, ticket deliveries, payment and refund updates. We cannot and do not read, browse, or delete anything in the organizer's mailbox; the permission we request only allows sending. The authorization token is stored encrypted (AES-256-GCM) and is never shared. Organizers can revoke this access at any time at myaccount.google.com/permissions or by reconnecting a different account in their dashboard.

SiTIKET's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with the account holder's consent, for security purposes, or where required by law.

How we use data

• Processing orders, issuing QR tickets, and running gate check-in.
• Sending transactional email about your orders and tickets. These emails are sent from the event organizer's own email address, so replies reach the organizer directly.
• Letting organizers verify payment proofs and handle refund requests for their events.
• Keeping the platform secure (rate limiting, abuse and fraud prevention).

We do not sell personal data, and we do not use it for third-party advertising.

Sharing

The organizer of an event you buy tickets for can see your order details (name, email, phone, payment proof) — they need them to verify your payment and admit you at the door. Beyond that, we only disclose data when required by law. We use no third-party analytics or advertising trackers.

Cookies

We use essential cookies only: a session cookie that keeps you signed in, and a short-lived security cookie during the Gmail connection flow. No tracking or advertising cookies.

Storage, security & retention

Data is stored on our servers and transmitted over HTTPS. Sensitive credentials (organizer SMTP passwords and Gmail authorization tokens) are encrypted at rest. We keep order and ticket records for as long as needed to operate the platform and meet legal obligations. To request deletion of your account or data, email hello@sitiket.id — we will delete data that we are not legally required to retain.

Changes

We may update this policy as the product evolves. Material changes will be announced on this page with a new effective date. Continued use of SiTIKET after a change means you accept the updated policy.