Privacy Policy

BizzyU.com & the Bizzy Mobile Application

Effective Date: May 12, 2026 | Last Updated: May 12, 2026

Bizzy Holdings LLC, Bizzy Deals LLC, and Bizzy Ticketing LLC (collectively, "Bizzy," "we," "us," or "our") respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.bizzyu.com, use the Bizzy mobile application, or interact with any of our services (collectively, the "Platform").

This Privacy Policy applies to all users of the Platform, including students, general users, Merchants, Event Organizers, and Promoters. Please read this policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

1. Information We Collect

We collect several categories of information depending on how you interact with the Platform. The information we collect falls into the following categories:

1.1 Information You Provide Directly

1.2 Information Collected Automatically

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms: If you register or log in using a social media account (e.g., Google, Apple), we may receive your name, email, and profile information from that platform.
• Student verification services: If we use a third-party service to verify your student status, we receive verification results (confirmed/denied) but generally not the underlying verification documents.
• Payment processors: Our payment processors may share limited transaction data necessary for order fulfillment, payouts, and dispute resolution.
• Subscription management providers: If you subscribe to Bizzy Premium through the Apple App Store or Google Play, we receive subscription status and entitlement information from those stores and our subscription management provider (e.g., RevenueCat).
• SMS aggregators and carrier registries: We receive delivery-status information and opt-out (STOP) signals from SMS aggregators and U.S. carrier campaign registries (10DLC).
• Analytics providers: We receive aggregated and individual-level analytics data from third-party analytics services.

1.4 What We Do Not Collect

The Platform does not use session-replay or screen-recording technologies, does not collect biometric identifiers (such as fingerprints, facial geometry, or voiceprints), and does not handle protected health information (PHI) subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA). Bizzy is not a consumer reporting agency under the Fair Credit Reporting Act (FCRA) and does not collect or sell consumer credit information.

2. How We Collect Information

We collect information through the following methods:

• Direct interactions: When you create an account, redeem a deal, purchase a ticket, enroll in the Promoter Program, contact support, or otherwise interact with the Platform.
• Automated technologies: When you browse or use the Platform, we automatically collect technical and usage data through cookies, pixel tags, SDKs, and similar technologies (see Section 5).
• Third-party sources: As described in Section 1.3 above.
• Device permissions: With your consent, we may access certain device features such as your camera (for scanning QR codes), location services (for nearby deals), and push notification settings.
• Apple App Tracking Transparency (ATT): On iOS, the Platform requests permission via Apple's App Tracking Transparency framework before using your IDFA for cross-application tracking. If you decline, we do not access your IDFA for tracking, and certain personalization or attribution features may be limited.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery & Operations

• Creating and managing your account
• Displaying relevant deals and events based on your location and preferences
• Processing ticket purchases and deal redemptions
• Generating and delivering digital tickets, QR codes, and vouchers (including Apple/Google Wallet passes if you elect)
• Verifying your identity and student status
• Facilitating admission to events through QR-code scanning, door counters, and verification
• Processing payments, managing subscriptions, and disbursing Promoter payouts
• Providing customer support and responding to inquiries

3.2 Platform Improvement & Analytics

• Understanding how Users interact with the Platform
• Analyzing trends, usage patterns, and user preferences
• Testing new features, conducting A/B testing, and improving existing functionality
• Monitoring and improving Platform performance, stability, and security
• Developing new products, features, and services

3.3 Communications & Marketing

• Sending transactional messages (order confirmations, ticket delivery, OTP codes, account security alerts, event reminders for Tickets you hold)
• Sending Bizzy marketing communications (with your opt-in consent and where permitted by law)
• Facilitating marketing communications sent by Merchants, Event Organizers, and venues you have opted in to receive messages from (see Section 17)
• Sending push notifications about deals or events (with your device permission)
• Personalizing the content and offers you see on the Platform
• Maintaining records of your consent and opt-out actions for compliance with TCPA, CAN-SPAM, and other applicable laws

3.4 Promoter Program Operations

• Verifying eligibility, identity, and tax-reporting information for enrolled Promoters
• Attributing Ticket purchases to Promoter tracking links and calculating commissions
• Disbursing payouts through Stripe Connect
• Generating tax forms (e.g., IRS Form 1099-NEC) for U.S. Promoters who meet the reporting threshold
• Detecting and preventing self-purchase, click fraud, and other prohibited Promoter conduct

3.5 Safety, Security & Legal Compliance

• Detecting, investigating, and preventing fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other policies
• Complying with applicable legal obligations, regulations, and lawful requests from authorities (including subpoenas, court orders, and tax-reporting obligations)
• Protecting the rights, property, and safety of Bizzy, our Users, Merchants, Event Organizers, Promoters, and the public
• Resolving disputes and enforcing our agreements

4. How We Share Your Information

We do not sell your personal information to third parties for their independent marketing purposes. We may share your information in the following circumstances:

4.1 With Merchants & Event Organizers

When you redeem a Deal or purchase a Ticket, we share limited information with the applicable Merchant or Event Organizer necessary to fulfill the transaction. For Ticket purchases, this includes your name, email address, phone number (if collected), Ticket purchase details, redemption status, scan history, any tags or notes the Event Organizer has applied to your profile within the Bizzy business dashboard, and any communication preferences you have provided to that business. Merchants and Event Organizers are independent data controllers and their use of your information is governed by their own privacy policies and our separate agreements with them. See Section 19 for more detail on ticketing-specific data flows.

4.2 With Service Providers (Sub-processors)

We share information with third-party service providers who perform services on our behalf. These providers (often called "sub-processors") are contractually obligated to use your information only for the purposes of providing services to Bizzy and are required to maintain appropriate security measures. The categories below are illustrative; specific providers may change from time to time as we refine our infrastructure.

4.3 Among Bizzy Entities

We share information among Bizzy Holdings LLC, Bizzy Deals LLC, and Bizzy Ticketing LLC as necessary for the integrated operation of the Platform. Each entity processes your data in accordance with this Privacy Policy.

4.4 For Legal & Safety Reasons

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service or investigate potential violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of Bizzy, our Users, or the public

4.5 In Connection with Business Transfers

If Bizzy (or any of its affiliated entities) is involved in a merger, acquisition, reorganization, bankruptcy, dissolution, sale of assets, or similar transaction, your information may be transferred as part of that transaction. We will notify you (via the Platform or email) of any change in ownership or use of your personal information.

4.6 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.7 Aggregated or De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for any purpose, including industry analysis, demographic profiling, marketing, and research. De-identified data is processed in a manner that prevents re-identification, and we contractually require recipients not to attempt re-identification.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to collect information, improve the Platform, and personalize your experience. The types of technologies we use include:

5.1 Cookies

Cookies are small text files placed on your device by a web server. We use the following types of cookies:

5.2 Pixel Tags & Web Beacons

We may use pixel tags (also known as web beacons or clear GIFs) in emails and on the Platform to track open rates, click-through rates, and user engagement.

5.3 Mobile SDKs

The Bizzy mobile app may include software development kits (SDKs) from third-party analytics, subscription management, push-notification, and advertising-attribution partners that collect device-level data. We disclose our principal sub-processors in Section 4.2.

5.4 No Session Replay or Wiretapping

The Platform does not use session-replay, screen-recording, keystroke-logging, or similar technologies that would record your interactions with the Platform in a form replayable by a third party. We do not employ "chat-wiretapping" vendors or technologies that intercept the contents of your communications in a manner prohibited by the California Invasion of Privacy Act (CIPA) or analogous state laws.

5.5 Managing Cookies & Mobile Tracking

Most web browsers allow you to manage cookie preferences through browser settings. You can configure your browser to block or delete cookies; however, disabling cookies may affect the functionality of the Platform. For mobile devices, you can manage tracking permissions through your device settings (e.g., Apple App Tracking Transparency on iOS, or "Opt Out of Ads Personalization" on Android). On iOS, the Platform requests ATT permission before accessing your IDFA for tracking; if you decline, certain attribution and personalization features may be limited.

6. Third-Party Services & Integrations

The Platform integrates with or links to third-party services that have their own privacy practices. Refer to Section 4.2 for a list of sub-processors. In addition, we may link to or integrate with:

• Social login providers: Google, Apple
• Map services: Google Maps, Apple Maps
• Advertising networks: As applicable for promotional features (subject to your consent where required)

We encourage you to review the privacy policies of any third-party service you interact with through our Platform. Bizzy is not responsible for the privacy practices or data security of third-party services.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Active accounts: We retain your information for the duration of your account's existence and active use of the Platform.
• Closed accounts: After account closure, we may retain certain information for up to three (3) years to comply with legal obligations, resolve disputes, enforce our agreements, and maintain business records.
• Transaction records: Purchase history, ticket records, deal redemption data, and Promoter payout records may be retained for up to seven (7) years for tax, accounting, and legal compliance purposes (including IRS 1099 reporting).
• Marketing consent records: Opt-in and opt-out records for SMS, email, and push communications are retained for at least four (4) years after the most recent opt-out, consistent with TCPA recordkeeping guidance.
• Anonymized data: Aggregated and de-identified data may be retained indefinitely for analytics and business purposes.

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedules and applicable law.

8. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest where supported by the underlying infrastructure
• Secure password hashing (bcrypt)
• Access controls limiting employee and contractor access to personal information on a need-to-know basis
• Regular security assessments and vulnerability testing
• Incident response procedures for potential data breaches
• Secure cloud infrastructure with reputable hosting providers; sensitive financial and payment information is handled within PCI-DSS-compliant payment processors and we do not directly store full payment card numbers on Bizzy infrastructure

Important: While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

8.1 Breach Notification

In the event of a data breach that affects your personal information, Bizzy will notify you and relevant authorities as required by applicable law, including New York's SHIELD Act and applicable state data breach notification statutes. Notification will include the nature of the breach, the categories of data affected, steps we are taking to address the breach, and recommendations for actions you can take to protect yourself.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

Right to Know / Access

Request a copy of the personal information we hold about you, including the categories of data collected, the sources, the purposes, and the third parties with whom it has been shared.

Right to Delete

Request the deletion of your personal information, subject to certain exceptions (e.g., legal obligations, tax recordkeeping, completing transactions, fraud prevention).

Right to Correct

Request correction of inaccurate personal information that we maintain about you.

Right to Portability

Request a portable, machine-readable copy of your personal data to transfer to another service.

Right to Opt Out of Targeted Advertising or Sale/Share

Opt out of the sale or sharing of your personal information for targeted advertising purposes. Bizzy does not sell your personal information. To the extent that the use of certain analytics or advertising-attribution sub-processors qualifies as "sharing" under the CCPA, you may opt out as described in Section 10.

Right to Limit Use of Sensitive Personal Information

Where applicable, request that we limit our use of sensitive personal information (e.g., precise geolocation) to what is necessary to provide the service.

Right to Opt Out of Profiling / Automated Decision-Making

Residents of certain states (including Colorado, Virginia, Connecticut, and others) may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. Bizzy does not make decisions with legal or similarly significant effects about you based solely on automated processing.

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights. You will not receive different pricing, quality of service, or access for making a privacy request.

How to Exercise Your Rights

To exercise any of your privacy rights, you may:

• Email us at Contact@BizzyU.com with the subject line "Privacy Rights Request"
• Include your full name, email address associated with your Bizzy account, and a description of the right(s) you wish to exercise

We will verify your identity before processing your request, which may require you to confirm information associated with your account. We will respond to verifiable requests within 45 days, with the possibility of a one-time extension of up to an additional 45 days where reasonably necessary, with notice to you.

You may designate an authorized agent to submit a privacy request on your behalf. The authorized agent must provide proof of authorization and we may still require direct verification of your identity.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"). This section supplements the rest of our Privacy Policy with information specific to California residents.

10.1 Categories of Personal Information

In the preceding twelve (12) months, we have collected the following categories of personal information as defined by the CCPA:

10.2 We Do Not Sell Personal Information

Bizzy does not sell your personal information as defined by the CCPA, and has not done so in the preceding twelve (12) months. We do not knowingly sell or share the personal information of minors under 16 years of age.

10.3 Sensitive Personal Information

We may collect certain categories of sensitive personal information, including: precise geolocation data (only with your device permission), account log-in credentials (passwords are stored in hashed form), and, for Promoters who enroll in the Promoter Program, taxpayer identification information (such as SSN or EIN provided via IRS Form W-9). We use sensitive personal information only for the purposes permitted by the CCPA, including providing the services you request, processing payouts, and complying with tax reporting requirements. We do not use or disclose sensitive personal information to infer characteristics about you for marketing purposes.

10.4 Opt-Out Preference Signals (Global Privacy Control)

We recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out preference signal for the sale or sharing of personal information. If your browser or device sends a GPC signal, we will treat it as a request to opt out of the sale or sharing of personal information associated with that browser or device.

10.5 Financial Incentive Programs

We may offer loyalty features, referral bonuses, the Bizzy Promoter Program, or promotional offers that involve the collection of personal information. Participation is voluntary, and you may opt out at any time. The value of such programs is reasonably related to the value of the data provided, calculated based on the expense related to offering the program.

10.6 Your California Rights

In addition to the rights listed in Section 9, California residents may exercise the right to know the specific pieces and categories of personal information collected, the right to delete, the right to correct, and the right to limit the use of sensitive personal information. To exercise any of these rights, please contact us using the methods described in Section 9.

10.7 California Civil Code § 1789.3 Notice

California users may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by mail at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

10.8 "Shine the Light" Disclosure

California residents may request information about the disclosure of their personal information to third parties for the third parties' direct marketing purposes by emailing Contact@BizzyU.com with the subject line "Shine the Light Request."

11. Other State Privacy Rights

11.1 Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Tennessee, Delaware, Iowa & Other States

Residents of states with comprehensive consumer privacy laws may have similar rights to those described in Section 9, including the rights to access, delete, correct, port, and opt out of certain data processing activities (including targeted advertising, sale of personal data, and profiling in furtherance of decisions producing legal or similarly significant effects). We will comply with applicable state privacy laws and honor verifiable consumer requests consistent with those laws.

11.2 How to Appeal

If we decline to take action on your privacy request, you have the right to appeal that decision. To submit an appeal, email us at Contact@BizzyU.com with the subject line "Privacy Request Appeal." We will respond to appeals within the time frame required by applicable law (typically 45-60 days).

11.3 New York SHIELD Act

For New York residents, Bizzy maintains a security program reasonably designed to protect the security, confidentiality, and integrity of personal information collected from New York residents, consistent with the New York SHIELD Act, and will provide breach notification as required by New York law.

11.4 Florida Privacy

As a Florida-based company, we comply with all applicable Florida laws regarding data privacy and security. Florida residents may contact us to exercise any rights afforded under applicable state law.

12. Children's Privacy

The Platform is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided personal information to Bizzy, please contact us immediately at Contact@BizzyU.com and we will take steps to delete such information. We comply with the Children's Online Privacy Protection Act ("COPPA").

The Platform is designed for users who are at least 18 years of age, except for certain Deals and Tickets that require the User to be 21 or older. We do not knowingly solicit account registration from anyone under 18. If we learn that we have collected personal information from a person under 18 without appropriate consent, we will delete that information as quickly as possible.

We do not knowingly sell or share the personal information of minors under 16 years of age.

13. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals. There is currently no uniform standard for how companies should respond to DNT signals. At this time, Bizzy does not respond to DNT signals from web browsers. However, we do honor Global Privacy Control (GPC) signals as described in Section 10.4.

14. Location Data

14.1 Types of Location Data

• Approximate location: Derived from your IP address and collected automatically when you use the Platform. This helps us display relevant deals and events in your general area.
• Precise location: Collected through GPS, Wi-Fi, or Bluetooth signals on your mobile device only when you explicitly grant location permission. This enables features like nearby deal discovery, distance calculations to participating merchants and venues, and location-based notifications.
• Place and venue data: We use third-party location and place lookup services (e.g., Google Maps Platform, Apple Maps) to resolve venue names, addresses, business details, and geographic coordinates associated with deals and events listed on the Platform.

14.2 Distance Calculations

When you grant location permission, the Platform may calculate and display the distance between your current location and merchants, venues, or events. These calculations are performed using your device's GPS coordinates and the geographic coordinates of listed locations. Distance data is used to sort and recommend nearby deals and events and is not shared with third parties except as aggregated, de-identified analytics.

14.3 Your Control Over Location Data

You can control precise location access at any time through your device's system settings. Denying or revoking location permission may limit certain features of the Platform (e.g., nearby deals may not be displayed accurately, and distance-based sorting will be unavailable). Approximate (IP-based) location is collected as part of standard internet communication and cannot be separately opted out of.

15. Apple/Google Wallet Pass

If you elect to add a Bizzy Ticket to Apple Wallet or Google Wallet, the Platform transmits to the applicable wallet provider the data necessary to render the pass, including the event name, venue, date and time, your name as the ticket holder, the seat or ticket type, and the QR or barcode used for admission. The wallet provider stores the pass on your device, and may transmit limited data (e.g., last-used timestamps, geofenced suggestions to surface the pass at the venue) back to itself in accordance with its own privacy policy. Bizzy does not control the wallet provider's handling of pass data after delivery.

16. Push Notifications & Personal Marketing

16.1 Push Notifications

With your permission, we send push notifications to your mobile device. These may include notifications about new deals, upcoming events, account-related information, welcome sequences for new users, and promotional campaigns. You can manage push notification preferences in the app settings or through your device's notification settings at any time.

16.2 Email Marketing (CAN-SPAM)

We may send promotional emails about deals, events, and Platform updates. Every promotional email includes (a) accurate header and routing information, (b) a non-deceptive subject line, (c) clear identification of the email as an advertisement (where required), (d) a valid physical postal address for the sender, and (e) a clear and conspicuous unsubscribe mechanism. Bulk-marketing emails also support the List-Unsubscribe-Post header (RFC 8058) to enable one-click unsubscribe through major mail providers. We honor opt-out requests within the timeframe required by law (no later than 10 business days). Even after opting out of marketing emails, you will continue to receive transactional emails (purchase confirmations, account security alerts, event reminders for Tickets you hold, important service announcements).

16.3 SMS/Text Messages (TCPA)

Marketing SMS messages from Bizzy or any business operating on the Platform are sent only with your prior express written consent as required by the Telephone Consumer Protection Act (47 U.S.C. § 227) and its implementing regulations. By providing your mobile phone number and affirmatively opting in to marketing SMS, you agree to receive recurring marketing SMS messages; message frequency varies; message and data rates may apply; consent is not a condition of any purchase. You may opt out at any time by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any marketing SMS, or by toggling SMS off in your account notification settings. Reply HELP for help. We maintain records of your opt-in and opt-out actions for compliance purposes (see Section 7).

16.4 Consent Records

We maintain records of your opt-in and opt-out actions (including timestamp, source, and channel) for compliance with the TCPA, the CAN-SPAM Act, and other applicable laws. You may request a copy of your consent record by contacting Contact@BizzyU.com.

17. Business-Sent Communications & Follower Relationships

Merchants, Event Organizers, and venues you have opted in to may use Bizzy's in-app marketing tools to send communications to you. When this occurs:

• The business is the sender of record. Bizzy acts as the technology platform. The business is responsible for the content and accuracy of the communication, subject to Bizzy's content policies.
• We process delivery and engagement data on the business's behalf. This includes phone numbers and email addresses for delivery, opt-out (STOP) signals from carriers, message delivery status, opens, clicks, and the message content itself. We do not use this data to build a Bizzy-side profile of you for unrelated advertising purposes.
• Following a business after a Ticket purchase. When you purchase a Ticket, the Platform may add you to the Event Organizer's follower list for transactional event communications. Marketing communications from that business still require a separate opt-in (see Section 16). Unfollowing is available in your account settings.
• 10DLC and short-code compliance. SMS sent through the Platform on behalf of businesses is delivered over U.S. carrier-registered messaging campaigns (10DLC or short codes) so that you can identify the sender and the carrier can enforce STOP/HELP keywords.

18. Promoter Program Data

If you enroll in the Bizzy Promoter Program (governed in detail by the Terms of Service), we collect and process additional categories of information:

18.1 Identity, Tax & Payout Information

• Legal identity and tax information: Legal name, address, date of birth, and taxpayer identification number (such as SSN or EIN) provided on IRS Form W-9 or its successor.
• Payout destination: Bank account or other supported payout destination collected through Stripe Connect onboarding. Sensitive banking information is handled directly by Stripe (a PCI-DSS-compliant payment processor) and is not stored in Bizzy's primary systems.
• Identity verification artifacts: Where Stripe Connect requires Know-Your-Customer (KYC) verification, you may be asked to upload a government-issued ID or other documents. These documents are submitted directly to Stripe and are not stored by Bizzy.

18.2 Promoter Activity & Performance

• Tracking links you have generated, their associated Events, and commission terms (snapshot at link creation)
• Click events, attributed Ticket purchases, accrued commission amounts, and clawback events
• Aggregated dashboard analytics (lifetime earnings, per-event click and sale counts)
• Communications between you and Bizzy or Event Organizers regarding your Promoter activity

18.3 Use, Disclosure & Retention

We use Promoter data to operate the Promoter Program, attribute purchases, calculate and disburse payouts, generate IRS Forms 1099-NEC (where the U.S. reporting threshold is met), and detect and prevent fraud or prohibited conduct. We disclose Promoter data to Stripe (for payouts and KYC), to the relevant Event Organizer (limited to the attributed-purchase summary necessary to validate commissions), and to tax authorities as required by law. We retain Promoter tax records and payout records for at least seven (7) years to comply with U.S. tax recordkeeping obligations.

18.4 What Promoters See About Users

Promoters do not receive personal information about the individual Users who click their tracking links or who complete purchases attributed to them. The Promoter dashboard shows aggregated counts, not buyer identities.

19. Ticketing-Specific Data Practices

When you purchase a Ticket through Bizzy Ticketing LLC, additional data practices apply:

19.1 Data Collected for Ticketing

• Ticket purchaser identity: Name, email, and phone number for order confirmation and event communication.
• Transaction details: Event name, ticket type, quantity, price, fees, payment method (last four digits only), promo code applied, and order timestamp.
• Admission data: QR code scan records, time of entry, scanner identifier, and admission status (used for event operations, capacity management, and door counter analytics).
• Transfer records: If Tickets are transferred to another party (where permitted), we record the transfer for audit and fraud prevention purposes.

19.2 Sharing with Event Organizers

We share ticket-purchaser information with the relevant Event Organizer for the purposes of admission management, transactional event communications, customer service, and (where you have separately opted in under Section 16) marketing communications. The data shared with an Event Organizer includes: your name, email address, phone number (if collected), Ticket type and order details, redemption and scan status, any tags or notes the Event Organizer has applied to your profile within the Bizzy business dashboard (e.g., "VIP," "repeat attendee"), and your communication preferences. Event Organizers use this information in accordance with our agreements with them and their own privacy policies. We encourage you to review the privacy policy of each Event Organizer.

19.3 Authorized Event Staff & Scanners

Authorized event staff (door personnel, security, volunteers) operating Bizzy scanner links may view information necessary to validate admission, including your name, ticket type, redemption status, and previous scan timestamps. Scanner access is scoped to the Event for which the staff is authorized.

19.4 Fraud Prevention

We use ticket transaction data and device information to detect and prevent ticket fraud, including duplicate ticket use, unauthorized transfers, counterfeit tickets, and prohibited automated purchasing (consistent with the federal BOTS Act). Suspected fraud may result in ticket cancellation and account suspension.

20. Merchant & Event Organizer Data

If you are a Merchant or Event Organizer using the Platform, we collect additional information necessary to operate your business relationship with Bizzy, including:

• Business name, address, and contact information
• Authorized representative name and contact details
• Business type, category, and operating hours
• Deal or event details you create on the Platform
• Stripe Connect account information for payouts
• Marketing campaign data, including blast content, recipient counts, and engagement metrics
• Aggregated analytics about deal redemptions, ticket sales, and follower base

We use this information to operate the Platform, facilitate transactions, provide analytics, and communicate with you about your account. Merchant and Event Organizer data is subject to the same security and retention practices described in this Privacy Policy.

21. Data Transfers

Bizzy is based in the United States and the Platform is intended for use by U.S. residents. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country. By using the Platform, you consent to the transfer of your information to the United States.

We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it, consistent with applicable law.

22. What Bizzy Is Not

For clarity, Bizzy:

• Is not a data broker within the meaning of California Civil Code § 1798.99.80 or the registration laws of any U.S. state.
• Is not a consumer reporting agency under the Fair Credit Reporting Act and does not provide consumer reports.
• Does not handle protected health information (PHI) subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA).
• Does not collect biometric identifiers or biometric information subject to the Illinois Biometric Information Privacy Act (BIPA) or analogous state laws.
• Does not use session-replay, screen-recording, or chat-wiretapping technologies in a manner prohibited by the California Invasion of Privacy Act (CIPA) or analogous state laws.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" and "Last Updated" date at the top of this page
• Provide notice through the Platform (e.g., an in-app banner or pop-up)
• Send an email notification to the address associated with your account (for material changes)

Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

24. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Bizzy Holdings LLC
Email: Contact@BizzyU.com
Website: www.bizzyu.com

For privacy-specific inquiries, please use the subject line "Privacy Inquiry" in your email so we can route your request appropriately.

Your privacy matters. We are committed to transparency and to protecting your personal information. If you believe your privacy rights have been violated, you have the right to lodge a complaint with the appropriate regulatory authority in your jurisdiction.