Privacy policy

Effective: September 18, 2026

This document accurately describes what the Intahé app actually does with personal information and has been reviewed by legal counsel. Since Intahé serves users in both Canada and the United States, several different legal frameworks may apply depending on where you live (see section 7).

1. Who we are

Intahé ("we", "our") is a ticketing and event management platform. The party responsible for the personal information described below is:

Syncera Digital LLC
1309 Coffeen Avenue, Ste 1200, Sheridan, WY 82801, USA
privacy@syncerainc.com

2. Personal information we collect

We only collect what's necessary for the service to work:

User account: full name, email address, password (never stored in plain text — only an irreversible cryptographic hash is kept), or your Google identifier if you sign in with Google.
Ticket purchases: the buyer's email address (needed to send the confirmation and tickets), even without an account.
Payment: we never receive or store your card number or full banking details. Payment is processed entirely by Stripe, our payment processor; we only receive confirmation that the payment succeeded.
Organizations and events: for organizers — organization name, event name and description, event address and coordinates (if provided).
Quick Sale, Door Sale, and card reader: for organizers who set up a physical card reader — the business name and address associated with that reader (sent to Stripe to register it). The mobile app also requests Bluetooth access and, on Android, location access, solely to discover and connect to a nearby card reader — never to track your location continuously.
Legal document acceptance: when you accept our terms, refund policy, or any other legal document (for example by creating an organization or completing a ticket purchase), we keep a record of that acceptance — which document, which version, the date, and your IP address and browser/device type — as evidence that you were shown and accepted it.
Location: only if you explicitly allow it, to show you nearby events, to locate an event you're creating, or to connect a card reader (see above). Optional — declining doesn't prevent you from using the app, except for the specific feature that needs it.
Cookies and local storage: we use a single cookie, named lang, to remember your language preference (French/English) for one year — it isn't advertising-related and isn't used for tracking, so no consent is required for it. Your login token (to keep you signed in) is kept in your browser's local storage, not in a cookie. No behavioral analytics or advertising tracking cookies are used.

3. Why we collect this information

Create and manage your account, authenticate you
Process your ticket orders and generate your tickets (QR codes)
Let organizers manage their events and check in their guests (ticket validation at the door)
Send you the communications necessary for the service (order confirmation, password reset)
Show you nearby public events, if you use that feature
Keep evidence of your acceptance of our legal documents
Detect and prevent fraud

We never use your personal information for third-party marketing, and we do not sell or rent it to anyone — including under the broad meaning some U.S. laws (like the CCPA) give to the word "sale".

5. Where data is hosted

Our servers and databases are hosted with Render, in the United States (Oregon). If you reside in Canada, this means your personal information is processed and stored outside the country. A privacy impact assessment was carried out for this transfer: Render maintains SOC 2 Type II and ISO 27001 certifications, and has agreed to a Data Processing Addendum (DPA) that contractually governs how this information is handled — these safeguards were assessed as sufficient by our legal counsel.

6. How long we keep your information

Your account information (name, email, password, any location you provide) is kept for as long as your account is active. If you delete your account, that personal information is erased immediately from our active database. Your order, ticket, Quick Sale, and Door Sale history — along with the legal-document acceptance records tied to it — is kept separately for 7 years after the transaction, for accounting, tax, and legal-evidence purposes — even after your account is deleted, this history remains visible to the relevant organizers. As with most cloud services, your information may also persist temporarily (up to 30 days) in our routine backup copies after a deletion, until the normal backup cycle replaces them.

7. Your rights depending on where you live

Intahé serves users in Canada and the United States; the rights below vary depending on your province, state, and which law applies to you. In general, you can:

Access the personal information we hold about you
Have inaccurate or incomplete information corrected
Request deletion of your account and associated information, subject to legal retention obligations (e.g. tax records)
Get a copy of your information in a structured, commonly used format (portability)
Withdraw your consent to certain processing, where applicable

Canada: the Personal Information Protection and Electronic Documents Act (PIPEDA) governs these rights federally. If you reside in Quebec, Loi 25 also applies and gives you additional rights and recourse, including with the Commission d'accès à l'information du Québec (see section 11).

United States: if you reside in California, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what information is collected, to have it deleted, and to opt out of its "sale" or "sharing" (we don't sell or share personal information for advertising purposes, see section 3). Other U.S. states have similar laws; if yours grants you additional rights, those apply too. Since we do not sell or share personal information, no separate "Do Not Sell or Share My Personal Information" mechanism is needed.

To exercise any of these rights, no matter where you live, write to us at privacy@syncerainc.com.

8. Security

Passwords are hashed (never stored in plain text). Communication between the app and our servers is encrypted (HTTPS). Access to an organization's information is restricted to its members based on their role. No system is perfectly secure; in the event of a privacy incident presenting a real risk of significant harm, we will notify affected individuals as well as the relevant authorities (e.g. the Commission d'accès à l'information du Québec for Quebec residents) in accordance with applicable law.

9. Children

This service is not directed at anyone under 14 (13 in the United States, per COPPA) and we do not knowingly collect personal information from them.

10. Privacy officer

No one has been formally designated to this role. In accordance with Loi 25, this function is therefore filled by default by the person with the highest authority within Syncera Digital LLC. To reach the privacy officer, write to privacy@syncerainc.com.

11. Complaints

If you have a concern about how your personal information is handled, contact us first at privacy@syncerainc.com. Depending on where you live, you may also file a complaint with the relevant authority — for example the Commission d'accès à l'information du Québec for Quebec residents, or the Office of the Privacy Commissioner of Canada for other Canadian residents.

12. Changes

We may update this policy from time to time. The date of the last update is shown at the top of this page.

13. Contact us