Privacy Policy

Listed (“Listed,” “we,” “us”) is a mobile app and website for creating, discovering, and attending events, connecting with people at those events, and messaging. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. Listed is operated by Listed App LLC. By creating an account or using Listed, you agree to this Policy. Listed is intended only for people aged 18 and over.

Information we collect

We collect the following categories of information:

• Account & profile. Your name, username, email address, phone number, profile photo, bio, city, interests, gender, date of birth, and — for business accounts — your business category (such as venue, promoter, or brand).
• Events & activity. Events you create or host, RSVPs, check-ins, cohost relationships, businesses you save to your Scenes, the song you set for an event, and friend requests and connections you make.
• Connect. Your Connect visibility (whether your profile appears) and the matches you make. Discovery filters you set (such as verified-only or gender) are stored on your device.
• Payments & tickets. If you buy a ticket, we collect your name and email for the order and keep a record of your purchase, amount, and check-in status. If you sell tickets, we keep the payout account details you set up with our payments processor. Payment card details are entered directly with Stripe; we do not receive or store your full card number.
• Messages. The content of your one-to-one and event group chats. Some direct messages are ephemeral and are hidden from view after both people have opened them, or within 24 hours.
• Live streams. If you broadcast, your live video and — if you choose to save it — its recording. If you watch, your live chat messages and reactions, and viewing data such as that you watched, when, and aggregate viewer counts. For a private stream, we record that you unlocked it with the access code (or were admitted as a ticket holder) so you don’t have to re-enter the code.
• Location (precise). Your precise location only when you choose to share it inside a conversation. You can stop sharing at any time.
• Identity verification (optional). If you purchase verification, our processor Stripe Identity collects a government-issued ID and a selfie to confirm your identity. Listed receives only the verification result and status — we do not store your ID document or selfie. See “Identity verification & biometric data” below.
• Device & usage. A push-notification token, and technical, log, and usage data needed to operate and secure the app.

How we use your information

We use your information to:

• provide and operate the app — your profile, events, RSVPs, chats, and connections;
• sign you in using passwordless one-time codes sent by SMS or email (the code is your credential);
• power Connect, our opt-in people-discovery feature that suggests people at events you share;
• operate live streaming — broadcasts, access-gated private streams, recordings and replays, and live chat and reactions;
• process ticket purchases, host payouts, and refunds;
• send the notifications you have enabled;
• keep the community safe — moderation, reviewing reports, and enforcing our Terms;
• process optional identity verification and the associated in-app purchase; and
• comply with legal obligations and protect against fraud and abuse.

How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:

• Service providers who process data on our behalf: Supabase (database, authentication, and file storage), Stripe (identity verification, and ticket payments, contributions, and host payouts), Mux (live video streaming and recording), Twilio (SMS one-time codes), Expo and the Apple Push Notification service (push notifications), and Apple (in-app purchases, and the iTunes/Apple Music catalog used to find and preview event songs).
• Event hosts. When you buy a ticket, the event host and their cohosts can see your name, email, ticket tier, and check-in status to manage entry, and may export attendee lists. Hosts are independent parties responsible for their own handling of that information; we are not responsible for a host’s use of it, and you should direct requests about it to the host.
• Other users, to the extent you choose — for example, your profile and events are visible to people according to your settings, your messages are visible to their recipients, you appear in Connect only while your profile is set to visible, and when you join a live stream your chat messages and reactions are visible to the host and other viewers (and the host can see live viewer counts).
• Legal & safety, when we believe it is necessary to comply with the law, enforce our Terms, or protect the rights and safety of our users or the public.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Identity verification & biometric data

Identity verification is optional. If you choose it, Stripe Identity collects and processes your government-issued ID and a selfie, which may include a biometric identifier or biometric information used to confirm the photo on your ID matches you. By starting verification you consent to this collection and processing by Stripe under Stripe’s own privacy terms. Listed receives only a pass/fail result and your verification status so we can display your verified badge; we do not receive, store, sell, or use your ID document, selfie, or any biometric identifier. Stripe’s retention and deletion of that data is governed by Stripe’s policies.

Payments & ticketing

Ticket purchases and host payouts are handled by Stripe, our payments processor. When you buy a ticket, your card details are entered directly with Stripe and are not stored by us; we keep a record of the order (your name, email, tier, amount, and check-in status), which the event host can see to manage entry. For private (approval-required) events, requesting a ticket places a temporary authorization hold on your card — you are only charged if the host approves you, and the hold is released if you are not. Hosts who sell tickets set up a payout account with Stripe and receive their proceeds net of fees. If a ticket is refunded — because a host cancels or deletes an event or removes a ticket holder — the buyer receives a full refund, as described in our Terms of Service.

Location

Listed only accesses your precise location when you actively share it in a conversation. It is not collected in the background. You can stop sharing at any time from within that conversation.

Retention & deletion

You can delete your account at any time from Settings → Delete account. When you do, we delete your profile, events, messages, and related data. Some records are retained longer where we have a legal or legitimate need — for example, transaction and ticketing records (orders, payouts, refunds) are kept as required for tax, accounting, and fraud-prevention purposes, and certain safety records may be retained briefly (typically up to 30 days) — after which they are deleted or de-identified. We otherwise keep information only as long as needed to provide the service.

Your privacy rights — California

If you are a California resident, the CCPA/CPRA gives you the right to know the categories and specific pieces of personal information we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. Over the past 12 months we have collected the categories described in “Information we collect” above, used them for the purposes in “How we use your information,” and disclosed them to the recipients in “How we share your information.”

We do not sell or share personal information as those terms are defined under California law. Some information we collect is considered sensitive personal information — precise geolocation (when you share it), and the government ID processed for optional verification. We use sensitive personal information only for the purposes for which you provide it (to share your location or verify your identity) and not to infer characteristics, so no separate right to limit its use applies; you can still stop sharing location and decline verification at any time. To exercise your rights, use the in-app controls (Edit profile, Notification preferences, Blocked accounts, Delete account) or email support@listed.events. You may use an authorized agent, and we will verify your request through your account.

Text messaging (SMS)

When you provide your phone number to Listed — for example, when you RSVP to an event — you can receive event-related text messages (reminders, updates when event details change, and host announcements) from Listed about the events you join, as well as one-time sign-in codes. Message and data rates may apply, message frequency varies, and you can reply STOP to opt out or HELP for help at any time. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, excluding aggregators and service providers that help us deliver the messages (such as Twilio).

Your privacy rights — other regions

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. Much of this is available directly in the app; for anything else, email support@listed.events. Listed is operated from the United States, and your information is processed there; where required, we rely on appropriate safeguards for international transfers. Listed is intended for users in the United States, and we do not target the Service to the EU/UK.

Security

We use reasonable technical and organizational measures to protect your information, including passwordless authentication and encrypted transport. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.

Children

Listed is for adults. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Third-party services

The service providers named above process data under their own privacy policies. We encourage you to review Stripe’s (identity verification and payments), Mux’s (live streaming and recording), Twilio’s (SMS), Supabase’s (data hosting), Expo’s (push notifications), and Apple’s (in-app purchases and music previews) policies to understand how they handle information. Song previews are drawn from Apple’s iTunes/Apple Music catalog; we store only the track you choose for an event, not any listening data.

Changes to this policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice in the app or by other reasonable means.

Contact

Questions about this Policy or your data? Email support@listed.events.