Privacy Policy

NITEPASS ("NITEPASS", "we", "us") operates a nightlife discovery, access, and loyalty platform connecting guests, promoters, and venues. This Privacy Policy explains what information we collect when you use the NITEPASS website, mobile web app, guest app, promoter dashboard, and venue dashboard (collectively, the "Service"), and how we use it.

Account information. When you register we collect your name, email address, password (stored only as a cryptographic hash), account type (guest, promoter, or venue), city, and handle.

Nightlife activity. When your NITEPASS QR is scanned at a venue we record the check-in: venue, event, entry point, timestamp, amount paid, reward unlocked, and — where applicable — the promoter whose guest list you joined. We also store venues, promoters, and events you favorite, events you mark as "going", guest lists you join, NITE POINTS, and status tier.

Location. The NITE MAP displays venue locations and approximate distances. We use coarse location (city-level) to personalize your feed. We do not continuously track your precise location in the background.

Business data. If you are a promoter or venue, we collect the business information you publish (events, cover charges, hours, dress codes, rewards, guest lists, entry points) and performance metrics generated by verified scans (attendance, conversion, revenue attribution, payouts owed).

Payment information. Subscriptions are processed by Stripe. We never see or store your full card number; we store only the transaction/session identifiers, plan, and payment status.

Device & usage data. We collect standard technical data such as IP address, browser type, pages visited, and approximate access times, plus authentication cookies that keep you signed in.

We use your information to operate the Service: authenticating you, generating your dynamic NITEPASS QR, verifying check-ins, awarding NITE POINTS and status, delivering guest-list passes and notifications you opted into, computing venue analytics (including NITE PULSE scores), calculating promoter attribution and payouts, preventing fraud, and improving the platform.

We do not sell your personal information. We do not show third-party behavioral advertising.

When you scan your pass, the venue sees your name, handle, entry type, entry point, and (if you joined through a promoter) that promoter's attribution — never your email, password, or payment details. Promoters see the names/handles of guests on their own guest lists and whether those guests checked in. Venues see aggregate analytics and per-promoter performance for their own events only.

You control who can see your nightlife plans: Public, Friends Only, Close Friends, or Hidden. You can change this anytime in Profile. "Hidden" means your plans and "going" activity are not shown to other users, though verified check-ins are still recorded for rewards and venue analytics as described above.

We share data only with: (a) Stripe, to process subscription payments; (b) infrastructure providers that host the Service (cloud hosting and database), under confidentiality obligations; (c) venues/promoters, limited to what Section 4 describes; (d) law enforcement or regulators where legally required. If NITEPASS is involved in a merger or acquisition, your information may transfer with the business, subject to this policy.

We keep your account and activity data while your account is active. Check-in and scan audit records are retained for fraud prevention and business reporting. You may request deletion of your account at any time (Section 9).

Passwords are hashed with bcrypt. Sessions use signed, httpOnly cookies. NITEPASS QR codes are dynamic HMAC-signed tokens that rotate every 30 seconds and can be used only once per event, preventing screenshot fraud. No system is 100% secure, but we design for the fact that real money and door access depend on our scans.

You may access, correct, export, or delete your personal information by contacting us at Imjovetech@gmail.com. Depending on your jurisdiction (e.g., Texas TDPSA, California CCPA/CPRA, EU/UK GDPR), you may have additional rights, including the right to opt out of certain processing or to non-discrimination for exercising your rights. We honor universal opt-out signals where required.

The Service is intended for adults of legal nightlife age (18+ or 21+ depending on venue). We do not knowingly collect data from minors. Promoter and venue accounts are 18+ only.

We may update this policy as the platform evolves. Material changes will be announced in-app or by email before they take effect. Continued use after the effective date constitutes acceptance.