Last Modified: July 31, 2026
PLEASE READ THIS PRIVACY POLICY CAREFULLY.
RT&H Inc. ("TicketRecon,” "we,” "us,” or "our") is committed to protecting your privacy. This privacy policy (“Privacy Policy”) explains how we collect, use, disclose, and safeguard Personal Data when you interact with our website, web application, and any content, tools, features, and/or functionality offered on or through our platform (collectively, the "Services").
This Privacy Policy applies to “Personal Data,” meaning any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual, that we collect and process in connection with your use of the Services. It does not apply to third-party websites, services, or applications, even if they are accessible through the Services.
Unless otherwise defined in this Privacy Policy, capitalized terms have the meanings given to them in our Terms of Service (“Terms"). In the event of any inconsistency between this Privacy Policy and the Terms, the Terms will control, except where this Privacy Policy provides more specific commitments regarding the collection, use, retention, or deletion of Personal Data, in which case this Privacy Policy will control with respect to those commitments.
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated Privacy Policy on our website and update the "Last Modified" date above. Your continued use of the Services after the updated Privacy Policy is posted constitutes your acceptance of the changes.
WHAT INFORMATION WE COLLECT ABOUT YOU
1.1 Information You Provide to TicketRecon. When you interact with us by using the Services or contacting Support, we collect Personal Data that you provide directly. This includes your account and access information such as your name, email address, and password credentials handled through Firebase Authentication, as well as your Firebase user ID, account status, plan or access level, role and admin status, invite metadata, and access-control settings. We also collect authentication and security setup information, including email verification status, password reset requests, multi-factor authentication enrollment status, and session-control records. When you acknowledge required policies through the Services, we collect your typed signer name, consent confirmation, policy version, timestamp, user ID, email address, user agent, and related acknowledgement metadata.
1.2 Support, Communication, and Workflow Data. We may also collect support and communication information you submit through email, support requests, demo scheduling, customer service, or other communications, which may include your name, email address, company information, issue details, and any files or screenshots you provide. In addition, we collect uploaded or user-entered workflow data for reconciliation and accounting workflows, such as purchase orders, invoice numbers, bill numbers, vendor names, customer names, marketplace and order references, dates, amounts, payout data, payment records, card and statement references, and reconciliation output.
1.3 Third-Party Integration Data. When you connect QuickBooks Online, we collect company and accounting workflow data needed to load open bills, open invoices, payment methods, products and services, accounts receivable and accounts payable accounts, import data, and payment or import results, and we store OAuth connection information server-side as needed to maintain the integration. When you enable marketplace sync integrations, we collect provider connection settings and marketplace payout and payment reports from providers such as TickPick, Vivid, and GoTickets.
1.4 Notification and Billing Data. If you configure Slack or Discord notifications, we collect webhook URLs and message content sent by the customer-configured workflow. If paid subscriptions or payment processing are enabled, we may receive limited billing metadata such as customer name, billing email, plan or subscription status, receipt or invoice details, and payment status. TicketRecon does not store full payment card numbers on its own servers.
1.5 Information We Collect When You Use Our Services. In addition to the information you provide directly, we also collect certain data automatically when you interact with the Services. This includes technical, usage, and device-related information that helps us operate, secure, and improve our platform. The types of data we collect in this context include the following:
|
Data Type
|
Description
|
|
Log Files
|
When you use our Services, we may automatically collect information about your computer hardware and software. This information can include your IP address, browser type, domain names, internet service provider (ISP), the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, clickstream data, access times and referring website addresses
|
|
Usage Data
|
We may collect Usage Data when you interact with the Services. Usage Data includes information such as technical logs, performance metrics, device identifiers, browser information, system events, and metadata associated with your interactions, including how often certain features are used, when specific actions are triggered, and what parts of the Services you engage with most. We primarily use internal operational and security analytics, including application logs, system status checks, request and error logs, member activity records, and security events. We use this data to support analytics, improve system performance, troubleshoot issues, and optimize the Services. When shared externally, Usage Data is provided only in a de-identified form that does not reveal Your Content.
|
|
Information from Cookies, Local Storage, and Similar Technologies
|
We may collect information using cookies or similar technologies to support the functionality of the Services. We also use browser local storage and session storage values to keep the Services functional, such as preferences, UI state, release or version status, cached selections, and similar product state. The Services use Firebase App Check and reCAPTCHA to support authentication, abuse prevention, and security. The Services do not use cookies for advertising or third-party behavioral tracking. For more information on our use of cookies and your choices regarding cookies, please see Section 6 (Cookies). We may also collect information through other methods, such as demo scheduling or customer support correspondence through external channels.
|
|
Device Information
|
When you use the Services, we may collect and process information about your device, including your IP address, browser type, operating system, user agent, device summary, session timestamps, and diagnostic data. We use this information to enhance security, support troubleshooting, and improve the functionality of the Services.
|
HOW WE USE PERSONAL DATA
To Provide the Services. We use your account information and Your Content to provide the products and services to you. For example, we use the email address and password you provide when signing up for the Services to create and authenticate your user account. We use your workflow and accounting data to load, compare, reconcile, save, export, and display purchase order, marketplace, invoice, bill, import, and related accounting workflows, including matching purchase orders to credit card charges and matching marketplace payouts to QuickBooks invoices. When you connect QuickBooks Online, we use your authorization to load open bills, open invoices, products and services, payment accounts, and related data to support bill payment, invoice payment, and import workflows. We may also use this information to provide customer support and respond to your requests.
To Improve and Develop Our Product and Services. We use Usage Data to understand how users interact with the Services and to guide product development. This includes identifying popular features, assessing user behavior trends, and evaluating potential new features or integrations. We may also analyze aggregated data across our user base to understand overall usage patterns. When shared externally, this statistical information does not identify individual users.
To Secure and Protect our Users. We use your information to help prevent security incidents, verify accounts, process product sign-ups, and detect misuse of the Services. Log files may also be used to generate general usage statistics, improve navigation, and support compliance with analytics, export control, and regulatory requirements. We collect and log IP addresses to monitor access patterns, investigate security events, and troubleshoot issues. Where appropriate, we may link this automatically collected data to other Personal Data you provide.
To Communicate with Our Users. We use your account information to communicate with you, which could include providing you with updates and other information relating to our services and products, providing information that you request, and responding to comments, questions, and requests. You may opt out of receiving promotional emails from TicketRecon by following the unsubscribe instructions included in those emails. If you opt out, we may still send you transactional or relationship messages, such as emails about your account, security notices, policy updates, or updates to our products and services. Transactional messages may still be sent to ensure proper service delivery.
Lawful Basis for Processing. We process Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:
|
Lawful Basis
|
Description
|
|
Contractual Necessity
|
We process Personal Data where it is necessary to perform our obligations under the Terms or to take steps at your request prior to entering into the Terms. This includes creating and authenticating your account, providing reconciliation and accounting workflow functionality, supporting third-party integrations you enable (such as QuickBooks Online, marketplace providers, and notification services), and processing subscription payments.
|
|
Legitimate Interests
|
We process Personal Data where it is necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and freedoms. Our legitimate interests include operating, maintaining, and improving the Services; analyzing Usage Data to guide product development and understand usage patterns; detecting, preventing, and investigating security incidents, fraud, and misuse of the Services; monitoring system performance and troubleshooting issues; and enforcing our Terms.
|
|
Legal Obligation
|
We process Personal Data where it is necessary to comply with a legal obligation to which we are subject, including responding to lawful requests from law enforcement or government agencies, complying with applicable tax, accounting, or regulatory requirements, and retaining records as required by law.
|
|
Consent
|
In limited circumstances, we may process Personal Data based on your consent. Where we rely on consent, you have the right to withdraw it at any time as described in Section 7.3 (Withdraw Consent). Withdrawal of consent does not affect the lawfulness of processing conducted prior to such withdrawal.
|
Where we rely on legitimate interests as a basis for processing, we have assessed that such interests are not overridden by the impact on your rights and freedoms. You may contact us at support@ticketrecon.com for further information about the balancing test we have applied to any specific processing activity.
HOW WE SHARE PERSONAL DATA
Service Providers. We may share Personal Data with our third-party service providers to support our Services. These service providers are prohibited from using your Personal Data except for the purposes described below, and they are required to maintain the confidentiality of your information. Our current service providers include: Google Firebase and Google Cloud for authentication, database storage, hosting, server-side processing, security, App Check, reCAPTCHA, logging, and service reliability; Intuit QuickBooks Online for user-directed accounting integrations and workflows; Resend for transactional email delivery, including account invitations, verification emails, password reset emails, and account and security notices; marketplace providers such as TickPick, Vivid, and GoTickets, when enabled by the customer, for customer-directed marketplace sync and reconciliation workflows; Slack and Discord, when configured by the customer, for customer-directed webhook notifications; our payment processor for subscription billing and payment processing; and Cal.com or similar scheduling and contact tools for demo scheduling and customer communications.
Compelled Disclosure. We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process. For more details on how Your Content is processed, stored, and used, please refer to the “Your Content and Accounts" section of our Terms.
Business Transfers. In the event of a merger, acquisition, financing, restructuring, or sale of all or substantially all of our assets, your Personal Data may be transferred or disclosed as part of that transaction. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.
HOW WE TRANSFER PERSONAL DATA INTERNATIONALLY
Scope of International Transfers. As of the date this Privacy Policy was last modified, TicketRecon only conducts business within the United States and primarily stores and processes data in the United States using Google Firebase and Google Cloud infrastructure. However, in the event that we share Personal Data of individuals in the EEA, Switzerland or UK with third parties in the future, we will comply with all applicable international laws to safeguard the transfer. We will update this Privacy Policy accordingly if our business operations expand internationally. Please contact us if you need more information about which legal mechanisms we rely on to transfer personal data internationally.
HOW WE STORE AND SECURE PERSONAL DATA
Data Storage and Security. We use a variety of security technologies and procedures to help protect your Personal Data from unauthorized access, use or disclosure. These measures include Firebase Authentication for account login and password handling, email verification and password reset flows, optional multi-factor authentication support, role-based access controls and plan and feature permissions, Firestore security rules to scope user-owned records and restrict server-managed and admin-only data, server-side authorization checks for protected routes, Firebase App Check and reCAPTCHA protections, HTTPS and TLS encryption for data in transit, Google Cloud and Firebase encryption at rest, application-level AES-256-GCM encryption for certain integration secrets, security headers and content security policy protections, session-control records and forced sign-out and session revocation capabilities, and operational monitoring and dependency audits. All Personal Data is protected using appropriate physical, technical and organizational measures.
Retention of Personal Data. We retain Personal Data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to provide the Services, comply with our legal obligations, resolve disputes and enforce our agreements). Active workspace and account data is retained while your account is active and as needed to provide the Services, unless deleted by you or in response to a valid support or account closure request. Security events, session-control records, audit-style logs, and related metadata may be retained for up to twelve (12) months or longer if required by law or necessary for an investigation. Upon account closure or termination, you will have thirty (30) days from the effective date of closure or termination to retrieve or export Your Content. After that period, Your Content will be scheduled for deletion, subject to legal and security exceptions. Deleted data may persist for a limited period in provider-managed backups before aging out. For additional information on data retention in connection with your account, please also refer to Section 2.4 (Data Retention) of our Terms.
COOKIES
Cookies. Technologies such as cookies may be used by TicketRecon and our service providers (as applicable). Cookies are used to remember you and to collect information about how you interact with the Services. We also use browser local storage and session storage values needed to keep the Services functional, such as preferences, UI state, and similar product state. If you have an account with the Services, we may link this usage data with other information. You may have the option to either accept or refuse these cookies. If you choose to refuse, you may not be able to use some portions of the Services.
What Are Cookies? Cookies are small text files sent to your browser when you visit a website. They allow the site to recognize your device and remember your preferences on future visits. Cookies may store settings or other data to support functionality and improve your experience. Cookies set by us are called first-party cookies, while cookies set by other parties, such as analytics or content providers, are called third-party cookies. These may track activity across multiple websites.
Why Do We Use Cookies? We use first party and third party cookies for several reasons. Some cookies are required for technical reasons in order for our website to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies enable us to enhance the experience on our Services. This data is used to analyze trends, administer the website, monitor how visitors navigate around the website, and to gather demographic information about our user base as a whole.
What Types of Cookies Do We Use and How Do We Use Them? We use several types of cookies to support and improve our website. Essential cookies are required to deliver the services available through the site. Performance and functionality cookies enhance the user experience but are not strictly necessary for the website to function. We also use analytics and customization cookies, which help us understand how users interact with the site and allow us to tailor content based on those interactions. These cookies operate in aggregate form or are used for first-party functional customization only, and are not used for behavioral profiling or third-party advertising.
How Can I Control Cookies? You have the right to choose whether to accept or reject cookies. You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, although doing so may limit access to certain features on our website. For browser-specific guidance, consult your browser’s help menu.
YOUR PRIVACY RIGHTS AND CHOICES
Access, Correction or Deletion. You can request access, correction, updates or deletion of your Personal Data.
Objection. You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data.
Withdraw Consent. If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
Complaint. You have the right to complain to a data protection authority about our collection and use of your Personal Data. To exercise any of these rights, please contact us at support@ticketrecon.com. Please note that to protect Personal Data, we may verify your identity by a method appropriate to the type of request you are making. Depending on where you reside, you may be entitled to empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. We will respond to your request to change, correct, or delete your data within a reasonable timeframe and notify you of the action we have taken. In some instances, your rights may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.
CALIFORNIA PRIVACY RIGHTS
CCPA Applicability. As TicketRecon does not currently meet the thresholds established by the California Consumer Privacy Act (the “CCPA”), the CCPA does not apply to your use of the Services. In the event that TicketRecon does meet the thresholds established by the CCPA in the future, this section will be updated accordingly.
OTHER IMPORTANT PRIVACY INFORMATION
We Never Sell Personal Data. We will never sell your Personal Data to any third party.
Information About Children. The Services are not intended for or targeted at children under 18, and we do not knowingly or intentionally collect Personal Data about children under 18. If you believe that we have collected Personal Data about a child under 18, please contact us at support@ticketrecon.com so that we may delete the information.
Do Not Track. Some web browsers may transmit "Do Not Track" signals. The Services do not currently respond to "Do Not Track" or similar signals. To learn more about "Do Not Track" signals, you can visit https://allaboutdnt.com/.
Data Breach Notification. In the event of a data breach that compromises the security, confidentiality, or integrity of your Personal Data, TicketRecon will notify affected individuals in accordance with applicable law. Where required, we will also notify relevant regulatory authorities. Notification will be provided without unreasonable delay and will include a description of the nature of the breach, the types of Personal Data involved, and the steps we are taking in response.
Contact Us. If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@ticketrecon.com.
Governing Law and Dispute Resolution. This Privacy Policy is governed by the governing law, jurisdiction, and dispute resolution provisions set forth in the Terms, including the mandatory arbitration and class action waiver provisions in Section 9 of the Terms.