Privacy Policy

Information you provide

When you create an account and use CYRA, we collect:

• Account details — your name and email address, used to sign you in and identify your account. Authentication is handled by Supabase.
• Phone number (optional) — only if you choose to add one. Organizers can send SMS updates to attendees of an event you hold a ticket to; these text messages are delivered through Twilio.
• Tickets and orders — the events you buy or are gifted tickets to, your order history, and whether a ticket has been scanned at the door (attendance).

Payments

Payments are processed by Stripe. When you buy a ticket, your card details go directly to Stripe — CYRA never sees or stores your card number.

Organizers sell tickets as the merchant of record through Stripe Connect. The charge is made on the organizer’s connected Stripe account, and CYRA collects a service fee that is disclosed at checkout. Stripe processes your payment information under its own privacy policy.

Promoter referral links

Some events are promoted through referral links of the form /r/<code>. When you open one, we log the click and store a cookie named selekt_ref for about 30 days so a resulting ticket purchase can be attributed to the promoter who referred you. The cookie holds only the referral code — it is not used for advertising or cross-site tracking.

No ads or third-party tracking

CYRA does not run advertising and does not embed third-party advertising or analytics tracking SDKs. We do not sell your personal information. We share data only with the service providers we need to operate: Supabase (accounts and database), Stripe (payments), Twilio (SMS, if you add a phone number), the identity provider you choose to sign in with (Apple or Google), and Apple Wallet when you add a ticket to it.

How we use your information

We use your information to operate the service: to authenticate you, deliver and validate tickets, process payments, attribute promoter referrals, send transactional and event-related messages, and keep the platform secure. Event organizers receive the information they need to fulfill and manage their own events (for example, the guest list and order details for their event).

Data retention and deletion

You can delete your account at any time from within the app, which removes your account and associated personal data. Some records tied to completed transactions may be retained where required for financial, legal, or fraud-prevention reasons. You can also reach us for any data request at the address below.

Contact us

For privacy questions or data requests, contact us at support@cyraapp.org.