Privacy Policy

Last updated: May 27, 2026

This Privacy Policy explains how Reyze.app collects, uses, and protects your personal data when you use our platform. Please read it carefully.

1. Who We Are

Reyze is operated by Põhivõrgustik OÜ (Registry code: 17435133), located at Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145.

Under GDPR, we act as a Data Controller for your account information, platform operations, compliance records, and our own service fees. We also act as a Data Processor for personal data processed on behalf of Event Organisers in connection with ticket sales, buyer communications, refunds, and event administration. Each Event Organiser remains the independent controller for the event, the underlying ticket sale, and compliance with its own tax, consumer, and event-delivery obligations.

2. Data We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google, we receive your Google profile information.

Event & Organization Data

If you create events, we collect event details, ticket types, and pricing. This information is shared with potential buyers to facilitate sales.

Payment Information

We use Stripe to process payments and onboard Organisers for payouts through Stripe Connect. We do not store full card numbers. Stripe handles regulated payment data under their own privacy policy. We store transaction references, payment status, payout records, dispute records, and onboarding-related status data to manage orders, settlements, and compliance.

Usage & Analytics Data

We use an EU-hosted analytics provider to collect pseudonymized usage analytics so we can understand how the platform is used and improve it.

Identity, Business, and Tax Data

If you act as an Organiser, we and our payment partners may collect your legal name, business name, registered address, date of birth, government-issued identification details, bank account details, VAT number, taxpayer identification number, beneficial ownership data, and similar know-your-customer or tax-reporting information needed for onboarding, payouts, fraud prevention, and legal compliance.

3. How We Use Your Data

-Facilitate ticket purchases and delivery
-Transfer funds to Organisers via Stripe
-Send transactional emails and event updates
-Detect and prevent fraudulent transactions
-Comply with Estonian accounting obligations and our own tax obligations on Platform revenue
-Perform seller verification, payout onboarding, and financial compliance checks
-Collect and report organiser identity and earnings information where required by DAC7 or similar laws

4. Legal Basis for Processing (GDPR)

We process data under the following legal bases:

• **Contract performance** — to deliver your tickets or process your event payouts.

• **Legal obligation** — for accounting purposes under Estonian law.

• **Legitimate interests (GDPR Art. 6(1)(f))** — for platform security, payment fraud prevention, and anonymised usage analytics.

• **Consent** — for optional marketing communications and marketing analytics.

5. Data Sharing

We do not sell your personal data. We share data with third parties only to provide our services:

-Stripe — for secure card and wallet payment processing, Stripe Connect onboarding, identity verification, payout operations, and disputes handling.
-Event Organisers — Buyers' names and emails are shared with the specific Organiser of the event purchased.
-Cloud hosting and authentication providers — for secure data storage, account access, and session management.
-EU-hosted analytics providers — for product analytics and service improvement.
-Transactional email delivery providers — for sending your tickets and service notifications.
-Tax, regulatory, law-enforcement, and other competent authorities — where disclosure is required to comply with DAC7, AML/KYC, court orders, accounting duties, or similar legal obligations.

6. Data Retention

We retain your data as long as your account is active. Transactional, payout, identity-verification, dispute, and tax-reporting records may be retained for at least 7 years, or longer where required by the Estonian Accounting Act, DAC7 implementation rules, anti-fraud needs, or other applicable laws.

11. DAC7 and Regulatory Reporting

Where required by Council Directive (EU) 2021/514 (DAC7), local implementing law, or similar tax transparency rules, we may collect, verify, retain, and report Organiser identity, tax identifiers, transaction counts, gross consideration, fees, refunds, payout details, and related information to the relevant tax authorities. By using organiser-facing payout features, the Organiser acknowledges and consents to this processing and data sharing to the extent permitted or required by law.

7. Your Rights (GDPR)

As a user in the EEA, you have the right to access, correct, or delete your data.

-Access & Portability — get a copy of your data.
-Rectification — fix incorrect information.
-Erasure — 'right to be forgotten' (subject to legal retention rules).
-Object — stop us from using your data for marketing.

To exercise these rights, contact us at support@reyze.app.

8. Changes to This Policy

We may update this policy to reflect changes in our service or legal requirements. Material changes will be notified via the platform.

9. Contact

For any privacy-related inquiries, please contact:

Põhivõrgustik OÜ

Registry Code: 17435133

Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145

Email: support@reyze.app

10. Cookies

Cookies are small text files stored in your browser. We use the following types:

-Session & Authentication Cookies — Required for you to stay logged in and keep your session secure. These are strictly necessary and cannot be disabled.
-Analytics Cookies — Used to understand how the platform is used through our EU-hosted analytics provider. These are only loaded after you provide consent via our cookie banner.

You can withdraw analytics consent at any time by clicking 'Decline' in the cookie banner or by clearing your browser storage.