Privacy Policy

1. Who we are

BadgeRocket ("BadgeRocket", "we", "us", or "our") provides event check-in and badge printing tools for organizers. This Privacy Policy applies to https://badgerocket.app, the BadgeRocket console, and related products and services (the "Services").

For privacy questions or requests, contact us at hello@badgerocket.app.

2. Scope and roles

When you browse our marketing website or create an account for your organization, we generally act as a controller (or equivalent) of that information.

When event organizers use BadgeRocket to process attendee lists, check-ins, and badge printing, we generally act as a processor (or service provider) on behalf of the organizer. In that case, the organizer is responsible for providing notices to attendees and obtaining any required consents. Our processing of Customer Data is governed by our agreement with the organizer and this Privacy Policy where applicable.

3. Information we collect

3.1 Information you provide

• Account and contact details — name, email address, organization name, phone number, and similar information when you sign up, book a demo, or contact us.
• Billing information — payment and invoicing details processed by our payment providers (we do not store full card numbers on our servers).
• Customer Data — attendee and event information you upload or sync, which may include names, email addresses, ticket types, company/role, QR or badge identifiers, check-in status, and related fields.
• Support and communications — messages, demo requests, and feedback you send us.

3.2 Information collected automatically

• Device and usage data — IP address, browser type, device type, operating system, referring pages, pages viewed, and timestamps.
• Cookies and similar technologies — used for essential site function, preferences, analytics, and (where used) marketing. See Section 8.
• Log and security data — records needed to operate, secure, and troubleshoot the Services.

3.3 Information from third parties

If you connect a registration or ticketing integration, we receive attendee and event data from that provider as authorized by you. We may also receive limited information from payment processors, shipping partners, and analytics providers.

4. How we use information

We use personal information to:

• Provide, operate, and improve the Services;
• Process check-ins, badge layouts, printing workflows, and related event operations on your behalf;
• Create and manage accounts, authenticate users, and provide support;
• Process orders, payments, rentals, shipments, and invoices;
• Communicate about demos, product updates, service notices, and (where permitted) marketing;
• Monitor usage, prevent fraud and abuse, and maintain security;
• Comply with legal obligations and enforce our agreements; and
• Analyze aggregated or de-identified data to improve our product and business.

5. Legal bases (EEA/UK where applicable)

Where required, we process personal information based on:

• Contract — to provide the Services you request;
• Legitimate interests — such as securing and improving the Services, and communicating about related offerings, balanced against your rights;
• Consent — where we ask for it (for example, certain cookies or marketing), which you may withdraw at any time; and
• Legal obligation — where we must retain or disclose information to comply with law.

6. How we share information

We may share personal information with:

• Service providers who help us host infrastructure, process payments, send email, provide analytics, ship hardware, or deliver customer support, under appropriate confidentiality and data protection terms;
• Integration partners you choose to connect, to the extent needed for the integration to work;
• Professional advisors such as lawyers, accountants, or insurers when needed;
• Authorities when required by law, legal process, or to protect rights, safety, and security; and
• Business transferees in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising in a way that would constitute a "sale" or "sharing" under California law, unless we update this Policy and provide required notices and choices.

7. International transfers

We may process and store information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.

8. Cookies and similar technologies

We use cookies and similar technologies that are essential to run the Services, as well as optional analytics or preference cookies. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

9. Data retention

We retain personal information for as long as needed to provide the Services, fulfill the purposes described in this Policy, meet legal and accounting requirements, resolve disputes, and enforce agreements. Customer Data is retained according to your account settings and our agreement with you; after account closure or an export window, we delete or anonymize Customer Data within a commercially reasonable period, unless longer retention is required by law.

10. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal information; object to or restrict certain processing; withdraw consent; and lodge a complaint with a supervisory authority.

To exercise rights regarding information we control (for example, your account or marketing contacts), email hello@badgerocket.app. We may need to verify your identity before responding.

If you are an attendee and your information was submitted by an event organizer, please contact that organizer first. We will assist organizers with verified requests as required by our role as processor/service provider.

You may unsubscribe from marketing emails using the link in those messages. Transactional and service messages related to your account or events may still be sent.

12. Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

13. Third-party sites

The Services may link to third-party websites or services. Their privacy practices are governed by their own policies, not this one.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. If changes are material, we may provide additional notice (for example, by email or in-product message).

15. Contact us

For privacy questions, requests, or complaints, contact hello@badgerocket.app.