Security & Social Protocol
Concert Vault Privacy Policy
Effective: February 15, 2026
1. Data Collection
To secure your digital entry and provide a social experience, Concert Vault stores only what is essential:
- Account & Profile: Verified email address, username, and full name.
- Social Graph: Lists of users you follow and users who follow you ("The Circle").
- Uploaded Assets: PDF files containing your ticket information.
- Extracted Records: Event names, venues, dates, and QR code data.
2. Social Connectivity & Visibility
Concert Vault features a "Circle" model designed for shared attendance:
- Shared Attendance: By default, users in your Circle can see which events you are attending.
- Mutual View: If two users follow each other and attend the same event, they will appear in each
other's attendance indicators for that show.
- Profile Discovery: Other users can search for your username to send follow requests. Profiles are
not visible to non-followers.
3. Privacy & Vault Controls
We provide granular control over your visibility and community safety:
- Private Tickets: Any ticket can be toggled to "Private." This hides the event from your Circle and
prevents you from appearing in shared attendance lists.
- Blocking: You may remove any user from your Circle at any time, revoking their access to your
upcoming event list instantly.
- Reporting Abuse: Users can report offensive content or abusive behavior by selecting "Report &
Block" within the user management menu. Our team reviews these reports within 24 hours to ensure community safety.
Security Note: Your actual ticket barcodes and QR codes are NEVER shared with your Circle. They remain encrypted and
accessible only to you.
4. AI & Data Processing
We utilize the DeepSeek AI Engine to automate ticket organization. This processing occurs during the
initial upload phase for the sole purpose of extraction. Relevant ticket data is transmitted to DeepSeek solely for
extraction and is not retained or used by DeepSeek for any other purpose.
Vault Assurance: We do not use user data to train global AI models or share your personal files with third-party
advertisers.
5. Developer Access
Concert Vault is maintained by a specialized development team. Access to user-uploaded files is strictly restricted to:
- Resolution of critical technical bugs reported by users.
- Testing the implementation of requested features.
- Internal security audits to ensure vault integrity.
6. Account & Data Deletion
We respect your right to be forgotten. You may delete your account and all associated data through:
- In-App: Open the Vault Action Menu and select "Delete Account." This instantly purges your ticket
PDFs, social graph, and metadata.
- Online Request: Request permanent deletion via our Support Portal.
Note: Account deletion is permanent. Once processed, your ticket PDFs, event metadata, and barcodes cannot be recovered.
7. Security & Encryption
Concert Vault uses industry-standard protocols to keep your tickets secure:
- In Transit: Data is sent via secure 256-bit TLS (HTTPS) encryption.
- At Rest: Files are stored in encrypted buckets with restricted database access.
8. Children's Privacy
Concert Vault is not intended for users under the age of 13. We do not knowingly collect personal information from children.
9. Contact Information
If you have questions about this policy or your data, please contact our Data Protection Officer at theconcertvault.app@gmail.com.