Privacy Policy

For the purposes of this policy, the data controller of your personal data is TripsTerra LLC, which operates the 'RaveHunt' brand and the ravehunt.com platform (referred to as the 'Company', 'we', or 'RaveHunt'). 'RaveHunt' is a brand and platform name; the legal entity that operates this brand and acts as data controller is the Company.

Our contact details: Address: 1007 North Orange Street, Wilmington, DE 19801, United States · Email: contact@ravehunt.com · Web: ravehunt.com.

RaveHunt is a social and ticketing platform for music events. Events and tickets are created and offered by organizers (sellers); in these sales RaveHunt acts as an intermediary service provider (marketplace) and charges a service fee (commission).

This policy applies to every service offered through the ravehunt.com website and the RaveHunt mobile app. The mobile app is a shell that opens the same platform on your device; across both channels we provide the same service, process the same data and apply the same rules. The platform is intended solely for users aged 18 and over.

Account and identity data: your name or username, your email address, a securely hashed version of your password, and your profile information. We process this data to create your account, verify your identity, and provide access to the platform.

Age verification data: your date of birth or age declaration, used to confirm that you are 18 or older. Purpose: applying the 18+ age limit and preventing use by minors.

Transaction and ticket data: the event tickets you purchase, ticket types, QR code information, the tickets in your wallet, and, when you transfer a ticket to a friend free of charge, the transfer records (the transferring and receiving account details). Tickets may only be transferred for free; resale and scalping are prohibited. Purpose: carrying out ticket sales, adding tickets to your wallet, QR entry, and free transfers.

Event entry (check-in) data: records of your QR code being scanned at the door. These records may be shared with the relevant organizer for entry control.

BPM loyalty point data: BPM is a loyalty point that has no monetary value and is valid only within the app. We process the BPM you earn on each sign-in, your point balance, and records of entry to certain events made using BPM, in order to operate the loyalty programme.

Social interaction data: the content you create on your profile and in the platform's social features, your follow or friend connections, and your interactions.

Location data: if you grant location permission on your device, we process location at two different levels. (1) Coarse location: the city and country you are in. We keep it on your profile to sort nearby events and your feed, and we do not show it to other users. (2) Precise location: only while an event you have checked in to is running, your device's exact latitude and longitude are sent to our servers and kept, attached to that event, for at most one hour. Its purpose is the in-event friends map that shows where your friends are on the night, which is why your precise location is shown to OTHER USERS: to your mutual friends (people where each of you has accepted the other's follow) and, if you separately opted into 'nearby', to other attendees who have checked in to the same event. You can switch location sharing off in Settings at any time: sharing stops the moment you do, and records that have not yet expired also stop being visible to other users. We do not collect your precise location outside an event, and we do not track location in the background.

Payment data: ticket payments are collected through our payment services provider, Stripe. At the payment step you enter your card details into the payment form served by Stripe; those details are processed directly by Stripe, never reach RaveHunt's servers, and RaveHunt does not store your card number. All that remains with us are order and accounting records such as the transaction amount, date, and status.

Technical and usage data: IP address, device and browser information, server and session logs, and the session and preference information held by our strictly necessary cookies. Purpose: secure operation of the platform, prevention of abuse, and improvement of the service.

Communication data: your support requests and correspondence with us. Purpose: handling your requests and providing support services.

You can sign in to the platform with your Google account. When you choose this method, authentication is carried out by Google, and you do not share your password with us.

During this sign-in, we receive from Google only the minimum data needed to create and identify your account: for example your name, email address, and the unique user identifier (ID) Google assigns to you.

Your Google sign-in data is processed solely to verify your identity and provide secure access to your account. Google also processes this data under its own privacy policy; you can manage or withdraw the permissions you granted for sign-in from your Google account settings.

We use only the cookies the platform needs in order to work, and all of them are our own: keeping you signed in and your session secure, remembering your language, preserving your checkout step, making invite links work, and limiting abuse.

We do NOT use analytics, advertising, or targeting cookies. There is no third-party analytics tool, tracking pixel, advertising identifier, or advertising partner on the platform; we do not track you across sites and apps, and we do not profile you for advertising.

Since every cookie we set is strictly necessary, there is nothing to switch off: that is why we offer no cookie preference panel and simply tell you about them in a short notice. You can still delete or block these cookies in your browser settings at any time, in which case basic functions such as signing in and buying a ticket may stop working. If we ever decide to use analytics or marketing cookies, they will run only with your separate, explicit consent, and this policy will be updated first.

Detailed information about cookies and similar technologies (their types, durations, and purposes) is set out in our separate Cookie Policy.

To provide our service, we share your data only to the extent necessary and limited to the relevant purpose, with the following parties:

Event organizers (sellers): the ticket and check-in information needed to manage entry and attendance for the event you bought a ticket to. An organizer may act as an independent data controller for the data it processes itself.

Other users: the precise location you share while an event is running is shown, as described in section 2 above, to your mutual friends and, if you opted into 'nearby', to attendees who have checked in to the same event. Your profile and the content you share on the platform are likewise visible to other users according to your visibility settings.

Payment service provider: Stripe. So that the ticket payment can be collected, the order amount, the currency, the order and event references, and your email address (so the payment receipt can reach you) are transferred to Stripe. Your card details, by contrast, are entered directly into Stripe's payment form and never reach us at all. Stripe processes the data transferred to it under its own privacy terms.

Map service: a map provider (for example Google Maps) may be used to display event locations.

Hosting and infrastructure providers: cloud infrastructure and hosting providers used to securely store data and operate the platform.

Authentication provider: when you sign in with Google, authentication is carried out through Google.

Content safety (moderation) provider: OpenAI. The images you share on the platform (post and story photos, your profile photo, event posters and event images) and the text you write (post and story captions, comments and messages) are sent to OpenAI's content moderation service for automated classification immediately before they go live. The purpose is to stop clearly harmful content, such as child sexual abuse material, threats, hate and violence, from being published. All we receive back is which categories the content was flagged under, and we record that outcome for human review. Content is not sent to this provider for any purpose other than moderation.

Email delivery provider: Resend. To deliver your ticket, account and transaction emails, your email address and the content of the message we send (including the QR-coded PDF attached to a ticket email) are transferred to this provider. The transfer is made solely to deliver that message.

Competent authorities: public authorities and institutions, and judicial bodies, where required by law.

Transfers abroad: some of the providers above (our hosting infrastructure, along with Google, Stripe, OpenAI and Resend) run servers located outside Turkey, so your data is transferred abroad to that extent in order to provide the service. For these transfers we act in accordance with the conditions required by KVKK (explicit consent or the safeguarded transfer mechanisms provided by law).

We apply appropriate technical and administrative measures to protect your data against unauthorized access, loss, and misuse. These include secure storage of passwords, encryption in transit, access authorization, and database-level access controls.

Your card details are not stored on RaveHunt servers; this information is processed securely and directly by the payment services provider.

Although no system is 100% secure, in the event of a data breach we act in accordance with the notification obligations required by law.

We retain your personal data only for as long as the processing purpose requires and for the periods stipulated in the relevant legislation.

We keep your account and profile data for as long as your account is active. If you close your account, we delete or anonymize data that is not subject to a legal retention obligation within a reasonable time.

Data subject to a legal obligation, such as transaction, ticket, payment, and accounting records, is retained for the periods required by tax and commercial legislation (as a rule, up to ten years).

RaveHunt is intended solely for users aged 18 and over. We do not knowingly collect personal data from anyone under 18.

If we become aware that we have processed data belonging to a person under 18, we delete the relevant account and data within a reasonable time. If you believe a minor has shared their data with us, please contact us at contact@ravehunt.com.

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been, and to learn the purpose of processing and whether it is used in line with that purpose.

You also have the right to request that your data be corrected, deleted, or destroyed, that these actions be notified to third parties to whom the data has been transferred, to object to processing, and to claim compensation for damage arising from unlawful processing.

To exercise your rights, you can contact us through the channels in the final section. We will conclude your request within the period stipulated by law (at the latest within thirty days). If you are not satisfied with the outcome of your application, you have the right to lodge a complaint with the Personal Data Protection Board.

This Privacy Policy may be updated from time to time in line with changes to our services, the law, or our practices.

The current version is always published on ravehunt.com. Where there are significant changes, we will inform you through appropriate channels. The effective or last updated date is indicated at the beginning or end of this policy.

You can contact us with any questions, requests, or applications regarding this policy and your personal data:

TripsTerra LLC (operator of the 'RaveHunt' brand and platform) · Address: 1007 North Orange Street, Wilmington, DE 19801, United States · Email: contact@ravehunt.com · Web: ravehunt.com.

You can submit your KVKK-related applications in writing to the address above or by the methods required by law. Your application must include information verifying your identity.