Privacy Policy

This Privacy Policy explains how Limonti, Inc. (“Ticket Alerts”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit ticket-alerts.live, use app.ticket-alerts.live, or otherwise use our ticket-monitoring and alert service (together, the “Service”). It also describes the privacy rights you may have and how to exercise them.

Ticket Alerts is an independent monitoring and notification service. We are not a ticket seller and are not affiliated with Twickets, the All England Lawn Tennis Club (Wimbledon), Ticketmaster, any venue, promoter or artist.

1. Who we are

The controller responsible for your personal information is:

Limonti, Inc. (a Delaware C corporation)
131 Continental Dr, Suite 305
Newark, DE 19713
United States
Email: support@ticket-alerts.live

2. Information we collect

We collect the following categories of personal information:

Category	Examples	Source
Identifiers & account data	Email address; a hashed version of your email; unique account and session identifiers.	You, when you sign up or contact us.
Watchlist & preferences	Events, performers, venues and dates you choose to track; chosen plan tier; delivery preference (email or push).	You, when you set up alerts.
Billing & purchase data	Per-event plan tier (gold / silver / free), currency and region, payment status, and a payment reference for each one-off purchase. Card details are entered directly with our payment processor and are not stored by us.	You and our payment processor (Stripe).
Push notification data	Device push token and basic device information, used only if you enable push alerts.	Your device, with your permission.
Approximate location	Country, inferred from your IP address, used to show the right regional pricing and currency.	Our hosting provider (Cloudflare).
Usage & device data	IP address, browser/user-agent, pages viewed, referring page, interactions with sign-up and checkout, and similar analytics events.	Automatically, via your browser and our analytics tools.
Communications	The content of emails and support messages you send us, and records of the alert and service emails we send you.	You and our email provider.

We do not intentionally collect “sensitive” categories of personal information (such as government IDs, health, precise geolocation, or financial account numbers). Please don’t send us such information.

3. How and why we use your information

We use personal information to:

• Create and manage your account and sign you in (we use passwordless email links and one-time codes).
• Operate the core Service: monitor ticket availability for the events you track and send you email and/or push alerts.
• Process your one-off, per-event payments and provide receipts and confirmations.
• Show the correct regional pricing and currency based on your approximate location.
• Respond to your questions and provide customer support.
• Send you service messages (for example, sign-in links and payment confirmations) and, where permitted, marketing emails about features and offers.
• Measure and improve the Service, understand how it is used, and run and attribute our advertising.
• Protect the Service, prevent fraud and abuse, and comply with our legal obligations.

Legal bases (for visitors in the UK and EEA). Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract (to provide accounts, alerts and process payments); your consent (for marketing emails and non-essential cookies and advertising technologies, which you can withdraw at any time); our legitimate interests (to secure, maintain and improve the Service, to understand usage, and to prevent fraud); and compliance with a legal obligation (for example, tax and accounting records).

4. Cookies, pixels and tracking technologies

We and our partners use cookies and similar technologies (including pixels and the Cloudflare Zaraz tag manager) for the following purposes:

• Strictly necessary — sign-in sessions, security and core functionality. These are always active and cannot be switched off.
• Analytics — to understand how the Service is used (Google Analytics 4).
• Advertising — to measure and target our advertising (Meta/Facebook Pixel and Reddit Pixel). For advertising matching we share a hashed (irreversible) version of your email rather than your plain email address where possible.

Where required by law, we ask for your consent before setting non-essential (analytics and advertising) cookies and technologies, and you can change your choices at any time through our cookie preferences. We also honor the Global Privacy Control (GPC) browser signal as a request to opt out of advertising-related sharing. You can additionally block or delete cookies through your browser settings, though some features may not work without them.

5. How we share your information

We do not sell your personal information for money. We share personal information with the service providers (“processors”) below, who act on our instructions to help us run the Service:

Provider	Purpose
Stripe	Payment processing for one-off, per-event purchases.
Cloudflare	Website and application hosting, database and file storage, content delivery, security, and tag management (Zaraz).
Postmark	Sending transactional and alert emails.
Google (Firebase Cloud Messaging)	Delivering push notifications to your device.
Google (Fonts)	Serving the website’s typefaces.
Google Analytics	Website and product analytics.
Meta Platforms	Advertising measurement and audience targeting.
Reddit	Advertising measurement and audience targeting.
Rollbar	Error monitoring and diagnostics (may include your email address and IP address).

We may also disclose personal information: to comply with the law, legal process or government requests; to enforce our Terms & Conditions and protect our rights, safety and property and those of others; and in connection with a merger, acquisition, financing or sale of assets, in which case we will continue to protect your information consistent with this policy.

6. “Sale” or “sharing” of personal information

We do not sell your personal information for money. However, our use of advertising technologies (such as the Meta and Reddit pixels and Google Analytics) may be considered a “sale” or “sharing” for cross-context behavioral advertising under the California Consumer Privacy Act (as amended by the CPRA) and similar US state laws.

You have the right to opt out. To exercise your “Do Not Sell or Share My Personal Information” right, you can:

• adjust your choices in our cookie preferences to decline advertising cookies;
• enable the Global Privacy Control (GPC) in a supported browser, which we treat as a valid opt-out request; or
• email us at support@ticket-alerts.live.

7. Your privacy rights

US state privacy rights (including California)

Depending on your state of residence, you may have the right to: know and access the personal information we hold about you; correct inaccurate information; delete your information; opt out of the “sale” or “sharing” of your information and of targeted advertising; and not be discriminated against for exercising these rights. We do not use or disclose sensitive personal information for purposes that require a separate right to limit.

UK and EEA rights

If you are in the UK or EEA, you have the right to: access your personal information; have it corrected or erased; restrict or object to its processing; data portability; and withdraw consent at any time (without affecting processing carried out before withdrawal). You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office). We do not currently engage in automated decision-making that produces legal or similarly significant effects about you.

How to exercise your rights

To make a request, email support@ticket-alerts.live. We will verify your request, usually by confirming control of the email address associated with your account, and will respond within the timeframe required by applicable law. You may use an authorized agent to submit a request where the law allows; we may require proof of the agent’s authority.

8. How long we keep your information

We keep personal information for as long as needed to provide the Service and for the purposes described in this policy, then delete or anonymize it. In general:

• Account and watchlist data — for as long as your account is active. Following a verified deletion request, we delete it within 30 days, except where we must retain certain records.
• Payment and transaction records — up to 7 years, to meet tax, accounting and legal obligations.
• Sign-in tokens and session data — short-lived (minutes to hours) and then expired and removed.
• Push notification tokens — until you disable push notifications or delete your account.
• Server and error logs — typically around 90 days.
• Analytics data — according to our analytics providers’ retention settings (for Google Analytics, up to 14 months).

9. International data transfers

We are based in the United States, and our service providers are located in the United States and other countries. If you access the Service from the UK or EEA, your personal information will be transferred to and processed in the United States and elsewhere. Where we make such transfers, we rely on appropriate safeguards such as the UK and EU Standard Contractual Clauses (and the UK International Data Transfer Addendum) or applicable adequacy decisions, together with the transfer mechanisms maintained by our processors.

10. How we protect your information

We use technical and organizational measures designed to protect personal information, including encryption in transit (HTTPS), access controls, and short-lived, single-use sign-in tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children’s privacy

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

12. Third-party links and services

The Service links to and integrates with third-party sites and services (for example, ticket resale platforms such as Twickets and the official Wimbledon resale, and our payment processor). Their privacy practices are governed by their own policies, and we are not responsible for them. We encourage you to read the privacy policy of any third-party service you use.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

14. How to contact us

For any privacy question or request, contact us at support@ticket-alerts.live or by mail:

Limonti, Inc.
131 Continental Dr, Suite 305
Newark, DE 19713
United States