Privacy Policy

Last updated: December 2025

About BACCVS

BACCVS is a comprehensive social entertainment platform that combines event discovery, ticket purchasing, and social networking. Our platform enables users to:

• Discover Events: Browse nearby events with location-based filtering, date ranges, pricing, and music preferences
• Purchase Tickets: Buy tickets for events including bulk purchases with secure Stripe payment integration
• Resell Tickets: List and purchase resale tickets from other users through our marketplace
• Connect Socially: Create posts, share stories, follow other users, like content, and engage with a community
• Real-time Chat: Message other users through our WebSocket-enabled chat system
• Professional Network: Create DJ, Promoter, and Nightclub profiles with service packages and ratings
• Manage Subscriptions: Access premium features through our subscription tiers (Free, Intro, Pro)
• User Matching: Match with other users based on interests and preferences

What Information We Collect

• Account Information: Name, email address, phone number, date of birth, gender, profile photos
• Location Data: GPS coordinates for location-based event discovery and user proximity features
• Profile Content: Bio, interests, music preferences, atmospheric vibes, event types, photos, videos
• Social Data: Posts, stories, comments, likes, reposts, follows, blocks, user matches
• Chat Data: Messages, conversation history, file attachments shared through chat
• Transaction Data: Event purchases, ticket details, resale listings, amounts, payment status
• Professional Data: Service packages, pricing, ratings, verification status, portfolio items
• Authentication Data: JWT tokens, login history, OAuth provider accounts (Google, Apple, Facebook, Twitter)
• Payment Data: Stripe customer IDs (we do NOT store credit card information)
• Device & Usage Data: Device information, IP addresses, browser information, push notification tokens
• Preference Data: Notification settings, privacy settings, account type (public/private/matches-only)

How We Use Your Information

• Account Management: Create and maintain your account, authenticate users, manage passwords
• Event Services: Display nearby events, process ticket purchases and resales, manage inventory
• Social Features: Display your posts, stories, connections, and enable social interactions
• Messaging: Deliver real-time chat messages and notifications
• Payment Processing: Process payments through Stripe for ticket purchases and subscriptions
• Subscriptions: Manage subscription plans, track credits, handle renewals
• Matching System: Connect users based on preferences and interests
• Notifications: Send push notifications, email updates, and in-app alerts
• Safety & Moderation: Prevent fraud, enforce community guidelines, process reports and blocks
• Analytics & Improvement: Analyze usage patterns to improve our services

Data Storage & Security

• Database: User data stored securely in MongoDB with encrypted authentication
• Media Storage: Photos and videos uploaded to AWS S3 with secure access controls
• Payment Security: Payment processing handled exclusively by Stripe - we never store card details
• Encryption: Passwords hashed with bcryptjs, JWT tokens for secure authentication
• Access Control: Role-based access, authentication middleware on protected routes

Third-Party Services

We share data with the following third parties only as needed:

• Stripe: Payment processing for ticket purchases and subscriptions
• AWS S3: Media file storage (photos, videos, stories)
• OAuth Providers: Google, Apple, Facebook, Twitter for authentication
• Email/SMS Services: Email verification, password reset, and SMS notifications

Your Privacy Rights

You have the right to:

• Access your personal data at any time
• Update or correct your information
• Delete your account and associated data
• Control your privacy settings (public, private, matches-only)
• Manage notification preferences
• Block or unblock other users
• Opt out of promotional communications

Data Retention

We retain your data as long as your account is active. Upon account deletion, we will remove your personal data within 30 days, except where required by law or for legitimate business purposes (transaction records, fraud prevention).

Children's Privacy

BACCVS is not intended for children under 18 years of age. We do not knowingly collect information from children. If we discover such collection, we will delete the data immediately.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the app. Your continued use of BACCVS constitutes acceptance of updated policies.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:
Email: contact@baccvs.com
Response Time: We aim to respond within 7 business days