← Back to PoliciesPrivacy Policy
Last updated: March 2026 | TIXARENA TECNOLOGIA LTDA — CNPJ: 49.739.419/0001-59
1. Data Controller
TIXARENA TECNOLOGIA LTDA (CNPJ: 49.739.419/0001-59) is the data controller responsible for your personal data. For data protection inquiries, contact our Data Protection Officer at dpo@tixarena.com.
2. Data We Collect
We collect the following categories of personal data:
- Account data: Name, email address, phone number, profile picture, date of birth
- Transaction data: Purchase history, payment method details (processed by Stripe), billing address
- Usage data: Pages visited, search queries, device information, IP address, browser type
- Location data: Country detection (via IP), city (if you grant permission)
- Social data: Arena preferences, matches, messages (for TIXARENA Social features)
- Producer data: Company name, CNPJ/tax ID, bank account details, event history
3. Legal Basis for Processing (LGPD Art. 7 / GDPR Art. 6)
- Contract performance: Processing purchases, delivering tickets, managing your account
- Consent: Marketing communications, cookies (non-essential), TIXARENA Social features
- Legitimate interest: Fraud prevention, platform improvement, analytics
- Legal obligation: Tax records, regulatory compliance
4. How We Use Your Data
- Process ticket purchases and deliver electronic tickets
- Manage your account and provide customer support
- Personalize event recommendations based on your preferences
- Enable TIXARENA Social features (matching, messaging)
- Process payments and manage TixWallet transactions
- Send transactional emails (order confirmations, event updates)
- Prevent fraud and ensure platform security
- Comply with legal obligations
5. Third-Party Services
We share data with the following categories of service providers:
- Payment processing: Stripe (PCI DSS compliant)
- Analytics: Google Analytics (GA4), Vercel Analytics
- Hosting: Vercel (servers in multiple regions)
- Email: Transactional email services
- Event organizers: Your name and ticket information for check-in purposes
We do not sell your personal data to third parties.
6. Cookies
We use the following categories of cookies:
- Essential: Session management, authentication, security (always active)
- Analytics: Google Analytics, Vercel Analytics (with your consent)
- Functional: Language preferences, country detection, theme settings
- Marketing: Conversion tracking (with your consent)
You can manage your cookie preferences through our cookie banner or your browser settings.
7. Your Rights
Under LGPD (Brazil) and GDPR (EU), you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Deletion: Request deletion of your data (right to be forgotten)
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interest
- Withdraw consent: Withdraw previously given consent at any time
- Restriction: Request restriction of processing
To exercise your rights, contact us at dpo@tixarena.com or through your account settings.
8. Data Retention
We retain your data for as long as your account is active. After account deletion, we retain transaction records for 5 years as required by tax law. Analytics data is anonymized after 26 months.
9. International Transfers
Your data may be processed in countries outside your country of residence. We ensure adequate protection through standard contractual clauses and compliance with applicable data protection laws.
10. LGPD Compliance (Brazil)
In accordance with Brazil's Lei Geral de Proteção de Dados (LGPD - Law 13.709/2018), you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your data protection rights have been violated.
11. GDPR Compliance (EU)
For users in the European Economic Area, you may file a complaint with your local Data Protection Authority. Our legal basis for processing and your rights are detailed in sections 3 and 7 above.