1. Introduction
PLAY ("we," "us," or "our") operates an SMS-based RSVP and notification service (the "Service") at play.rsvp. This Privacy Policy explains how we collect, use, retain, and safeguard your information when you interact with the Service. By using the Service, you agree to the practices described in this Privacy Policy.
2. Information We Collect
We collect the following categories of information:
Information you provide directly:
- Phone number (required for RSVP)
- Email address (optional)
- First and last name (optional)
- Any other information submitted through our forms
Information collected automatically:
- IP address and approximate geolocation (city, state, country)
- Browser type and device information
- Pages visited, scroll depth, and time spent on pages
- Referral source (e.g., Instagram Story, Meta ad)
- Timestamp of RSVP submission and opt-in consent
Information from Promoters:
- Account registration details (name, email, EIN or tax ID)
- Event and drop page content
- Uploaded images, video, and media assets
- Billing and payment information (processed by our payment provider; we do not store full card details)
Information from our infrastructure providers:
- SMS delivery and engagement signals from our SMS provider (delivery status, opt-out signals) returned in connection with messages we send
- Ad-platform attribution events (e.g., Meta Pixel) collected on our drop pages to measure campaign performance
3. Legal Basis for Processing
Where applicable law requires a legal basis for processing personal information, we rely on the following:
- Consent: We process Fan phone numbers and send SMS messages based on the explicit consent provided at opt-in. Consent may be withdrawn at any time by replying STOP.
- Contract: We process Promoter account data to fulfill our contractual obligations under our Terms of Service.
- Legitimate interests: We process certain data (e.g., fraud detection, platform analytics) based on our legitimate business interests, where those interests are not overridden by your rights.
- Legal obligation: We may process data to comply with applicable laws and respond to lawful requests from authorities.
4. How We Use Your Information
We use collected information to:
- Send SMS messages you have consented to receive
- Process RSVPs and event notifications
- Measure SMS delivery and event performance (such as lead capture rate, delivery rate, and attributed ticket revenue) for the operator of the event you opted in to
- Record and store proof of consent (timestamp, IP address, opt-in URL) for TCPA compliance
- Improve and maintain the Service
- Detect and prevent fraud, spam, or abuse
- Comply with legal obligations
- Communicate with account holders about their accounts, billing, and Service updates
5. SMS Communications
When you submit your phone number through a drop page on the Service, you consent to receive transactional notification messages from the Promoter associated with that drop page. Message frequency varies. Message and data rates may apply. Consent is not a condition of purchase.
Mobile phone numbers, SMS opt-in data, and originator consent records will not be shared with any third parties. We do not sell, rent, lease, trade, transfer, or otherwise disclose this information to any third party, affiliate, partner, lead-generation service, data broker, or marketer for any marketing, promotional, or commercial purpose. Mobile phone numbers and SMS opt-in data are used solely to deliver the SMS messages you have consented to receive, and are processed only by contracted service providers (such as Twilio for SMS delivery) acting on our behalf under data processing agreements that prohibit any other use.
- Reply STOP to opt out at any time; we process opt-out requests immediately
- Reply HELP for assistance
- We do not send messages outside 9:00 AM – 8:00 PM in your local timezone
- Messages will not contain SHAFT-category content (sexual, hate, alcohol to minors, firearms, tobacco/vape, cannabis/CBD)
We retain a record of your opt-in consent, including the timestamp, IP address, and drop page URL, for a period of twenty-four (24) months or for the duration of the associated Promoter's active account, whichever is longer. This record is maintained for legal compliance purposes and is not shared with any third party.
6. Information Sharing & Disclosure
We do not sell, share, rent, lease, trade, or otherwise disclose your personal information to any third party, affiliate, partner, lead-generation service, data broker, or marketer for any marketing, promotional, or commercial purpose.
Text messaging originator opt-in data and consent will not be shared with any third parties. Mobile phone numbers, SMS opt-in data, and originator consent records are used solely to deliver the SMS messages you have consented to receive and are never sold, rented, transferred, traded, licensed, or otherwise made available to any party outside that purpose, in any circumstance.
The Service is delivered with the help of a small set of contracted service providers (for example, Twilio for SMS delivery, our cloud hosting provider, and our payment processor). These providers process information solely on our behalf under data processing agreements that prohibit any other use of your information; they act as our processors, not as independent third-party recipients, and they may not use, sell, or disclose your information for any other purpose.
We may disclose information only where strictly required to comply with a binding legal obligation (such as a subpoena, court order, or lawful request from a regulatory authority). Any such disclosure will be narrowly scoped to the specific information legally required and is not a transfer for any commercial or marketing purpose.
7. Data Retention
We retain personal information for the following periods:
- Fan phone numbers and RSVP data: Twenty-four (24) months from the date of opt-in, or for the duration of the associated Promoter's active account, whichever is longer.
- Consent records (timestamp, IP, opt-in URL): Twenty-four (24) months from the date of consent, or as required by applicable law.
- Promoter account data: For the duration of the Promoter's account plus thirty-six (36) months, or as required for legal or billing purposes.
- Upon Promoter account termination: Fan data associated with that account will be deleted within ninety (90) days, unless retention is required by law.
You may request deletion of your data at any time by contacting us. We will process deletion requests in accordance with applicable law.
8. Your Privacy Rights
Depending on your location, you may have the following rights with respect to your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal information, subject to applicable legal retention requirements.
- Opt-out of SMS notifications: Withdraw consent for SMS communications at any time by replying STOP.
- Portability: Request your data in a structured, machine-readable format (where technically feasible).
- Object to processing: Object to certain processing activities based on legitimate interests.
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to opt out of sale (we do not sell personal information), and the right to non-discrimination for exercising your rights.
To exercise any of these rights, contact us. We will respond to verifiable requests within forty-five (45) days, with an extension of up to an additional forty-five (45) days where necessary.
9. Cookies & Tracking Technologies
We use cookies, pixels, and similar tracking technologies on our drop pages to measure performance and attribution. This includes the Meta Pixel, which may collect information about your interaction with our pages for the purpose of measuring ad campaign effectiveness. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our pages.
We do not use tracking technologies to build advertising profiles for sale to third parties.
10. Data Security
We implement reasonable and appropriate technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.
11. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe we may have collected information from a child under 13, please contact us. PLAY relies on user representations regarding age and is not liable for misrepresentations made by users.
12. International Data Processing
The Service is operated primarily from the United States. If you are located outside the United States, your information may be processed in the United States or other countries where our contracted service providers operate on our behalf. By using the Service, you acknowledge that your information may be subject to the laws of jurisdictions other than your own. This is not a third-party transfer — service providers process information solely on our behalf under data processing agreements that prohibit any other use.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will notify you of material changes by posting the updated policy on the Service and, where practicable, by sending notice to the email address associated with your account. The "Last updated" date at the top of this policy reflects the most recent revision. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
14. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
PLAY – Privacy Team
play.rsvp