Privacy Policy

1. Overview

Mesibash (https://mesibash.vercel.app) helps people discover events, buy tickets, and host gatherings. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Mesibash, you agree to this policy.

2. Information we collect

We collect information in these categories:

• Account and identity. When you create an account, our authentication provider (Clerk) may collect your email address, name, profile photo, and sign-in method. We store a linked account record in our systems, including your email, display name, and city if you provide them.
• Age verification. We ask for your date of birth during onboarding to confirm you meet our minimum age requirement (14+). This is stored in your Mesibash profile and is not editable in the app after it is set, except by our support team where appropriate.
• Tickets and events. When you buy tickets or host events, we store purchase history, ticket codes, check-in status, event details you create, and related metadata needed to run the service.
• Payments. Paid tickets are processed by Stripe. We receive payment and transaction identifiers from Stripe; we do not store full payment card numbers on our servers.
• Content you upload. If you upload an event cover image or similar content, we store that file to display it on event pages.
• Location and address search. When hosts search for venues, we may send address queries to Google Places (if configured) or OpenStreetMap to suggest locations. Event venue addresses you save are stored with the event.
• Technical data. Like most web services, our hosting and infrastructure may log IP addresses, browser type, device information, and request timestamps for security, debugging, and reliability.

3. How we use information

We use the information above to:

• Create and secure your account
• Verify eligibility to use the platform
• Sell, deliver, and validate event tickets (including QR check-in)
• Let hosts create, publish, and manage events
• Process payments and prevent fraud
• Provide support and respond to requests
• Improve, maintain, and protect Mesibash
• Comply with legal obligations

4. Google sign-in and Google user data

If you choose to sign in with Google, authentication is handled by Clerk using Google's OAuth service. In that flow, Google may share basic profile information with us (such as your name, email address, and profile picture) so we can create and maintain your Mesibash account.

We use Google user data only to:

• Authenticate you and maintain your account
• Display your profile within Mesibash
• Communicate with you about your account, tickets, or events where needed

We do not use Google user data for advertising, and we do not sell Google user data to third parties. Google user data is handled according to this policy and Google's API Services User Data Policy, including the Limited Use requirements where applicable.

You can revoke Mesibash's access to your Google account at any time through your Google Account permissions settings. You may still need a Mesibash account via another sign-in method to continue using certain features.

5. How we share information

We do not sell your personal information. We may share information with:

• Service providers that help us operate Mesibash, such as Clerk (authentication), Stripe (payments), Google (sign-in and optional address search), and our hosting providers. They may only use data as needed to provide services to us.
• Event hosts, to the extent needed to run an event you attend (for example, check-in or attendee lists for events you bought tickets to).
• Legal and safety, if required by law, regulation, legal process, or to protect the rights, safety, and integrity of Mesibash, our users, or others.
• Business transfers, if we are involved in a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

6. Data retention

We keep information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it where reasonably practicable.

7. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete certain personal information, or to object to or restrict certain processing.

• Account details such as email, password, and connected sign-in methods can be managed through your account settings (via Clerk).
• Profile fields such as display name and city can be updated in your Mesibash profile.
• Date of birth changes require contacting us, because that field is used for age verification.

To make a privacy request, contact us at support@mesibash.com.

9. Children

Mesibash is not intended for users under 14. We do not knowingly collect personal information from children under 14. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

10. International users

Mesibash may process and store information in the United States and other countries where we or our service providers operate. By using the service, you understand that your information may be transferred to jurisdictions that may have different data protection laws than your own.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date above. Continued use of Mesibash after changes become effective means you accept the revised policy.

12. Contact us

Questions about this Privacy Policy or our data practices? Email support@mesibash.com.