Last updated (contract version): 2026-10-20 Service provider: Patmos Software LLC (“Patmos”), provider of Showin. Registered address and formation details: [pending provider detail]. Privacy contact: israel@patmos.io · patmos.io
1. Who this covers
This proposal explains how personal data would be processed when someone visits Showin, creates an account, publishes or manages an event, buys or validates a ticket, or contacts support.
The organizer is responsible for data it chooses to collect for its event. Patmos operates tools for the organizer and may act as a processor or service provider for that data, depending on instructions and applicable law. Patmos may also act as an independent controller for accounts, security, billing, and support. Roles must be confirmed by flow and jurisdiction: [pending provider detail].
2. Data that may be processed
- Account and contact: name, email, login identifiers, and language preferences.
- Event registration: answers to organizer-defined questions, ticket type, holder, attendance, and related communications.
- Purchase: tickets, amounts, currency, payment method and status, provider reference, and reconciliation data. The payment provider handles full card details.
- Admission: ticket identifier, rotating QR code, validation status, scan date and time, door or device, transfers, and audit history needed to prevent duplicate entry and resolve issues.
- Usage and device: technical logs, IP address, browser, security events, and essential diagnostic data.
- Support and compliance: support messages and records that must be retained for legal, tax, or security reasons.
An organizer may enable optional fields, such as accessibility needs or information about a minor and guardian. The organizer must explain the purpose, collect only what is necessary, and apply added safeguards. [Pending provider detail: sensitive data categories and age threshold by jurisdiction].
3. Purposes and legal bases
Data would be used to create and administer accounts, publish white-label pages, issue tickets, process payments, validate door QR codes, respond to requests, send operational messages, prevent fraud, secure the Service, and comply with legal duties.
Depending on country and context, legal bases may include performing a contract, consent, assessed legitimate interests, legal obligation, or the organizer’s instructions. Organizers must determine and document the basis for event registration and communications. [Pending provider detail: validation of local bases and notices].
This proposal does not provide for selling personal data or using it for third-party behavioral advertising. Any optional analytics or promotional communication must be identified and provide required choices under applicable law.
4. Payments and recipients
Stripe and Mercado Pago process electronic payments under their own policies and terms. They receive data needed to authorize and settle payments, detect fraud, and meet their obligations. Availability depends on the event and region. The organizer handles cash and may record its payment status in Showin.
Data may be shared with organizers and their authorized staff to administer an event; hosting, database, email, technical analytics, and support providers; payment providers; professional advisers; and authorities where required by law or valid request.
Providers should receive only necessary information and be subject to appropriate contractual duties. [Pending provider detail: provider list, locations, subprocessors, and agreements].
5. International transfers
Patmos contemplates operations in Argentina and other jurisdictions. Data may be hosted or processed in countries different from the user or event. Before operating in each market, Patmos and the organizer must determine valid transfer mechanisms, safeguards, notices, and local rights. [Pending provider detail: hosting regions and applicable mechanism by country].
6. Retention and security
Data would be retained as long as needed to provide the Service, administer the event, handle claims, keep accounting records, and meet legal duties. Retention periods by category, including QR and fraud logs, are pending: [pending provider detail]. At the end of the period, data will be deleted or anonymized where feasible unless retention is required by law or needed to resolve a dispute.
Patmos will apply reasonable access controls, credential protection, encryption in transit, and measures to detect and respond to incidents. No system can guarantee absolute security. [Pending provider detail: approved controls, incident handling, and notification commitments].
7. Rights and choices
Individuals may request access, correction, updating, deletion, objection, restriction, or portability where available under applicable law, and may withdraw consent when consent is the basis.
For event data, the organizer may be the first contact because it determines how the data is used. For account data or general requests, email israel@patmos.io. Patmos will verify identity proportionately and respond within the applicable legal period. If a request concerns data Patmos processes for an organizer, Patmos will refer it or assist the organizer as appropriate.
Individuals may complain to the competent data protection authority. The current authority and channel for Argentina must be confirmed before publication: [pending provider detail].
8. Minors
Showin is not directed to minors creating accounts on their own, except where applicable law and an approved flow allow otherwise. An organizer may manage tickets for minors accompanied by a guardian only when it configures and explains the process and obtains required authorizations. [Pending provider detail: ages, parental consent, and local legal validation].
9. Cookies and similar technologies
The Service may use essential storage for sessions, security, and preferences. If analytics or marketing cookies are added, they require appropriate configuration, notice, and consent where law requires it. Showin does not use analytics or marketing cookies: essential storage is limited to sessions, security, and preferences (language and event).
10. Changes and contact
This policy may be updated to reflect Service or legal changes. The effective date will be stated and notice will be provided where required. Questions and requests: israel@patmos.io · patmos.io.