Loading...
Effective Date: March 29, 2026 · Last updated: August 8, 2026
RMJ FINTECH LTD, a Pennsylvania limited liability company doing business as Liventix (Liventix,
we,
us,
or our
), is committed to protecting your personal information and your right to privacy. This Privacy Policy (the Policy
) describes how we collect, use, disclose, transfer, store, and protect personal information that we receive when you access or use our event discovery, ticketing, social, and venue management platform, including all associated websites, mobile applications, APIs, and related services (collectively, the Services
). This Policy forms part of and is incorporated by reference into our Terms of Service. Capitalised terms not defined herein have the meanings given to them in the Terms of Service.
For the purposes of applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR
), the UK GDPR, and equivalent national implementing legislation, RMJ FINTECH LTD, a Pennsylvania limited liability company doing business as Liventix, is the data controller in respect of personal information processed in connection with user accounts, event discovery, platform features, and marketing communications.
Where Liventix processes personal information of event attendees on behalf of Operators (event organizers) for the purposes of event management and fulfilment, Liventix acts as a data processor and the relevant Operator acts as the data controller for such processing. Operators are independently responsible for ensuring that their processing activities comply with applicable data protection law.
Data Controller Contact
RMJ FINTECH LTD (doing business as Liventix)
Privacy Inquiries: privacy@liventix.tech
Legal/DPO Inquiries: legal@liventix.tech
We collect the following categories of personal information when you register an account, purchase tickets, create an event, post content, complete identity or financial verification, or otherwise interact with the Services:
When you access or use the Services, we and our third-party service providers automatically collect the following categories of technical and usage data:
We may receive personal information about you from the following third-party sources:
If you register as a Sponsor on the Liventix sponsorship marketplace, we collect and process: your company name, logo, website, industry category, city/region interests, and a description of your brand. You may optionally set your profile as discoverable by event organisers (open to outreach
); when enabled, your company name, logo, and interest categories are visible to Organizers browsing the sponsor directory. Contact details (such as your email address) are never exposed to Organisers through the directory — they are used only for transactional communications (deal notifications, payment receipts, delivery reminders). You can toggle your discoverability and delete your Sponsor profile at any time in Settings → Sponsor → Settings.
When you view or interact with in-app Campaign Ads displayed in your feed, we collect: the campaign and creative identifiers; placement (feed or sidebar); whether the ad was viewable (≥50% visible for ≥1 second per IAB standard); approximate dwell time; and whether you clicked the ad. We also maintain per-user frequency caps to limit how often you see the same campaign. This data is used to: (a) charge the advertiser the correct amount (cost-per-thousand-impressions billing); (b) prevent ad fatigue through frequency capping; and (c) provide Operators with aggregated campaign analytics (impressions, clicks, CTR). Individual impression records are retained for 90 days; aggregated daily summaries are retained indefinitely. We do not sell this data to third parties or use it to build individual advertising profiles shared with external ad networks.
If you choose to use the optional "Find Friends" feature on our mobile application and grant the corresponding device permission, we access the phone numbers stored in your device's contact list to help you discover which of your contacts are already registered Liventix users. Before any contact information leaves your device, each phone number is converted into a one-way cryptographic hash (SHA-256); we never receive, store, or transmit your contacts' names, email addresses, or unhashed phone numbers. Only hashes that match an existing Liventix user's hashed phone number are persisted, solely to display that match to you and to avoid reprocessing the same contact on a future sync; hashes with no match are discarded immediately and never stored. You may disable this feature and delete any stored matches at any time via Settings → Find Friends → "Forget my contacts."
Event organizers may upload contact lists (names, email addresses, and phone numbers) to invite people to their events. When an organizer uploads your contact information, Liventix processes it on that organizer's behalf and on their instruction, solely to deliver their event invitations and related communications. We require organizers to confirm they have an appropriate basis to contact the people on their lists. If you receive an invitation and do not wish to be contacted again, you can opt out using the mechanism in the message (for example, replying STOP to a text or WhatsApp message, or the opt-out instruction in an email); opt-outs are recorded and enforced across future sends. You may also contact us at privacy@liventix.tech to have your details removed from uploaded contact lists.
With your device-level permission, our mobile application accesses your camera and microphone when you capture photos or videos to post, and your photo library when you attach existing media to posts, messages, or your profile. Media is accessed only when you initiate the action, and only the items you select or capture are uploaded. Device biometric authentication (such as Face ID or fingerprint), where offered, is performed entirely on your device by the operating system — biometric data never reaches our servers.
When you open a link another user shared with you (for example, an event invitation sent via WhatsApp, text, or a copied link), the link may carry a referring user identifier and campaign parameters. If you sign up for Liventix within 30 days of opening that link, we record which user invited you and, where applicable, which event the invitation related to. Before you sign up, this information is held only in your browser's local storage on your device; if you do not create an account within 30 days, it expires and is never sent to us. If you do sign up, we retain the resulting inviter/event record for as long as your account exists. We use this solely to measure how invitations lead to signups and to show the inviting user an aggregate count of signups their invitations produced — never to build advertising profiles or to share with third parties.
You may optionally connect third-party AI assistants or applications (for example, Claude or ChatGPT) to your Liventix account, via an access token you generate in Settings or an authorization screen you approve. A connected application can, on your instruction, create events, retrieve your event list and invite links, view RSVP counts for events you host, and send in-app updates to your event guests — acting under your account with your normal permissions and subject to the same limits. Actions taken by a connected application are attributed to you. We store only a cryptographic hash of connection credentials, along with the connection's name and usage timestamps. We do not share your personal information with the AI provider beyond the responses to the specific requests the application makes; what the AI provider does with information you or the application share with it is governed by that provider's own privacy policy. You can revoke any connection at any time in Settings → Connected AI, which immediately disables its access.
When you use direct messaging, limited activity signals are visible to the people you message: whether you are currently active in the conversation, whether you are typing, and whether you have seen their messages (read receipts). These signals are shared only within the conversation they relate to and are not used for advertising. You can turn these signals off at any time in Settings → Messaging → "Show activity status"; when disabled, your signals are not shared and, reciprocally, you will not see other people's activity signals.
Venue pages on Liventix are created by venue operators directly, or from business information we receive from third-party sources: Google Places (when an operator sets up their venue by searching for it, we store the venue's name, address, map coordinates, and Google place identifier) and the Overture Maps public business directory (from which we may create unclaimed venue profiles containing a business's name, address, location, phone number, and website). Unclaimed profiles are excluded from public browsing, search, and search-engine indexing until the business claims them, but remain reachable by anyone with a direct link (for example, from our outreach to the business). Map coordinates obtained from Google Places for venues whose operator has never confirmed their details are deleted within thirty (30) days. If a venue profile describes your business and you wish to claim, correct, or remove it, contact privacy@liventix.tech.
If a venue manager verifies their venue through Google Business Profile, we receive confirmation from Google that their Google account manages the matching business listing. We record the Google account identifier and email address used in a verification record, which we retain as evidence of who verified the venue and to resolve any later ownership dispute. We do not retain ongoing access to the Google account itself.
When an organizer requests to hold an event at a venue, the venue's managers can see the event's title, description, dates, cover image, and the organizer's display or organization name — together with any expected guest count the organizer has provided (supplied when opting into shared occupancy, and retained with the event thereafter). Booking conversations between organizers and venue managers are processed as in-platform messages (see Section 2.11). After a completed booking, each side may review the other; reviews are user-generated content published under the double-blind rules described in our Terms of Service.
Event hosts may attach questions to their RSVP flow (for example, meal preference or song requests). Your answers are visible to the event's host and organizing team together with your display name, the time you answered, and the account and ticket identifiers linking each answer to your RSVP. Hosts choose a sharing level for each question: private (host only — the default), guests (aggregated summaries visible to the event's guests), or public (aggregated summaries visible on the event page). Aggregated summaries are designed not to include individual written answers or identify respondents, and are only shown once a minimum number of guests have responded; because narratives for written answers are AI-generated from the answer text, avoid including information in an answer that you would not want reflected in a summary the host shares. Written answers may be summarised into an aggregate narrative using a third-party AI service (see Section 14); the submission includes the question, aggregate response data (counts, distributions, and statistics), and a sample of the written answers. We never attach your name, contact details, or account identifiers to that submission — though any personal details you choose to type into a written answer form part of the submitted text.
Where the GDPR or UK GDPR applies to our processing of your personal information, we process personal information on the following lawful bases:
We use the personal information we collect for the following purposes:
We do not sell personal information to third parties. We may disclose your personal information to the following categories of recipients for the purposes set out in this Policy:
We use cookies, pixel tags, web beacons, local storage, and similar tracking technologies to operate and improve the Services, personalise your experience, and, where you have consented, to deliver targeted advertising and analytics. The categories of cookies we use are as follows:
You may manage your cookie preferences through our in-app cookie consent banner. You may also control cookies through your browser settings; however, disabling certain cookies may impact the functionality of the Services. For EU/UK users, we obtain explicit consent prior to placing non-essential cookies.
Do Not Track: Some browsers offer a "Do Not Track" (DNT) signal. The Services do not currently respond to DNT signals, as no universally accepted standard for honouring such signals has been established. You may use our cookie consent banner to control non-essential tracking.
Liventix is headquartered in the United States, and your personal information may be transferred to, stored in, and processed in the United States and other countries whose data protection laws may differ from those of your country of residence.
Where we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed adequate by the European Commission or applicable supervisory authorities, we rely on appropriate safeguards, including: (a) Standard Contractual Clauses (SCCs) approved by the European Commission; (b) the UK International Data Transfer Agreement or UK Addendum; or (c) other lawful transfer mechanisms under applicable data protection law.
You may request further information about the transfer mechanisms we rely upon by contacting us at privacy@liventix.tech.
Subject to applicable law and certain limitations, you may have the following rights in respect of your personal information:
You may delete your account at any time by navigating to: Profile → More (⋮) → Settings → "Danger Zone" → "Delete Account" and following the confirmation process.
Account Deletion — What Happens:
Upon your confirmed deletion request, Liventix's systems automatically and irreversibly: (1) verify your authentication credentials; (2) permanently purge all personal data from active databases, including your profile, posts, comments, follows, messages, and preferences; (3) anonymise transaction records for financial compliance purposes (your personal identifiers are removed, but anonymised order data is retained); and (4) revoke your authentication credentials and log you out of all sessions. This process is immediate and cannot be reversed.
Data deleted upon account removal: profile information; posts, comments, and reactions; follows, blocks, and saved content; preferences and settings; messages and conversations; organisation memberships; contact sync matches; and analytics data.
Data retained after account removal: Anonymised transaction records and financial data are retained for accounting, tax, and legal compliance purposes for a period of up to seven (7) years or such longer period as required by applicable law. Organizer financial and risk data may be retained for additional periods as required by financial regulation. Such retained data will not contain your name, email address, or other directly identifying information.
To exercise any of the above rights (other than account deletion), please submit a written request to privacy@liventix.tech. We will respond to verified requests within thirty (30) days (or such period as required by applicable law). We may require verification of your identity before fulfilling your request.
We implement and maintain appropriate technical, administrative, and organisational security measures designed to protect personal information against unauthorised access, accidental or unlawful destruction, loss, alteration, disclosure, or other forms of unlawful processing. These measures include, but are not limited to: encryption of data in transit (TLS) and at rest; role-based access controls; multi-factor authentication for privileged access; penetration testing and vulnerability management; and security incident response procedures.
Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and accept no liability for unauthorised access or loss of personal information beyond what is required by applicable law. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you in accordance with our legal obligations and applicable supervisory authority requirements.
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. Our key retention periods are as follows:
Upon expiry of the applicable retention period, personal information is securely deleted or irreversibly anonymised.
The Services are not directed to, and we do not knowingly collect personal information from, children under the age of thirteen (13). If you are under thirteen years of age, you must not use or access the Services. If we become aware that we have inadvertently collected personal information from a child under thirteen without verified parental consent, we will take prompt steps to delete such information from our systems. If you believe we have collected personal information from a child under thirteen, please contact us immediately at privacy@liventix.tech.
The Services may contain links to, or integrate with, third-party websites, applications, and services that are not operated or controlled by Liventix. This Policy does not apply to third-party services, and we are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of each third-party service you access. Our key third-party service providers and their applicable policies include: PayPal (payments), Supabase (infrastructure), Mux (video), Mapbox (mapping), Google (Places, Business Profile verification, and push delivery), Apple (push delivery), PostHog (analytics), and OpenAI and Anthropic (AI-assisted summarisation, content review, risk assessment, and payment-dispute handling — see Section 14).
We reserve the right to update or modify this Policy at any time. We will post the revised Policy to this page and update the "Effective Date" and "Last updated" dates. For material changes, we will provide notice to registered users via email or in-app notification at least fourteen (14) days before the changes take effect, or such longer period as required by applicable law. Your continued use of the Services after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to any updated Policy, your sole remedy is to discontinue use of the Services and delete your account.
Liventix uses automated systems and artificial-intelligence-assisted tools to improve your experience on the platform. Specifically:
For general users, we do not use your personal data to make decisions that produce legal effects or that significantly affect you in a solely automated manner beyond the fraud and risk checks described above. For Operators, the payout credit scoring system described above constitutes automated processing that has a significant effect on payout feature access; Operators have the right to request human review of any tier determination. If you have questions about how automated systems have affected you, please contact our Privacy team at privacy@liventix.tech.
If you have any questions, concerns, or complaints regarding this Policy or our data processing practices, or if you wish to exercise any of your data subject rights, please contact us using the details below. We are committed to resolving complaints and will endeavour to respond promptly and in accordance with applicable law.
RMJ FINTECH LTD (doing business as Liventix)
Privacy Inquiries & Data Subject Requests: privacy@liventix.tech
Legal Inquiries: legal@liventix.tech
Security Reports: security@liventix.tech
EEA and UK residents who are not satisfied with our response have the right to lodge a complaint with their local supervisory authority (e.g., the Information Commissioner's Office (ICO) in the UK, or the relevant EU Data Protection Authority).