Privacy Policy

Who we are

Tonèl is a product operated by KreyAI Technologies LLC, based in Arizona, United States. Questions, privacy requests, security reports, abuse reports, and appeals may be sent to support@tonel.app.

Information we collect

Tonèl does not store attendee payment-card information. During private beta, any payment testing uses Stripe sandbox only; live payment processing and payouts are disabled.

• Account and organizer information, such as name, email, organization name, authentication records, team role, and settings.
• Event information, including event and venue details, ticket types, organizer-authored content, and material changes.
• Attendee and ticket information, including name, email, reservation and ticket status, secure credential digest, transfer history, and check-in history.
• Transactional-email delivery status, support messages, reports, appeals, and related evidence.
• Technical and security information such as IP address, device/browser details, timestamps, request records, and audit logs.

How we use information

Tonèl does not sell attendee personal information. Event operations do not create marketing consent. Tonèl does not AI-translate organizer-authored event content.

• Provide accounts, reservations, tickets, transfers, check-in, exports, and event notifications.
• Authenticate users and enforce organizer and scanner permissions.
• Detect abuse, investigate reports, revoke compromised credentials, and protect Tonèl.
• Send transactional messages such as tickets, material-change notices, and cancellations.
• Provide support, maintain audit evidence, diagnose errors, and comply with applicable law.

Sharing

We share information only as needed with the organizer and authorized team members for the relevant event; providers that host the application, database, authentication, and transactional email, currently including Vercel, Supabase, and Resend; professional advisers or authorities when legally required or reasonably necessary for safety and legal rights; and a successor in a lawful business transaction subject to appropriate protections.

Organizers may export attendee information for their own events and must use it only for legitimate event operations or a separately authorized purpose.

Retention and security

We keep information only as long as reasonably needed for event operations, security, support, disputes, and legal obligations. We use role-based access, server-side authorization, encrypted connections, protected secrets, revocable ticket credentials, tenant isolation, and audit records. Deletion from active systems may not immediately remove information from protected backups, which expire on their normal schedule.

Choices and contact

Depending on location, people may have rights to access, correct, delete, restrict, object to, or receive a copy of their information. Tonèl may verify identity before completing a request. Send privacy or security requests to support@tonel.app.