Privacy Policy

1. Who is responsible for your data

ACCESSLY SPA, RUT (Chilean tax ID) 78.439.192-2, with its registered address at Badajoz 100, oficina 1014, Las Condes, Santiago, Chile (hereinafter, “Accessly”), is the controller of the personal data collected through the Platform.

For any privacy question or to exercise your rights: soporte@accessly.cl.

2. Accessly and Organizers: who processes what

Accessly is an intermediation platform: events are organized by independent Organizers. This means that, for a single purchase, there are two separate processing activities.

• Accessly processes your data to operate the Platform: your account, the purchase, the tickets, payments, balance, support and security.
• The Organizer of the event you bought receives the data needed to organize and control entry to its event —your name, email, tickets purchased and any fields it requires, such as an ID document when entry is personal— and is responsible for how it uses that data.

The Organizer is contractually bound to use that data only for its event, not to sell it or pass it on to third parties, to honor your unsubscribe requests and to comply with data protection law. If you have a problem with how an Organizer uses your data, write to us and we will address it.

3. What data we process

a) Data you give us

• Account: name, username, email address and password (which is stored encrypted and that no one at Accessly can see). If you sign in with Google, we receive your email, name and profile picture from that service.
• Profile: phone number, RUT (Chilean tax ID) and other contact details you choose to add.
• Purchase: the buyer’s name and email, and the data the Organizer requires per ticket —attendee name, ID document or other event-specific fields—.
• Bank details: bank, account type, number and the account holder’s RUT, when you resell a ticket or are an Organizer and need to receive your payout.
• Support: what you write to us through the help channels and in post-event surveys, which are voluntary.
• Organizers: in addition, the company’s identification and billing details, and those of the people you invite to your team.

b) Data generated when you use the Platform

• Orders and tickets: what you bought, when, at what price, with which payment method, their status and any refunds.
• Accessly Balance: your top-ups and your balance transaction history.
• Points and referrals: the points you earn and redeem, and whether you reached an event through an ambassador’s link.
• Resale: the listings you create, their purchases and the payments owed to you.
• Entries and scans: date, time, result of your QR code validation and which member of the event team scanned it.
• Technical and browsing data: IP address, device and browser type, pages viewed, and visit source data (UTM, referrer, landing page and first visit).
• Unfinished purchases: if you leave a purchase halfway, we keep that record for a limited time so it can be recovered and, if you authorized it, to remind you of it by email.
• Security and audit logs: relevant actions on accounts, events and money, with who performed them and when.

c) What we do NOT process

• We do not store your card details. Payment takes place entirely on our processor’s site (Flow); Accessly only receives the result of the transaction and an identifier to reconcile it.
• We do not process sensitive data —health, ethnic origin, political or trade union affiliation, sex life— and we do not ask you for it. Do not enter it in an event’s open-text fields.
• We do not verify the accuracy of what you enter: if you misspell your email address, your tickets will be sent to that address.

4. What we use your data for

• Carrying out the purchase: issuing tickets and add-ons, charging for them, sending them and validating them at entry.
• Operating your account: authenticating you and showing you your tickets, balance, points and history.
• Communicating with you: confirmations, event reminders, changes, refunds and balance notices. They are part of the service and do not depend on your marketing consent.
• Providing support and handling complaints, refunds and disputes.
• Preventing fraud and abuse: detecting irregular resale, use of bots, duplicate codes, chargebacks and unauthorized access.
• Providing the Organizer with the sales and attendance information for its event.
• Improving the service: understanding what works, measuring performance and fixing errors, using aggregated data whenever possible.
• Sending you news and promotions, only if you authorized it.
• Complying with the law: tax and accounting obligations and requests from competent authorities.

The legal basis for processing is, depending on the case, the performance of the contract you have with us (buying and using your tickets), compliance with legal obligations, our legitimate interest in operating the platform securely, and your consent in the case of marketing communications or data you provide voluntarily.

5. Marketing communications

You will only receive promotions from Accessly or from an event’s Organizer if you expressly agreed to it, by checking the corresponding box when buying or signing up. That consent is independent of the purchase: not checking it does not prevent you from buying.

All our marketing emails include an unsubscribe link, which takes effect immediately and does not affect the transactional emails for your purchases. You can also write to us at soporte@accessly.cl.

6. Who we share your data with

We do not sell your data. We share it only with those needed to provide the service:

• The Organizer of the event you bought, under the terms of clause 2.
• Technology providers acting on our behalf and under our instructions: hosting and infrastructure (Vercel), database and authentication (Supabase), payment processing (Flow), email delivery (Resend), maps and location (Mapbox), Google sign-in and, only if you accept it, website usage measurement (Google Analytics).
• Authorities and courts, when a law or a ruling requires us to provide information.
• Advisors and auditors bound by a duty of confidentiality, and potential acquirers in the event of a reorganization or sale of the company, with prior notice.

International transfers: some of these providers store or process data outside Chile. In those cases we require adequate contractual guarantees of confidentiality and security, equivalent to those we apply ourselves.

8. How long we keep your data

• Account and profile: while the account exists and until you request its deletion.
• Orders, tickets, balance and payouts: the period required by tax and accounting regulations, currently 6 years, because they are records of money transactions. The balance ledger is never edited or deleted: an error is corrected with an offsetting entry.
• Scan and audit logs: up to 2 years after the event, to resolve entry disputes.
• Unfinished purchases: up to 90 days.
• Support and surveys: up to 2 years after the conversation is closed.
• Data processed with your marketing consent: until you withdraw it.

Once those periods end, the data is deleted or anonymized so that it can no longer identify you.

9. Your rights

With respect to your personal data you can:

• Access the data we hold about you and find out how we use it.
• Rectify data that is incorrect, incomplete or out of date.
• Erase data that is no longer necessary or that we process only with your consent.
• Object to certain processing, especially for advertising.
• Withdraw your consent at any time, without retroactive effect.
• Request a copy of the data you gave us, in a readable format.

To exercise them, write to us at soporte@accessly.cl from the email registered on your account, or request it from your profile. We will respond within the legal deadlines and, in any case, within a maximum of 30 calendar days. We may ask you to verify your identity before providing information.

There is data we cannot delete while there is a legal or contractual obligation to keep it —for example, the tax record of a purchase or balance transactions—. In those cases we will explain the reason and the retention period.

10. Security

We apply technical and organizational measures to protect your data: encryption in transit, passwords stored encrypted, role- and permission-based access control, isolation of each organizer’s information, logging of sensitive actions and limiting the staff who can access personal data.

No system is infallible. If a breach occurs that significantly affects your data, we will inform you and notify the competent authority as required by law.

11. Minors

The Platform is intended for people aged 18 and over. We do not knowingly collect data from minors. If a minor uses the service, they must do so with the authorization of their mother, father or legal guardian, who will be responsible for that activity. If we discover that we are processing a minor’s data without that authorization, we will delete it. If you believe this has happened, write to us.

12. Automated decisions

We do not make decisions with legal effects on you based solely on automated processing. We use limited automatic rules to prevent fraud and abuse —for example, limiting purchase attempts or detecting duplicate codes—, and you can always ask us for a human review of a measure that affects you by writing to us.

13. Changes to this policy

We may update this policy. The version in effect is always the one published on this page, with its date and version number. If the change is relevant to you, we will notify you by email or within the Platform before it takes effect.

14. Contact and complaints

For any question about this policy or the processing of your data: soporte@accessly.cl.

If you are not satisfied with our response, you can go to the competent personal data protection authority and, where applicable, to SERNAC (Chile’s National Consumer Service) or the courts. This policy is governed by Chilean law on the protection of privacy and personal data.