Privacy policy

The event organizer (the venue or production company shown as “Sold by”) decides what your data is used for — it is the controller. Listô provides the system and processes the data on the organizer's behalf — it is the processor.

• When you buy a ticket: name, email, WhatsApp (optional), CPF or another document number, and the name (and, when required, the document) of the person who will use each ticket.
• On guest lists and reservations: name and whatever the form asks for (for example WhatsApp, date of birth, Instagram).
• For events with entry approval: the request details and, if you send one, a photo.
• About the payment: amount, method, date and the transaction identifier. We do not receive or store the card number.
• At the door: the date and time the ticket or name was validated.
• Technical data: date and time of visits and a code derived from the IP address (not the IP itself), used to limit attempts and prevent abuse.

• Issuing and delivering the ticket, and letting you reopen it in “My tickets”.
• Checking who enters the event.
• Processing payment, cancellations and refunds.
• Applying per-person limits and preventing fraud.
• Notifying you about your purchase (confirmation, cancellation, refund, transfer).
• Meeting the organizer's legal and tax obligations.
• Sending news and upcoming events — only if you agreed. You can opt out at any time.

• The event organizer and its team (for example, door staff see the holder's name to check entry).
• The payment institution that processes the charge (currently Mercado Pago).
• The infrastructure services that host the system, the database and email delivery.
• The organizer's advertising and measurement tools (Meta, Google, TikTok) — only if you accept analytics cookies.

We do not sell your data.

• Necessary: chosen language; the “My tickets” session (30 minutes); the cart and the order waiting for payment; your invite credential for events with approval; and the link of the promoter who brought you to an event (kept for 30 days, so the sale is credited to them).
• Analytics: only loaded if you accept in the cookie notice. You can decline and keep using the service normally.

We keep the data for as long as needed for the purposes above and to meet the organizer's legal and tax obligations. You can ask for your data to be deleted; whatever the law requires to be kept stays stored for the legal period.

You can ask to confirm whether we process your data, access it, correct it, request deletion or portability, and withdraw your consent to news. In Brazil these rights are set out in the LGPD.

Requests are made to the event organizer, through the contact channels shown on the order, on the ticket and in the emails. To stop receiving news, use the unsubscribe link in the messages or ask the organizer.

Access to the data is restricted to each organizer's authorized team, and communication with the system is encrypted.

The link to your order and to each ticket works like a key: whoever has the link opens the ticket. Keep them safe and don't publish them.

Events have an age rating set by the organizer. The service is not aimed at children.

This policy may be updated. The version in force is always the one published on this page.