data retention
Last updated: June 19, 2026
Kickback's philosophy is simple: we delete what we don't need, and we permanently lock down what we have to keep for legal and fraud-prevention reasons.
90-Day Purge Protocol
To protect user privacy and door security, certain sensitive operations are rapidly purged. Exactly 90 days after an event ends, our automated systems permanently delete:
- Cryptographic QR tokens from all tickets
- Specific scan-detail records and entry timestamps
Once purged, QR codes can never be regenerated or reverse-engineered.
Indefinite Records
Because we hold funds in escrow and must interact with tax authorities, Stripe underwriters, and banking dispute systems, we maintain an immutable audit log. The following is kept indefinitely:
- Financial transactions, payout history, and refund records
- Administrative actions (e.g., freezing events, refund-alls)
- Permanent ban records (to prevent banned phone numbers from returning)
Location Data
True latitude/longitude coordinates uploaded by hosts are strictly guarded. They are stored securely in our database and never returned to standard client views. Offset display coordinates are generated once at event creation and stored permanently to prevent mapping attacks.
Account Deletion
If you wish to delete your account, we will erase your profile display data. However, your phone number hash and transaction-related history will be retained to comply with financial regulations and enforce platform bans.