Welcome to C4PASS. This Privacy Policy explains how C4 Corporation ("Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the C4PASS platform, our website (c4pass.com), and associated services (collectively, the "Services"). C4 Corporation is the legal owner and data controller of the platform. The platform software is developed and maintained by CeylonCode (PVT) Ltd., operating exclusively as our technical processor under strict data protection agreements.
1. Information We Collect
To provide our multi-tenant e-commerce and ticketing Services, we collect information depending on whether you are interacting with our platform as a Seller (Merchant), a Buyer (Customer), or a Gatekeeper (Public).
1.1 Information You Provide to Us Directly
- Account Registration Data: When creating a Buyer or Seller account, we collect your name, email address, password, phone number, and physical address.
- Seller Business Data: Sellers must provide business details, store names, branding assets, inventory details, and tax identification numbers for compliance and payout setups.
- Transaction and Payment Data: While credit card processing is handled by third-party gateways (such as Stripe), we collect order details, billing addresses, and wallet credit top-up history. We do not store full credit card numbers on C4 Corporation servers.
- Communication Data: Information you provide when contacting customer support, submitting dispute forms, or communicating with Sellers via our platform.
1.2 Information We Collect Automatically
- Device and Usage Data: IP addresses, browser types, operating systems, referring URLs, device identifiers, and crash data.
- Log Data: Timestamps of logins, pages viewed, features accessed (e.g., ticket scanning instances on the Gatekeeper portal), and wallet credit deductions.
- Cookies and Tracking Technologies: We use essential cookies to maintain SSO (Single Sign-On) sessions across the C4PASS network, as well as analytical cookies to understand user behavior.
2. How We Use Your Information
C4 Corporation uses the collected data for the following essential business purposes:
- To Provide and Maintain the Service: Enabling unified login across different storefronts, processing orders, generating QR tickets, and deducting appropriate wallet credits from Sellers.
- Payment and Payout Processing: Facilitating secure transactions between Buyers and Sellers, and routing funds directly to Seller Stripe accounts.
- Platform Security and Fraud Prevention: Monitoring for unauthorized access, detecting fraudulent ticket duplications, and preventing chargeback abuse.
- Service Improvements: Analyzing usage metrics to optimize platform architecture and develop new features.
- Legal Compliance: Meeting tax reporting obligations, enforcing our Terms of Service, and complying with valid legal requests.
3. Data Isolation and Unified SSO Architecture
C4PASS utilizes a unique Unified Buyer Network. When a Buyer creates an account, they can use those credentials across any store on the network. However, data isolation is strictly enforced. A Seller only has access to the personal data (name, email, shipping address, order details) of Buyers who have explicitly placed an order on their specific storefront. Sellers cannot access a Buyer's purchase history from other C4PASS merchants.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We only share information under the following circumstances:
- With Sellers (For Buyers): Necessary order and shipping information is provided to the merchant to fulfill your purchase.
- With Payment Processors: Data is shared with Stripe, PIX integration partners, or other financial gateways to execute payments securely.
- With Technical Service Providers: We share necessary server data with our software developer (CeylonCode (PVT) Ltd.) and our hosting/cloud infrastructure providers strictly for maintenance, debugging, and platform operation.
- Business Transfers: In the event of a merger, acquisition, or sale of assets by C4 Corporation, user data may be transferred as a business asset.
- Legal Obligations: If mandated by law, court order, or to protect the rights, property, and safety of C4 Corporation, our users, or the public.
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law (e.g., tax and accounting regulations). When you request account deletion, we will purge your data from active systems within 30 days, though anonymized transactional data may be kept for aggregate financial reporting.
6. Data Security
C4 Corporation implements rigorous technical and organizational measures to protect your data. This includes end-to-end SSL encryption, secure signing for event tickets to prevent forgery, and hashed passwords. While we strive for maximum security, no internet transmission is 100% secure, and we cannot guarantee absolute data protection.
7. Your Privacy Rights
Depending on your jurisdiction (such as under the GDPR or CCPA), you possess the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to certain legal exceptions.
- Right to Restrict Processing: Request a limitation on how we use your data.
- Right to Data Portability: Obtain a structured, machine-readable copy of your data to transfer to another service.
To exercise any of these rights, please contact our Data Protection Officer at the address provided in Section 10.
8. International Data Transfers
As a global platform, your information may be transferred to, and maintained on, servers located outside of your state, province, or country. By using C4PASS, you consent to this transfer. We ensure that appropriate safeguards and standard contractual clauses are in place with our infrastructure providers to maintain data security during cross-border transfers.
9. Changes to This Privacy Policy
C4 Corporation reserves the right to update this Privacy Policy periodically. If we make material changes affecting your rights, we will notify you via email or a prominent notice on your platform dashboard prior to the changes taking effect. Continued use of the platform constitutes acceptance of the revised policy.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact the platform owner: