Where is buyer data stored, and who can see it?
Buyer data is stored in the European Union with named sub-processors. The organizer owns their audience data and can export it in full.
Buyer data is stored in the European Union, and every party that holds it is named on the sub-processors page. The organizer owns their audience data and can export it in full at any time.
Payments run through Stripe Connect, contracted with Stripe Payments Europe, Limited in Ireland. Transactional messages go through Amazon SES with storage in Frankfurt, Germany. Sign-in runs with a European identity provider, and hosting sits with a European provider. The sub-processors page names each party, the data they hold, and the agreement behind it.
Buyers hold GDPR rights, among them access, correction, deletion, and objection. The organizer answers them for the sale. NightHall's help centre carries the organizer-side procedure for answering a privacy request. Consent for marketing is recorded separately with time, wording version, and channel, so a newsletter dispute ends in the log, not in an argument.
Export is a commitment, not a favour: full export of events, contacts, and history leaves with the organizer on switching, with no switching charge.
Sources
Sub-processor register (apps/site/data/site.json subProcessors). Stripe contracting entity for the Netherlands: Stripe Services Agreement (https://stripe.com/en-nl/legal/ssa, read 14 October 2026). Rights of data subjects: Regulation (EU) 2016/679, chapter III (https://eur-lex.europa.eu/eli/reg/2016/679/oj). Privacy request procedure (apps/site/content/help/en/answer-privacy-request.md). Switching terms (.litespec/intent/money/pricing.md rule requirement/three-plan-pricing.switching-terms).
Applies to: the Netherlands and the EU, checked 14 October 2026. NightHall is a data controller for the purposes it chooses; the organizer answers their buyers. Check with your adviser who is the controller for each use of the data.
Applies to: Netherlands and EU, checked 14 October 2026