Legal

ShoSoft Privacy Policy

v.1 • Sep 30, 2026

SHOSOFT PRIVACY POLICY

Effective Date: September 30, 2026

ShoSoft Inc. (“ShoSoft,” “we,” “us,” or “our”) provides software and related services that help event venues manage their operations, including bookings, events, contacts, contracts, calendars, staffing, inventory, ticketing, exhibitors, invoicing, payments, communications, and related business activities.

This Privacy Policy explains how ShoSoft collects, uses, discloses, and otherwise processes personal information in connection with the ShoSoft website located at https://shosoft.ai/; the ShoSoft software platform, and related services; sales, demonstrations, customer support, marketing, and other communications with ShoSoft; and other online and offline interactions with ShoSoft (collectively, the “Services”).

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. Personal information does not include information that is aggregated, deidentified, or otherwise excluded from the definition of personal information under applicable law.

Scope of This Privacy Policy

This Privacy Policy describes how ShoSoft processes Personal Information when ShoSoft acts as a controller, business, or similar responsible entity, including when ShoSoft determines the purposes and means of processing Personal Information collected through its website, sales process, customer administration, marketing activities, support operations, and other business activities. This Privacy Policy also provides information about how ShoSoft processes Customer Data (defined below) on behalf of customers as a processor, service provider, or contractor.

ShoSoft customers, such as event venues and event operators, may use the Services to collect or process Personal Information relating to their employees, contractors, clients, event organizers, attendees, ticket purchasers, exhibitors, vendors, and other individuals. We refer to Personal Information submitted to or processed through our Service as “Customer Data.” For Customer Data, the customer generally determines the purposes and means of processing and acts as the controller, business, or similar responsible entity. ShoSoft generally processes Customer Data on the customer’s behalf as a processor, service provider, or contractor.

ShoSoft’s processing of Customer Data is governed by applicable customer agreement and, where applicable, a data processing addendum. The customer’s privacy policy governs the customer’s collection and use of Customer Data.

This Privacy Policy does not apply to the privacy practices of ShoSoft customers or other third parties that ShoSoft does not control.

Personal Information We Collect

A. Information You Provide Directly

We may collect information that you provide when you:

request or schedule a demonstration;
create or administer an account;
subscribe to communications;
contact sales or customer support;
enter into an agreement with ShoSoft;
submit information directly to ShoSoft through the ShoSoft website, advertising or lead forms, sales, onboarding, training, support, feedback, or other communications;
purchase or use paid Services;
participate in a survey, promotion, webinar, or event; or
otherwise communicate with us.

This information may include:

name;
business email address;
telephone number;
job title, employer, and business contact information;
username, password, authentication credentials, and account preferences;
billing contact information;
communications, inquiries, feedback, and support requests;
information provided during sales calls, demonstrations, onboarding, or training;
documents, files, images, recordings, and other content you provide directly to ShoSoft in connection with sales, onboarding, training, support, feedback, or other direct communications with ShoSoft; and
any other information you choose to provide.

B. Customer and Platform Data

Customers and authorized users may submit or generate information through the Services, including:

venue, event, booking, and calendar information;
client, organizer, attendee, guest, or ticket purchaser information;
employee, contractor, and workforce scheduling information;
exhibitor, sponsor, vendor, and service-provider information;
contracts, proposals, invoices, payment records, and transaction information;
ticketing, guestlist, registration, and check-in information;
inventory, equipment, space, and resource information;
tasks, project records, notes, internal communications, and activity histories;
information imported from customer systems or third-party integrations; and
prompts, instructions, inputs, outputs, summaries, recommendations, or other content associated with AI-enabled features.

This information is generally processed on behalf of the applicable ShoSoft customer.

C. Payment Information

ShoSoft uses Stripe, Inc. and its affiliates (“Stripe”) to process payments made through or in connection with the Services. When you submit payment information, that information may be provided directly to Stripe and is processed in accordance with Stripe’s privacy practices.

ShoSoft generally does not directly collect or store complete payment-card numbers or card security codes. ShoSoft may receive limited payment and transaction information from Stripe, including:

billing name and address;
payment status;
transaction amount and date;
payment method type;
the last four digits and expiration date of a payment card;
Stripe customer, payment, or transaction identifiers; and
information concerning refunds, disputes, chargebacks, or suspected fraud.

We use this information to process and administer payments, maintain transaction records, provide customer support, detect and prevent fraud, and comply with legal, tax, accounting, and contractual obligations.

D. Information Collected Automatically

When you access or use the Services, we and our service providers may automatically collect information such as:

Internet Protocol address;
browser type and version;
device type, operating system, and device identifiers;
approximate location derived from an IP address;
referring and exit pages;
pages, screens, and features viewed or used;
dates and times of access;
links clicked and actions taken;
login, audit, and activity records;
error reports, crash data, and performance information
cookie identifiers, advertising identifiers, campaign identifiers, and similar online identifiers; and
conversion, attribution, and advertising-interaction information.

ShoSoft’s role with respect to automatically collected information depends on the context and purpose of the processing. ShoSoft may process account, authentication, billing, security, diagnostic, performance, and service-usage information as a controller or business where ShoSoft determines the purposes and means of processing that information for account administration, security, fraud prevention, service performance, analytics, and improvement of the Services. To the extent automatically collected information constitutes Customer Data or is processed solely to provide customer-selected functionality, ShoSoft processes the information on behalf of the applicable customer as a processor, service provider, or contractor.

E. Information from Other Sources

We may receive personal information from:

ShoSoft customers and authorized users;
integrations selected or enabled by a customer;
Stripe and other payment-related service providers;
scheduling, communications, and customer-support providers;
business partners and referral sources;
publicly available sources;
marketing, advertising, lead-generation, visitor-identification, sales-intelligence, customer relationship management, and data providers; and
social media or professional networking platforms.

We may combine information received from these sources with information collected through the Services, including to identify or enrich business contacts, evaluate interest in the Services, prioritize prospective customers, and personalize business outreach.

Cookies and Similar Technologies

ShoSoft and its service providers may use cookies, pixels, tags, local storage, software development kits, tags, scripts, advertising technologies, visitor-identification technologies, and similar technologies to operate the Services, collect information about their use, recognize or infer visitors and organizations, measure marketing activity, and provide content, messages, or advertisements that may be relevant to individuals or organizations.

Strictly Necessary Technologies

These technologies are needed to provide core functionality, authenticate users, maintain sessions, remember privacy choices, prevent fraud, and protect the Services.

Functional Technologies

These technologies remember settings and preferences and provide enhanced features.

Analytics Technologies

These technologies help us understand how visitors and users interact with the Services, measure performance, identify errors, and improve functionality.

Advertising and Marketing Technologies

If used, these technologies may support contextual advertising, conversion tracking, campaign measurement, attribution retargeting, audience matching, and other interest-based or targeted advertising. Advertising platforms may also use signals available within their own systems to optimize ad delivery, automated bidding, and campaign performance.

Visitor identification and sales intelligence technologies may help ShoSoft identify or infer companies and, where available and legally permitted, business contacts associated with visits to the ShoSoft website; understand pages viewed and engagement; enrich business contract information; prioritize prospective customers; and support sales follow-up and targeted email outreach.

You may be able to manage cookies through a cookie-preference tool made available on our website or through your browser settings. Blocking certain cookies may affect the availability or operation of portions of the Services.

Some browsers and devices allow users to send privacy preference signals, such as the Global Privacy Control. Where required by applicable law, ShoSoft will process legally recognized opt-out preference signals as requests to opt out of the sale or sharing of personal information or the use of personal information for targeted advertising.

Traditional “Do Not Track” browser signals are not interpreted consistently across the industry. Except where required by applicable law, the Services may not respond to such signals.

How We Use Personal Information

A. Information ShoSoft Processes for Its Own Purposes

When ShoSoft acts as a controller or business, ShoSoft may use personal information for the following purposes:

provide, operate, maintain, and support the Services;
create, authenticate, manage, and secure accounts;
process transactions and administer customer relationships;
provide demonstrations, onboarding, training, and customer support;
configure and personalize the Services;
communicate about accounts, transactions, updates, security, support, and service changes;
respond to inquiries, requests, and feedback;
send newsletters, product information, invitations, and other marketing communications;
identify, enrich, evaluate, and prioritize prospective customers based on website activity, engagement, business contact information, and other permitted sales intelligence data, and personalize sales outreach;
plan, deliver, measure, attribute, and optimize contextual and interested-based advertising, including conversion tracking, retargeting, audience matching, campaign analytics, and automated bidding or optimization features;
understand how the Services are accessed and used;
analyze performance, troubleshoot problems, and develop or improve features;
detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
enforce our agreements and protect ShoSoft, our customers, users, and others;
comply with legal, regulatory, tax, accounting, and contractual obligations;
establish, exercise, or defend legal claims;
conduct corporate transactions, audits, due diligence, and internal administration; and
carry out other purposes disclosed at the time information is collected or with your consent.

We may use aggregated or deidentified information for lawful purposes, including analytics, benchmarking, product development, and business planning. We will not attempt to reidentify deidentified information except as permitted by law.

B. Service Providers and Contractors

When ShoSoft acts as a processor, service provider, or contractor, ShoSoft may process Customer Data to:

provide, host, operate, maintain, configure, secure and support the Services;
perform functions, transactions, communications, and integrations selected or enabled by the customer;
follow the customer’s documented instructions;
provide customer support and address technical issues;
configure and personalize the Services;
detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
maintain and improve the security, reliability, and functionality of the Services;
comply with applicable legal obligations; and
otherwise process Customer Data as permitted by the applicable customer agreement, data processing addendum, or applicable law.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

A. Service Providers and Contractors

We may disclose information to companies that provide services on our behalf, including:

cloud hosting, enterprise productivity, data storage, document management, and file sharing services;
database and infrastructure services;
security, fraud prevention, and authentication;
payment processing, billing, fraud prevention, and transaction administration, including through Stripe;
website hosting and content delivery;
analytics, conversion measurement, and performance monitoring;
email, messaging, and communications;
customer relationship management, marketing automation, visitor identification, lead generation, and sales intelligence services;
scheduling, sales, and customer support;
electronic signatures;
advertising agencies, marketing consultants, and other professional consulting; and
other operational services.

These Service providers and contractors are permitted to process personal information only for specified purposes on ShoSoft’s behalf and subject to applicable contractual obligations. This paragraph does not describe third-party advertising platforms to the extent they process information under their own terms or for purposes that make them a third party or independent controller under applicable law.

B. Customers and Authorized Users

Information submitted to a customer account may be available to the customer and its administrators and authorized users. Account administrators may be able to access, modify, export, restrict, or delete information associated with their organization’s account.

C. Integrations and Customer-Directed Recipients

We may disclose information to third-party applications, integrations, payment providers, or other services when a customer or authorized user directs us to do so or enables an integration. The third party’s privacy practices govern its subsequent processing of the information.

D. Advertising, Analytics, and Marketing Platforms

ShoSoft may disclose Personal Information that it processes for its own business purposes to advertising, analytics, and marketing platforms to deliver contextual or interest-based advertising, measure conversions and campaign effectiveness, create retargeting or audience matching segments and optimize campaigns, identifiers such as email address or telephone numbers that have been hashed or otherwise transformed before transmission.

Depending on the platform feature, and legal context, a platform may process information as a service provider or processor on ShoSoft’s behalf, or under its own terms as a third party or independent controller. For certain automated bidding or optimization features, the platform may use signals available within its own systems that are not disclosed to ShoSoft.

E. Business and Referral Partners

We may disclose limited business contact, customer-relationship, prospect, referral-source, and similar information that ShoSoft processes as a controller or business to partners involved in referrals, joint events, demonstrations, promotions, or other business relationships, where permitted by law. ShoSoft does not disclose Customer Data to business or referral partners for their independent marketing purposes.

When ShoSoft processes Customer Data on behalf of a customer, ShoSoft discloses Customer Data only to service providers or subprocessors used to provide the Services, to the customer and its authorized users, through customer-selected integrations or instructions, or as otherwise permitted by the applicable customer agreement, data processing addendum, or applicable law.

F. Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, financial institutions, and other professional advisers when reasonably necessary for the services they provide.

G. Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

comply with a law, regulation, subpoena, court order, or governmental request;
enforce our agreements or policies;
investigate fraud, security incidents, abuse, or unlawful activity;
protect the rights, property, or safety of ShoSoft, our customers, users, or others; or
establish, exercise, or defend legal claims.

H. Corporate Transactions

Personal information may be disclosed or transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction or related due diligence.

We may disclose information for other purposes with your consent or at your direction.

ShoSoft does not sell personal information in exchange for money.

ShoSoft does not use Personal Information contained in Customer Data concerning a customer’s attendees, guests, ticket purchases, employees, contractors, exhibitors, vendors, or other individuals whose information is submitted to the Services by or on behalf of a customer for ShoSoft’s own advertising, audience matching, retargeting, or cross-contextual advertising, and ShoSoft does not disclose Customer Data to third parties for such third parties’ independent marketing purposes. This restriction does not apply to Personal Information that ShoSoft separately collects or maintains in connection with its own business relationship with a customer, customer representative, prospective customer, or other business contact.

ShoSoft may use Personal Information that it processes as a controller or business, including information related to ShoSoft’s own website visitors, prospective customers, customers, customer representatives, and marketing contacts, for ShoSoft’s advertising, analytics, and marketing activities described in this Privacy Policy.

For audience matching or similar advertising features, ShoSoft may provide approved advertising platforms with first party identifiers, such as email addresses or telephone numbers, which may be hashed or otherwise transformed before transmission. ShoSoft limits such use to Personal Information that ShoSoft collects or maintains for its own business, sales, marketing, or customer relationship purposes. ShoSoft does not use Personal Information concerning a customer’s attendees, guests, ticket purchasers, employees, contractors, exhibitors, vendors, or similar individuals contained in Customer Data for these activities.

Depending on the technology, platform configuration, and applicable law, disclosures of Personal Information to analytics or advertising platforms could be considered a “sale,” or “sharing” for cross-contextual behavioral advertising, or processing for “targeted advertising” even when no money is exchanged. Where applicable, you may opt out through the cookie-preference tool on our website, by using a legally recognized opt-out preference signal, or by contacting us as described below.

As described in the “Cookies and Similar Technologies” section, ShoSoft may use advertising, analytics, visitor identification and similar technologies for marketing and related purposes. Depending on the technology, configuration, and applicable law, certain disclosures associated with these activities may be considered a “sale,” “sharing” for cross-context behavioral advertising, or processing for “targeted advertising.”

ShoSoft does not knowingly sell or share personal information of individuals under 16 years of age.

Data Retention

ShoSoft retains Personal Information that is processes as a controller or business for as long as reasonably necessary to provide our Services, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legal rights.

ShoSoft retains Customer Data in accordance with the applicable customer’s instructions and the applicable customer agreement or data processing addendum, subject to reasonable backup, security, legal compliance, and deletion processes. The customer is responsible for establishing appropriate retention periods for Customer Data.

When Personal Information is no longer required for the applicable purposes, ShoSoft will delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

Data Security

ShoSoft uses reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, use, alteration, disclosure, or destruction.

These measures may include access controls, authentication, encryption, monitoring, logging, employee training, vendor-management practices, and incident-response procedures.

No method of transmission over the Internet or method of electronic storage is completely secure. ShoSoft cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and promptly notifying ShoSoft of suspected unauthorized access.

Your Choices

Account Information

You may be able to review or update certain account information through the Services. Customer account administrators may also manage information associated with their organization.

Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe link in the message or contacting us. You may continue to receive transactional, security, support, or other non-promotional communications.

Cookies

You may manage certain cookies through our cookie-preference tool or your browser settings. Disabling cookies may affect the functionality of the Services.

Customer-Controlled Data

If your Personal Information was submitted to ShoSoft by a venue or another customer, contact that customer to exercise your rights. If you contact ShoSoft directly, we may refer your request to the relevant customer.

U.S. State Privacy Rights

Depending on where you reside, whether an applicable privacy law applies to ShoSoft, and subject to applicable exceptions, you may have the right to:

confirm whether we process your Personal Information;
access or obtain a copy of Personal Information;
request correction of inaccurate Personal Information;
request deletion of Personal Information;
obtain certain information in a portable format;
opt out of the sale of Personal Information;
opt out of the sharing of Personal Information for cross-context behavioral advertising;
opt out of targeted advertising;
opt out of certain profiling or automated decision-making activities;
limit certain uses or disclosures of sensitive Personal Information;
withdraw consent where processing is based on consent; and
appeal a decision concerning a privacy request.

You also have the right not to receive discriminatory treatment for exercising an applicable privacy right.

Submitting a Request

You may submit a privacy request by emailing notice@shosoft.ai. If ShoSoft later provides a dedicated privacy request form or toll-free number, those methods may also be listed here.

Please describe the right you wish to exercise and provide information reasonably necessary for us to locate relevant records.

We may verify your identity by requesting information that reasonably matches information in our records. The verification process will depend on the nature and sensitivity of the request. We will use information provided for verification only to process and maintain records of the request.

If we cannot verify your identity, we may be unable to fulfill the request.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require proof that the agent has authority to act for you and may require you to verify your identity directly with us, unless applicable law provides otherwise.

Appeals

If we deny a request and applicable law provides a right to appeal, you may appeal by replying to our decision or emailing notice@shosoft.ai with the subject line “Privacy Request Appeal.”

International Data Transfers

ShoSoft is based in the United States. Personal information may be processed and stored in the United States and other countries where ShoSoft or its service providers operate.

These countries may have data-protection laws that differ from those in your jurisdiction. Where required, ShoSoft uses appropriate safeguards for international transfers, such as contractual protections or other legally recognized transfer mechanisms.

Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, applications, communications tools, social media platforms, and other services. ShoSoft does not control the privacy or security practices of third parties. This Privacy Policy does not apply to information processed independently by those third parties. You should review their privacy policies before providing information or enabling an integration.

Children’s Privacy

The Services are intended primarily for businesses and authorized business users. ShoSoft’s website and Services are not directed to children under 13, and ShoSoft does not knowingly collect personal information directly from children under 13 without legally sufficient authorization.

ShoSoft customers may use the Services to manage events attended by minors or to process information about ticket purchasers, attendees, or guests. In those circumstances, the customer is responsible for determining the legal basis for collection and providing any required notices or obtaining any required consents.

If you believe a child has provided personal information directly to ShoSoft in violation of applicable law, contact us using the information below.

Changes to This Privacy Policy

ShoSoft may update this Privacy Policy periodically to reflect changes in our Services, practices, technology, or legal obligations.

When we update the Privacy Policy, we will revise the “Effective” date. If changes are material, we may provide additional notice through the Services, by email, or by another appropriate method.