Lasso — Privacy Policy

Effective date: June 18, 2026

Last updated: June 18, 2026

Lasso ("Lasso," "we," "us," or "our") is operated by Ganeden Inc., a corporation based in Ontario, Canada. This Privacy Policy explains what information we collect when you use our website at joinlasso.co (the "Service"), how we use it, who we share it with, and the choices you have.

Lasso is a discovery and price-comparison service for live music and live sports events. We do not sell tickets. When you choose to buy, we link you out to third-party ticket marketplaces. By using the Service, you agree to this Privacy Policy.

1. Information we collect

Information you give us directly:

Account information. When you create an account, we collect your email address. If you sign in with Google, we receive your name, email address, and basic Google profile information (we do not receive your Google password).
Newsletter signup. If you subscribe to The Drop, we collect your email address and, where applicable, a referral code.
Price alerts. When you set a price alert, we store the event, your target price, and the email address we should notify.
Saved events and "I'm Going." We store the events you bookmark or mark yourself as attending.
Groups and messages. If you create or join a group to coordinate with friends, we store your group membership and any messages you send within the group.
Interest register. If you tell us you'd pay a certain price for a specific artist or team in a specific city, we store that preference.
Communications. If you contact us by email, we keep a record of that correspondence.

Information we collect automatically:

Usage and click data. When you click an outbound link to a ticket marketplace, we log the event and the link source so we can measure interest and account for affiliate referrals. We collect standard log and device information (such as browser type, pages viewed, and approximate location derived from your IP address) through our analytics provider.
Cookies and similar technologies. We and our providers use cookies and local storage to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings; disabling them may affect parts of the Service.

We do not collect payment card information. Lasso never processes ticket purchases — checkout happens entirely on the third-party marketplace you choose.

2. How we use your information

We use the information we collect to:

Provide and operate the Service, including authentication and saved preferences;
Send price-alert notifications you have requested;
Send The Drop newsletter and product updates you have opted into;
Measure interest, demand, and aggregate trends across events;
Account for affiliate referrals when you click out to a ticket marketplace;
Improve, secure, and troubleshoot the Service;
Comply with legal obligations and enforce our Terms of Service.

Aggregated and de-identified data. We may create aggregated or de-identified insights about demand and pricing trends (for example, how many users set an alert for an event) and use or share these in a form that does not identify you.

3. How we share information

We do not sell your personal information. We share information only as described below:

Service providers. We use trusted third parties to run Lasso, including: Supabase (database, authentication, and hosting of backend functions), Lovable / Vercel (website hosting), Resend (email delivery for alerts and account email), our newsletter provider, Google (sign-in), and a product-analytics provider. These providers process data on our behalf under contract.
Ticket marketplaces and affiliate networks. When you click an outbound "Get Tickets" link, you are directed to a third-party marketplace (such as Ticketmaster, TicketNetwork, MegaSeats, or TicketSqueeze), sometimes through an affiliate network (such as Travelpayouts or Impact.com). These parties may set their own cookies and collect information under their own privacy policies. We may receive a commission on resulting purchases. See our affiliate disclosure in Section 8.
Event data sources. Event, venue, and pricing information shown on Lasso is sourced from third-party APIs (including Ticketmaster, SeatGeek, and TicketSqueeze). This is inbound data and does not involve sharing your personal information.
Legal and safety. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, property, or safety of Lasso, our users, or others.
Business transfers. If Lasso is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

4. Where your data is stored

Lasso's backend is hosted in the United States (Supabase, US-East region). If you access the Service from Canada, the European Economic Area, or elsewhere, your information will be transferred to and processed in the United States and other countries that may have different data-protection laws than your own. We rely on appropriate safeguards for these transfers.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. We retain newsletter and alert data until you unsubscribe or delete it, and we may retain certain records as required for legal, accounting, or security purposes. When information is no longer needed, we delete or de-identify it.

6. Your choices and rights

Access, correction, and deletion. You can request a copy of your personal information, ask us to correct it, or ask us to delete your account and associated data by emailing us at the address in Section 11.
Email preferences. Every newsletter includes an unsubscribe link. You can turn off or delete individual price alerts at any time from the Service.
Cookies. You can manage cookies through your browser settings.

Depending on where you live (for example, under Canada's PIPEDA, the EU/UK GDPR, or U.S. state privacy laws such as the CCPA), you may have additional rights, including the right to access, correct, delete, or port your data, and the right to object to or restrict certain processing. We do not sell personal information or use it for cross-context behavioral advertising. To exercise any right, contact us using the details in Section 11.

7. Children's privacy

Lasso is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Affiliate disclosure

Lasso participates in affiliate programs. When you click certain outbound links and make a purchase on a third-party ticket marketplace, we may earn a commission at no additional cost to you. Affiliate relationships do not influence which events we show; our goal is to help you find the right tickets, not to push any single seller. The prices and availability shown on Lasso are provided for comparison and may differ from the final price on the marketplace.

9. Security

We use reasonable technical and organizational measures — including encryption in transit, access controls, and row-level security on our database — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the Service. Your continued use of Lasso after changes take effect means you accept the revised policy.

11. Contact us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

Ganeden Inc. (operating as Lasso)
Ontario, Canada
Email: support@joinlasso.co