Skip to content
VelvtVIP

Privacy Policy

Last updated: September 25, 2026

Who we are

VelvtVIP is a ticketing, membership, and marketing platform for bars and nightlife venues, available on the web at velvtvip.com and as a mobile app. VelvtVIP is operated by VelvtVIP LLC, 3801 Thornwood Circle, West Des Moines, IA. This policy covers both the website and the app.

Information we collect

When you buy or book. Your name, email address, and (optionally) your mobile number. We keep a record of each pass and table booking: the venue, pass type, night, table and seating time, party size, any pre-order selections or preference notes you enter, the amount paid, and its status (active, used, refunded, and so on). We also record each time a pass is scanned at the door. If you use a referral code, we record the referral and any credit earned.

Memberships and VIP. Your membership at each venue you buy from -- tier, visit count, and total spend at that venue -- plus any VIP subscription, the Stripe customer ID used to bill it, and any VIP perk you request.

Waitlists. If you join a waitlist for a sold-out night, we store the name, email, and optional phone number you enter.

Signing in. Patron accounts use a one-time code emailed to you instead of a password. We store the code and your email until it is used or expires (10 minutes after it is sent).

Text messages. If you opt in to texts, a record of that consent (details in the SMS Program section below). When a venue campaign is sent, we keep a delivery record with the number it was sent to and its delivery status.

In the app. Venues you favorite, and -- only if you allow notifications -- a push notification token for your device. Your sign-in token is kept in your device's secure storage.

Security and technical data. To prevent abuse, we record the IP address (and, for some forms, the email address) behind sign-in, sign-up, password-reset, checkout, and waitlist attempts. Our hosting and error-monitoring providers keep server logs, which can include IP addresses, browser or device details, the pages and actions requested, and details of what happened during a request.

Payment cards. Card details are entered on Stripe's checkout page and handled by Stripe. We never see or store your full card number.

Venue owners and staff. For venue accounts we collect the owner's name, email, and phone number; sign-in is handled through our database provider, Supabase. If an owner turns on two-factor authentication we store the authenticator secret in encrypted form and recovery codes only as hashes. Each owner sign-in session records its time, IP address, and browser so owners can review and end their sessions. Door-staff PINs are stored only as hashes. Staff email addresses and optional phone numbers are used for booking alerts.

Location

The website and the app can ask for your location to sort venues by distance. If you allow it, your location is used only on your device to sort and filter the venue list -- it is not sent to VelvtVIP or stored by us. If you decline, venues are sorted by city and name instead.

How we use your information

  • To process purchases, bookings, refunds, and VIP subscriptions.
  • To issue your passes, let venue staff check them at the door, and show your membership status.
  • To send purchase confirmations, table-booking reminders, sign-in codes, and other service emails.
  • To send text messages, only if you've opted in (see below), and app notifications, only if you've allowed them.
  • To apply referral credits.
  • To keep the platform secure, prevent fraud and abuse, fix errors, and respond to support requests.
  • To meet legal, tax, and accounting obligations and resolve disputes.

What venues can see

When you buy from or book with a venue, that venue's owner and staff can see your name and email address, your passes and bookings with them (including party size, pre-orders, and preference notes), your scan history, your membership tier and history with them, and your VIP subscription status with them. Staff receive an email alert with booking details when you book a table. Venues can't see your phone number, your activity at other venues, or your payment card. When you join a waitlist, the venue sees only how many people are waiting.

Your pass link works like a ticket: anyone who has it can open your pass, so share it only with people you trust. Your email is partly hidden on pass and receipt pages. The group share link for a table booking shows the venue, night, table, and your first name -- never your QR code, pass code, payment details, or email.

SMS Program

Your phone number is only used for marketing texts if you explicitly opt in by checking the SMS consent box -- at checkout, when joining a waitlist, or on our VIP texts sign-up page. The box is never pre-checked and consent is not required to purchase. When you opt in we record your phone number, the time, your IP address and browser, the page you opted in on, and the exact consent wording you agreed to. When you reply STOP or START, we record the keyword and the time. We keep these records so we can honor your choice accurately and show what you agreed to.

Consent is tracked per phone number, not per venue. One opt-in covers texts from VelvtVIP and from the venues where you're a member or VIP subscriber, and replying STOP to any program text opts your number out of all of them. All program texts are sent through VelvtVIP's messaging service; venues do not receive your number.

Mobile phone numbers and SMS opt-in data are not shared with or sold to third parties for marketing purposes.

We do not sell, rent, or share your mobile phone number or SMS opt-in data with third parties or affiliates for their marketing purposes. Our SMS delivery provider (Twilio) processes your number only to deliver messages on our behalf.

Message frequency varies.

Message and data rates may apply.

Reply STOP to any message to opt out at any time, or START to opt back in. Reply HELP for help, or contact us at support@velvtvip.com. See our SMS Terms for full program details.

Service providers

We rely on these providers to operate VelvtVIP. They process information on our behalf to provide their service to us:

  • Stripe -- payment processing, refunds, and payouts to venues
  • Twilio -- text message delivery
  • Supabase -- database, file storage (such as venue photos), and venue-owner sign-in
  • Resend -- email delivery
  • Vercel -- website and API hosting, including server logs
  • Sentry -- error monitoring, when enabled; error reports can include technical details about the request that failed
  • Expo, and through it Apple and Google push services -- app notification delivery, only if you allow notifications

If you add a pass or membership card to Apple Wallet, the card (your name, the venue, the pass or tier, and its code) is stored in Apple Wallet on your device. Directions links open Google Maps only when you tap them.

Cookies and similar technologies

We use only strictly necessary cookies, all of them sign-in sessions: vip_patron_session (patrons, up to 90 days), vip_staff_session (door staff, 8 hours), and vip_owner_session (venue owners, up to 30 days). Your browser's local storage keeps a few display preferences on your device, such as your text-size and contrast settings and which tips you've dismissed. We don't use advertising or analytics cookies, pixels, or third-party trackers.

Do Not Track and Global Privacy Control. Because we don't track you across other sites or sell or share your information for advertising, there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We treat everyone as if those signals were on.

We don't sell your information

VelvtVIP does not sell your personal information and does not share it for targeted (cross-context behavioral) advertising. We share it only with the venues you buy from, as described above, with our service providers, and where required by law or to protect our rights and the safety of others.

How long we keep information

We don't yet have fixed deletion schedules for most records, so here is what actually happens today:

  • Account details (name, email, phone): until you delete your account, when they are removed as described below.
  • Purchase, booking, scan, membership, refund, and subscription records: kept as business and transaction records for venues, accounting, tax, and dispute purposes, including after account deletion (no longer linked to your name, email, or phone).
  • SMS consent and opt-out records: kept as proof of consent and to keep honoring an opt-out, including after account deletion.
  • Text delivery records: kept as a record of what was sent.
  • Waitlist entries: not currently deleted automatically. Email us to have yours removed.
  • Sign-in codes: expire after 10 minutes.
  • Push notification tokens: until you delete your account. You can turn notifications off at any time in your device settings.
  • Security records (IP addresses, emails in abuse-prevention records, owner session records): kept for security and abuse prevention.
  • Server and error logs: kept by our hosting and monitoring providers under their retention settings.

Deleting your account

In the app, go to Profile and tap Delete Account. On the web, or if you don't have the app, email support@velvtvip.com from the address on your account and we'll do it for you. Deleting your account replaces your name and email with placeholders, removes your phone number from your profile, deletes your app notification tokens, and signs you out. As described above, purchase and booking records, SMS consent records, and text delivery records are kept. Deleting your account does not cancel an active VIP subscription -- email us to cancel it. To also opt your number out of texts, reply STOP to any program text.

How we protect your information

  • The website and API are served over HTTPS, so data is encrypted in transit.
  • Our database is accessed only by our own servers -- never directly from your browser or the app -- and row-level security is enabled on it to block direct public access.
  • Patrons sign in with one-time email codes rather than passwords. Sign-in cookies are HttpOnly and signed; the app keeps its sign-in token in your device's secure storage.
  • Door-staff PINs and owner recovery codes are stored only as hashes. Owners can turn on two-factor authentication, whose secrets are stored encrypted, and can review and end their active sessions.
  • Sign-in, checkout, and other sensitive forms are rate-limited.
  • Card details never touch our servers.

No system is perfectly secure, and we can't guarantee the security of information sent to us.

Your choices and rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing support@velvtvip.com from the email address on your account. Depending on where you live, your state's privacy law may give you additional rights, such as the right to appeal our decision on a request; you can make any such request the same way. We'll confirm the request comes from you before acting on it, and we won't treat you differently for making one.

You can also opt out of texts at any time by replying STOP, decline or turn off app notifications and location access in your device settings, and sign out to remove your session from a device.

Children's privacy

VelvtVIP is not directed to, and is not intended for use by, anyone under 18 years of age -- most participating venues serve alcohol and admit only patrons 21 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we've collected information from someone under 18, we will delete it. If you believe a minor has created an account or provided us information, contact us at support@velvtvip.com and we will investigate and remove it.

Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.

Contact us

VelvtVIP LLC
3801 Thornwood Circle, West Des Moines, IA
support@velvtvip.com