Legal information
Privacy policy
Last updated: October 3, 2026
This policy explains what personal data we process when you visit sweescape.com, when we contact you and when you use the Sweescape application (SweeBadge, SweeScan, SweeAnalytics, SweeInvoice and the AI assistant), and when you connect Sweescape to ChatGPT or Claude.
Who is responsible for your data?
SWEESCAPE, a French SAS with a share capital of €1,000, Immeuble Le Centaure, Route de Carnon, 34970 Lattes, France, registered with the Montpellier Trade and Companies Register under number 991 518 143.
For any question about your data or to exercise your rights: [email protected].
Two very different situations
- You visit our website, we contact you, or you use Sweescape as an organizer. We decide how your data is used: we are the data controller. This is the main subject of this page.
- You buy a ticket, receive an invitation or an email from an organizer who uses Sweescape. The organizer decides how your data is used; we process it on their behalf, as a data processor. See You are attending an event.
The data we process, and why
| Why | What data | Legal basis | How long |
|---|---|---|---|
| Measure website traffic and sign-ups to the application | Pages viewed, clicks, device type, browser, approximate country, technical identifier. On the website, a recording of your visit with typed fields masked. In the application, only the sign-up and account confirmation steps | Your consent | Cookies: 1 year. Data: 25 months at most |
| Measure our ads and make them more relevant | Pages viewed on the website and on the sign-up page, advertising identifier. At sign-up: email, first name and last name, turned into an unreadable fingerprint (hashing) before being sent to Meta | Your consent | Cookies: 3 months |
| Know which companies visit the website | IP address and pages viewed, matched with the company name | Your consent | 3 years after the last contact |
| Reach out to professionals | Business name, email and phone, company, job title, history of our exchanges | Our legitimate interest in presenting our offers to event professionals | 3 years after the last contact |
| Organize a demo | Information entered when booking the meeting | Pre-contractual measures | 3 years after the last contact |
| Create and manage your account | First and last name, email, password (stored with irreversible encryption), photo, company, settings | Performance of the contract | Lifetime of the account, then 30 days after it is closed |
| Manage your subscription, invoicing and payments | Billing details, invoice and payment history. Your card number is processed by Stripe: we never have access to it | Performance of the contract and legal obligations | 10 years for accounting records |
| Send you service emails and text messages | Email, phone | Performance of the contract | Lifetime of the account |
| Answer through the AI assistant | Your questions and the account information needed to answer them | Performance of the contract | Lifetime of the account |
| Let you use Sweescape from ChatGPT or Claude | Access keys, your requests and the workspace data they concern. See The Sweescape connector for ChatGPT and Claude | Performance of the contract | From 60 seconds to 30 days for access keys |
| Support you | Your messages and our replies | Performance of the contract | 3 years after the last exchange |
| Keep the service secure | Connection logs, IP address | Our legitimate interest in protecting the service | 12 months |
You never have to accept measurement or advertising cookies to use the website or the application.
Who receives your data?
Only the SWEESCAPE staff who need it have access, along with our service providers, strictly for the task entrusted to them. We never sell your data.
| Provider | Task | Country |
|---|---|---|
| Hetzner Online | Server hosting | Germany |
| Scaleway | Daily database backups | France |
| Microsoft Azure | File storage, email delivery, AI assistant (Azure OpenAI, your data is not used to train models) | European Union |
| Sweego | Email and text message delivery | France |
| Stripe | Payments and subscriptions | Ireland, United States |
| Cloudflare | Custom domains for ticketing pages, network security | United States, global network |
| PostHog | Audience measurement, with your consent | European Union |
| Meta Platforms Ireland | Advertising, with your consent | Ireland, United States |
| lemlist | Outreach, identification of visiting companies with your consent | France |
| Calendly | Meeting booking | United States |
| Google, Apple | Tickets added to Google Wallet or Apple Wallet, only when the attendee asks for it | United States |
| Canva, Tally | Integrations, only if the organizer turns them on | Australia, Belgium |
| OpenAI, Anthropic | ChatGPT or Claude, only if you connect the Sweescape connector to them | United States |
We may also disclose data to public authorities when the law requires it.
Transfers outside the European Union
Some providers may process data outside the European Union, particularly in the United States. These transfers are covered either by the European Commission’s adequacy decision (EU–US Data Privacy Framework, for certified companies) or by the European Commission’s standard contractual clauses.
The Sweescape connector for ChatGPT and Claude
You can connect your Sweescape account to ChatGPT or Claude. The AI assistant then uses the Sweescape connector (mcp.sweescape.com) to read and prepare data in your own workspace, at your request. This section describes what happens when you use it. The connector is only for organizers: it gives no access to the personal data of ticket buyers and attendees.
The data the connector processes
- Your sign-in. When you connect, you sign in with your Sweescape email and password. They are checked against your Sweescape account and are not stored by the connector.
- Access keys. The connector then issues access keys (tokens) tied to your user identifier, so that the assistant can act on your behalf without asking for your password again. It also records the technical registration of the assistant (its name and return addresses), which contains no personal data.
- What you ask and what you get back. Each action sends to the connector the information needed to perform it, and returns the result to the assistant:
- your events: name, type, dates, venue, tax rate, number of participants;
- your ticket types: name, price, quota, number sold and remaining, visibility;
- your discount and access codes, with their scope and usage;
- your ticketing pages and their content, your custom domains and their DNS status;
- your automations and campaigns: name, timing, sender, subject and content;
- your audiences: name, type, size and column names, never the contacts they hold;
- aggregated statistics: sales, attendance and check-in totals;
- your account: plan, brand allowance, text message credits, connected Stripe accounts and verified sending domains;
- your extensions: their manifest and the files you upload.
- Technical logs, needed to run and secure the service.
What you type in the conversation may contain other information; the connector only uses it to perform the action you asked for.
What it is used for
Only to let you consult and prepare your workspace from the assistant: answer your questions about your events, sales and statistics, and create or edit events, ticket types, codes, ticketing page drafts, custom domains, automation and campaign drafts and extensions. The connector never publishes a ticketing page, never sends a campaign, never activates an automation, never installs an extension and never deletes anything: those actions stay in your hands in Sweescape. We do not use this data for advertising, profiling or training AI models. Legal basis: performance of the contract.
Who receives it
- The assistant you chose. Your requests and the results of each action are processed by OpenAI (ChatGPT) or Anthropic (Claude), under their own privacy policies, because that is how the assistant answers you. OpenAI and Anthropic are independent controllers of the conversations held on their services.
- Our hosting and service providers, under the conditions described in Who receives your data?: the connector runs on our servers at Hetzner in Germany, and a custom domain that you connect is declared to Cloudflare.
The connector talks only to the Sweescape API: it does not send your data to any other service.
How long we keep it
| Data | How long |
|---|---|
| Your password | Never stored by the connector |
| Single-use authorization code | 60 seconds |
| Access key | 1 hour |
| Renewal key | 30 days, replaced each time it is used |
| Technical registration of the assistant | Until it is removed, no personal data |
| Data created or edited through the connector | Kept in your Sweescape account, as long as the account exists |
| Technical logs | 12 months |
The connector keeps no copy of your workspace data: each request is passed to Sweescape and the answer is returned to the assistant.
Your controls
- Disconnect at any time from the settings of your assistant (apps or connectors section). The connector can then no longer access your account, and its access keys expire within the periods above.
- Confirm before changes. The actions that replace existing content are flagged as such to ChatGPT and Claude, so that the assistant asks for your confirmation before running them.
- Review, edit or delete in Sweescape anything created through the connector. Nothing it creates reaches buyers on its own: a ticketing page stays unpublished until you publish it, and a code is only used once you share it.
- Exercise your rights (access, correction, deletion…) as described in Your rights, by writing to [email protected].
You are attending an event
When you buy a ticket or reply to an invitation on a ticketing page powered by Sweescape, the event organizer is responsible for your data. We process it on their behalf and according to their instructions:
- the information the organizer asks for: at least email, first name and last name, plus any fields they add;
- your order and your tickets; the payment goes directly to the organizer’s Stripe account;
- the scan of your ticket at the entrance;
- the emails and text messages the organizer sends you.
On ticketing pages, we measure traffic without cookies: operating system, browser, device type, country and date of visit. If the organizer adds their own measurement or advertising tools (Meta pixel, TikTok, Google…), a banner asks for your consent before they are turned on. The organizer is responsible for these tools.
To exercise your rights over this data, contact the organizer, whose details appear on their ticketing page and in their emails. If you write to us, we will forward your request to them.
Your rights
At any time, you can:
- access your data and get a copy of it;
- have it corrected if it is inaccurate;
- have it deleted, unless we must keep it to meet a legal obligation;
- restrict its use;
- object to its use, including for outreach, without having to give a reason;
- receive it in a reusable format (portability);
- withdraw your consent, for example with the “Manage cookies” button at the bottom of the page;
- give instructions about what happens to your data after your death.
Write to us at [email protected]. We reply within one month. Every outreach email also contains a link to stop receiving them.
If you believe your rights are not being respected, you can file a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr, or with the authority of your country.
Security
Exchanges with the website and the application are encrypted (HTTPS). Passwords are stored with irreversible encryption. Data is hosted on our dedicated servers in Germany, with a daily backup in France, and only the people who need it have access. Payments are processed by Stripe, which is PCI-DSS Level 1 certified.
Changes
We may update this policy. The date of the last update appears at the top of the page. If we make a significant change, we let our customers know by email.