Privacy Policy
Information we collect
To process a ticket purchase we collect your name, email address, payment details (handled by our PCI-compliant payment provider), and the state from which you purchase. For draws, we record the winning ticket code, the in-person draw details, witness information, and evidence submitted by the permit holder.
How we use your information
We use your information to process orders, deliver tickets, verify entries against the sealed roster, contact winners, comply with the raffle permit, and prevent fraud. We do not sell your personal information.
Retention
We retain order and ticket records for the period required by the raffle permit and applicable law. Roster hashes, draw results, and audit evidence are retained to support public verification and integrity.
Sharing
Data is shared with the nonprofit permit holder and beneficiary as needed to conduct the raffle, with our payment and email providers to fulfill orders and notifications, and as otherwise required by law.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us using the details on our Contact page.
Security
Access to administrative and auditor functions requires multi-factor authentication. Row level security protects your data, and the ticket roster is sealed with a SHA-256 hash before each draw.
This policy may be updated; the date of any change will be reflected here. For organization-specific data-processing details, please contact us.