Privacy Policy
Last updated: July 27, 2026
1. Who We Are
Headliner is a multi-tenant, white-label event management platform operated by Knight Ops LLC, a limited liability company organized under the laws of the State of Arizona. When we say "Headliner," "we," "us," or "our" in this policy, we mean Knight Ops LLC.
This Privacy Policy describes how we collect, use, share, and protect personal data when you use the Headliner platform at headliner.space or any custom domain configured by an event host.
2. Data We Collect
2.1 Profile Information
When you create an account or register for an event, we collect information you provide directly, including:
- Name (first and last)
- Email address
- Phone number (optional)
- Company or organization name (optional)
- Social media links and profile information (optional)
- Profile photo (optional)
2.2 Event Activity
We collect data about your interactions with events on the Platform, including:
- Event registrations and ticket purchases
- Session attendance and check-ins
- Messages sent through event communication features
- Posts, comments, and interactions in event feeds and networking areas
- Matchmaking preferences and networking connections
2.3 Payment Information
Ticket payments are processed by Stripe. We do not store credit card numbers, CVVs, or full payment card details on our servers. Stripe handles payment data in accordance with PCI-DSS standards. We receive and store transaction records including amounts, dates, and confirmation identifiers.
2.4 Device and Browser Information
We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
2.5 Cookies
We use cookies and similar technologies. See Section 9 below for details on what cookies we use and how.
3. How We Use Your Data
3.1 Provide and Improve the Platform
We use your data to operate, maintain, and improve the Headliner platform, including authenticating your identity, displaying your profile to relevant parties, and ensuring the Platform functions correctly.
3.2 Process Registrations and Payments
We use your data to process event registrations, generate tickets, manage check-ins, and facilitate payment processing through Stripe.
3.3 Facilitate Attendee Matchmaking and Networking
When you participate in event networking features, we use your profile data and stated preferences to suggest relevant connections and facilitate introductions between attendees.
3.4 Transactional Emails
We send transactional emails necessary for the operation of the Platform, including registration confirmations, ticket receipts, event updates, schedule changes, and account-related notifications.
3.5 Communications and Marketing
We may use attendee contact information to send information about platform improvements, related events on the Headliner platform, and cross-promotional opportunities from event hosts using our platform. You can opt out of these communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at hello@knightops.biz.
3.6 Analytics and Platform Improvement
We analyze aggregated and anonymized usage data to understand how the Platform is used, identify trends, diagnose technical issues, and make improvements to features and performance.
4. Data Sharing
We share personal data only in the following circumstances:
- Event Hosts:When you register for an event, the host of that event receives your registration data (name, email, and any additional information you provided during registration). Hosts are the data controller for their attendees’ data and are responsible for their own use of it.
- Payment Processors: We share necessary transaction data with Stripeto process payments. Stripe’s use of your data is governed by Stripe’s Privacy Policy.
- Infrastructure Providers: We use Supabase (database and authentication), Vercel (hosting and edge delivery), and Resend (transactional email) to operate the Platform. These providers process data on our behalf under data processing agreements.
- Law Enforcement: We may disclose personal data if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
We do not sell personal data to third parties.
5. International Data Transfers
The Platform is operated from the United States. Your data is processed and stored in the US via our infrastructure providers (Supabase, Vercel).
- EU/UK/Swiss Users: Where we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to provide an adequate level of data protection.
- Other Jurisdictions: For users in other jurisdictions, data transfer is consent-based. By using the Platform, you consent to the transfer of your data to the United States for processing.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Request that we delete your personal data, subject to legal retention obligations.
- Data Portability: Request a machine-readable export of your data.
- Objection: Object to certain processing activities, including marketing communications.
To exercise any of these rights, contact us at hello@knightops.biz. We will respond within 30 days.
7. Children
The Platform is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us at hello@knightops.biz and we will promptly delete it.
8. Data Retention
- Account data is retained while your account is active, plus 90 days after account closure to allow for reactivation or data export requests.
- Event data (registrations, activity, communications) is retained for 2 years after the event concludes, to support post-event reporting and compliance.
- Deletion on request: You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to any legal obligations that require us to retain certain records.
9. Cookies
The Platform uses the following types of cookies:
- Essential Cookies: Required for authentication, session management, and core Platform functionality. These cannot be disabled without breaking the Platform.
- Optional Analytics Cookies: Used to understand how users interact with the Platform and to improve performance. These are loaded only with your consent where required by law.
We do not use advertising or tracking cookies. We do not participate in cross-site tracking networks.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will provide at least 30 days’ notice via email or through the Platform before the changes take effect.