How Ticket Falcon protects your attendees' payment and personal data
Ticket Falcon takes the security of attendee payment data and personal information seriously. Here is an overview of the protections in place.
Payment processing security
Ticket Falcon never stores card numbers. All payments are processed directly through Stripe, one of the world's leading payment processors and a PCI Service Provider Level 1 — the highest level of certification available in the payments industry.
When an attendee enters their card details at checkout, that information is transmitted directly to Stripe's secure servers using industry-standard TLS encryption. Stripe processes and stores the card data; Ticket Falcon only receives a tokenized reference to the transaction.
Your Stripe account
Event organizers receive ticket revenue directly in their own Stripe account. Ticket Falcon does not hold funds on behalf of organizers. Your Stripe account is governed by Stripe's own security practices and terms, including:
- Fraud detection via Stripe Radar
- Automated card verification checks (CVC, AVS)
- Two-factor authentication for your Stripe dashboard
For information on securing your Stripe account, visit stripe.com/docs/security.
Attendee personal data
Ticket Falcon collects only the information needed to process orders and support event check-in (name, email, phone, and any survey answers the organizer has configured). This information is:
- Stored securely on Ticket Falcon's servers
- Accessible only to the event organizer and authorized team members
- Never sold or shared with third parties for marketing purposes
Organizer account security
To keep your Ticket Falcon account secure:
- Use a strong, unique password for your Ticket Falcon account.
- Do not share your account password with team members. Instead, use the Ticket Falcon Teams feature to grant team members their own access with appropriate permissions.
- If you suspect unauthorized access, change your password immediately and review your team members list.
iFrame embedding restriction
Ticket Falcon event pages cannot be embedded in an iFrame on third-party websites. This protection prevents clickjacking attacks, where a malicious site could overlay invisible elements over the ticket checkout to steal payment or personal information. For more details, see: Why embedding TicketFalcon.com via an iFrame is disallowed