Privacy policy

Who we are

Orson is scheduling, ticketing, box-office and customer communications software for independent cinemas, provided by Orson Cinema Software, LLC ("Orson", "we", "us"), 100 Example Street, Boston, MA 02110.

This policy explains what information Orson handles, why, who it's shared with, and the choices you have. It covers two groups of people:

• Cinema staff who sign in to Orson to run their cinema.
• Cinema customers who buy tickets from, email, or message a cinema that uses Orson.

For cinema customers, the cinema decides what it collects and how it uses it, and Orson handles that information on the cinema's behalf. Each cinema's own privacy policy also applies. Questions about a particular cinema's use of your information are best sent to that cinema.

Information we handle

Cinema staff

• Your name and email address, used to sign you in (sign-in is provided by Clerk).
• Which cinemas you work for and your role there.
• A record of certain actions you take, such as replying to, dismissing or escalating a customer message, and connecting a Facebook Page, so the cinema can see who did what.
• For the box-office register, the network (IP) address of failed PIN attempts, to stop someone guessing the PIN.
• If you connect your cinema's Facebook Page: your Facebook account's ID for Orson, and an access key for the Page, stored encrypted.

Customers who buy tickets

• Your name and email address, if the cinema asks for them, and what you bought.
• Card payments are processed by Stripe. Orson keeps only the card brand and last four digits for the receipt, never the full card number.

Customers who email a cinema

• Orson connects to the cinema's own mailbox so its staff can read and answer your email. Your email stays in the cinema's mailbox; Orson doesn't keep a copy.
• Orson keeps a record of what staff did with your email, including its subject line and your email address.

Customers who message a cinema's Facebook Page

• Your messages to the Page and the Page's replies, your name and profile picture as Facebook shares them, and the ID Facebook gives you for that Page.
• Photos, videos, recordings and files you send, up to 4 MB each.
• These are stored by Orson for that cinema and are visible only to that cinema's staff. Replies are written by the cinema's staff. Orson doesn't send automated messages.

Everyone

• Our hosting provider records technical information about visits, such as IP address, browser type and the page requested, to run and protect the service.
• Staff sign-in uses cookies. Orson also remembers a few display choices in your browser, such as light or dark mode. Cinema websites run on Orson use no advertising or tracking cookies.

How we use it

Only to provide Orson to cinemas and their customers: selling and checking tickets, letting staff answer customers, keeping the service secure, and meeting legal obligations. We don't sell personal information, and we don't use it for advertising.

Who we share it with

• The cinema the information relates to, and the company that owns it. One cinema company can't see another's customers or staff.
• Service providers who run parts of Orson for us: Vercel (hosting), Neon (database), Clerk (staff sign-in), Meta (Facebook Messenger, for cinemas that connect a Page), the cinema's own email provider, and Stripe for card payments.
• Authorities, where the law requires it.

How long we keep it

We keep ticket orders for seven years, for tax and accounting records; records of staff actions for two years; and Facebook conversations for as long as the cinema uses Orson, or until the cinema asks us to delete them. When a cinema stops using Orson, we delete its information within 90 days, except where the law requires us to keep it.

A Facebook Page's access key is deleted as soon as the Page is disconnected from Orson.

How we protect it

Information is encrypted in transit. Mailbox passwords and Facebook Page access keys are stored encrypted. Each cinema company's information is kept separate from every other company's, and staff see only the cinemas they work at.

Your choices

• Customers: to see, correct or delete information a cinema holds about you, contact the cinema. You can also contact us at privacy@getorson.com and we'll help.
• Staff: contact your cinema's owner, or us at privacy@getorson.com.
• Facebook: if you connected a Facebook Page to Orson, you can remove Orson from your Facebook account and ask for your information to be deleted. See Facebook data deletion.

If you live in a U.S. state with a consumer privacy law, such as California, you may have the right to know what personal information we hold about you, to ask us to correct or delete it, and not to be treated differently for using these rights. We don't sell personal information or share it for targeted advertising.

Children

Orson isn't directed at children under 13, and we don't knowingly collect their information.

Where it's stored

Orson's information is stored and processed in the United States.

Changes

If we change this policy, we'll update the date at the top, and tell cinemas about significant changes before they take effect.

Contact

Orson Cinema Software, LLC, 100 Example Street, Boston, MA 02110, privacy@getorson.com