• account and profile information, including username and membership details;
• private contact, identity, transfer-destination, and account-administration information;
• event, ticket source/issuer, listing, offer, order, and fee-snapshot information;
• transfer evidence metadata and securely provided evidence artifacts;
• support communications and dispute claims;
• settlement/payment references, amounts, statuses, and reconciliation metadata, but not card credentials in Pass client source;
• fraud, risk, compliance, review, and auditable action records;
• device and technical request information actually produced by hosting, security, and diagnostics, such as IP address, browser/app details, timestamps, and requested pages;
• factual event catalogue and source information from organisers, venues, ticketing platforms, and other public sources.