Privacy Policy

Last updated: August 29, 2026

Brownsville Drive-In ("we," "us," or "our") operates the Brownsville Drive-In Hub mobile app and website (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide

  • Account information: email address and password when you register for a staff or admin account.
  • Contact details: name, phone number, and (optionally) email when purchasing tickets, special admissions, event registrations, vendor applications, or concession orders.
  • Vehicle information: make, model, color, license plate, screen number, and parking area when you request car delivery for concession orders.
  • Order details: ticket quantities, concession items, special admission packages, add-ons, and any special instructions or notes you provide.
  • Vendor application details: business name, contact name, email, phone, booth type, items sold, and license plate for flea market or special event vendor registration.

Information collected automatically

  • Location: with your permission, approximate device location may be used to facilitate concession delivery to your vehicle.
  • Device and usage data: device type, app version, and interaction data used to improve the Service.
  • Camera access: used by staff for QR code ticket scanning at the box office; images are not stored.

Payment information

We do not store full credit card numbers. Online payments are processed by Stripe, which handles card data on its secure infrastructure. We retain only transaction references, amounts, and payment status.

2. How We Use Your Information

  • Process and fulfill ticket, concession, special admission, event, and vendor orders.
  • Validate tickets and special admissions at the box office via QR code scanning.
  • Deliver concession orders to your vehicle using the vehicle and location details you provide.
  • Send order confirmations, ready-for-pickup notifications, and welcome messages via SMS, email, and push notifications.
  • Send abandoned cart reminders if you begin a purchase but do not complete it.
  • Send marketing and audience broadcast messages (SMS/MMS or email) that you have opted into; you may opt out at any time.
  • Generate Apple Wallet and Google Wallet passes for eligible tickets and special admissions.
  • Sync concession orders and menu data with our Loyverse point-of-sale system for kitchen fulfillment.
  • Provide staff with operational dashboards, reporting, and thermal receipt printing.
  • Maintain records for accounting, tax, and business reporting purposes.

3. How We Share Your Information

We share information only as necessary to operate the Service and as described below:

  • Stripe — processes all online and in-person card payments.
  • Twilio — delivers SMS and MMS messages (order updates, welcome messages, abandoned cart reminders, audience broadcasts).
  • SendGrid — delivers transactional and marketing email.
  • Apple Wallet / Google Wallet — generates digital passes when requested.
  • Loyverse POS — receives concession order data for kitchen preparation and receipt printing.
  • Pushover — receives staff alert notifications for new orders and operational events.
  • Service providers — hosting, analytics, and infrastructure vendors who support the Service under appropriate data agreements.
  • Legal compliance — when required by law, court order, or to protect our rights and safety.

We do not sell your personal information to third parties.

4. Data Retention

We retain order and transaction records for as long as needed to provide the Service, comply with tax and accounting obligations, and resolve disputes. Account information is retained until you request deletion or we determine it is no longer necessary.

5. SMS and Email Communications

By providing your phone number and email, you consent to receive transactional messages (order confirmations, delivery updates, ticket validation welcome messages) and, where you have opted in, marketing messages. Message and data rates may apply. You may opt out of marketing messages at any time by replying STOP to any SMS or using the unsubscribe link in any email. Transactional messages cannot be opted out of as they are necessary to fulfill your orders.

6. Your Rights and Choices

  • Access and update: you may view and update your account information in the Account section of the app.
  • Request deletion: you may request deletion of your account and associated data by contacting us.
  • Opt out of marketing: unsubscribe at any time via the methods above.
  • Location: you may revoke location permission in your device settings at any time; delivery features will be limited.
  • Push notifications: you may disable push notifications in your device settings.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

We use reasonable technical and organizational measures to protect your information, including encrypted transmission (HTTPS) and access controls. No system is perfectly secure, and we cannot guarantee absolute security. Payment data is handled exclusively by Stripe under PCI-DSS compliance.

9. Third-Party Links

The Service may contain links to third-party websites (e.g., movie trailers, social media). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you within the app. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal information, please contact us through the Contact page in the app or by mail at the drive-in's physical address.