IIRC, On Location is the event managements company the NFL uses (C
onfirmed: On Location – the Official Hospitality Partner of the NFL). They may be a subsidiary, I haven't investigated their corporate structure. But if that's the case, the Saints didn't sell our emails, they used them in conjunction with some acceptable use policy that none of us read (still shady, but legal).
What's interesting, is that in the last 15 years or so, the league has aimed to capture more revenue from Super Bowl tickets. The year the Saints went, face value on the tickets I bought were $800, and I think I paid about $1200 per ticket with fees (Saints/Indy was a weak matchup in terms of after market sales).
Now, if you look at aftermarket site (seatgeek, stubhub) the cheapest you'll see is like $4k, generally (depends somewhat on matchup). I haven't seen face prices, but I've heard they've gone up dramatically, and this somewhat confirms that belief. Just more of billionaires trying to take money from others.