Privacy Policy

1. Data we collect

• Account data: your name and email address, and your role (fan, artist or venue).
• Activity data: the summons you create or join, tickets, and related actions on the Platform.
• Payment data: your payments are processed by Stripe. We receive confirmation and limited details (such as the last four digits and card type) but we never receive or store your full card number.
• Technical data: basic logs and cookies needed to keep you signed in and to operate the service securely.

2. How and why we use it (legal bases)

• To provide the Platform, your account and your tickets — necessary for performance of our contract with you.
• To process payments when a show is confirmed — performance of our contract.
• To keep the Platform secure and prevent fraud and abuse — our legitimate interests.
• To communicate with you about your summons, tickets and account — performance of our contract and our legitimate interests.
• To comply with legal and accounting obligations — legal obligation.

3. Service providers (processors)

We share personal data only with providers that help us run the Platform, under appropriate data-processing terms:

• Supabase — database, authentication and hosting of account data.
• Stripe — payment processing.
• Vercel — application hosting and delivery.

We do not sell your personal data.

4. International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

We keep your personal data for as long as your account is active and as long as needed to provide the service, resolve disputes, and meet legal and accounting obligations. You can ask us to delete your account at any time.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent.

To exercise any of these rights, email info@crowd.show. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

7. Cookies

We use cookies that are strictly necessary to keep you signed in and to operate the Platform securely. If we later add analytics or other non-essential cookies, we will ask for your consent first.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you.

9. Contact

Crowdshow Technologies OÜ, registry code 17470098, Estonia — info@crowd.show.