Privacy Policy

Last Updated: December 4, 2024

1. Introduction

Welcome to CrowdSpark ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information when you use our ticketing and band discovery platform. This Privacy Policy explains our practices regarding the information we collect through our mobile application, website, and related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, date of birth, and password when you create an account
  • Profile Information: Profile photo, music preferences, favorite genres, and artists you follow
  • Payment Information: Credit/debit card details, billing address, and transaction history (processed securely through third-party payment processors)
  • Communications: Messages you send to artists, venues, or our support team

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers, and mobile network information
  • Usage Data: Pages visited, features used, search queries, artists viewed, events browsed, and interaction patterns
  • Location Data: With your consent, precise or approximate location to show nearby events and venues
  • Log Data: IP address, browser type, access times, and referring URLs

2.3 Information from Third Parties

  • Social Media: If you connect social accounts, we may receive your public profile information
  • Ticket Partners: Purchase history from integrated ticketing platforms
  • Music Services: Listening history if you connect streaming services (e.g., Spotify, Apple Music)

3. How We Use Your Information

  • Provide the Service: Process ticket purchases, send confirmations, and deliver digital tickets
  • Personalize Your Experience: Recommend artists, events, and venues based on your preferences and listening history
  • Improve Discovery: Power our recommendation algorithms to help you find new music
  • Communicate: Send transactional emails, event reminders, and (with consent) promotional content
  • Ensure Security: Detect fraud, prevent unauthorized access, and protect against abuse
  • Analytics: Understand usage patterns to improve features and user experience
  • Legal Compliance: Fulfill legal obligations and enforce our terms

4. How We Share Your Information

We do not sell your personal information. We may share data with:

4.1 Service Providers

  • Payment processors (Stripe, PayPal)
  • Cloud hosting providers
  • Email delivery services
  • Analytics providers
  • Customer support tools

4.2 Event Organizers & Venues

  • When you purchase tickets, we share necessary information (name, email, ticket details) with the event organizer for entry verification and event communications.

4.3 Artists

  • Aggregated, anonymized analytics about their fanbase. We do not share your personal contact information with artists without your explicit consent.

4.4 Legal Requirements

  • We may disclose information if required by law, legal process, or to protect the rights, property, or safety of our users or others.

4.5 Business Transfers

  • In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5. Your Rights & Choices

5.1 Access & Portability

  • Request a copy of your personal data in a portable format.

5.2 Correction

  • Update or correct inaccurate information through your account settings or by contacting us.

5.3 Deletion

  • Request deletion of your account and associated data, subject to legal retention requirements.

5.4 Marketing Opt-Out

  • Unsubscribe from promotional emails via the link in any marketing message or through account settings.

5.5 Location

  • Disable location access through your device settings at any time.

5.6 Connected Services

  • Disconnect linked social media or streaming accounts through your account settings.

Regional Rights

  • California Residents (CCPA): Right to know, delete, opt-out of sale (we don't sell data), and non-discrimination
  • European Residents (GDPR): Right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent
  • UK Residents: Rights under UK GDPR mirror those of the EU GDPR

6. Data Retention

  • We retain your information for as long as your account is active or as needed to provide the Service. After account deletion:
  • Transaction records: Retained for 7 years for legal/tax compliance
  • Aggregated analytics: Retained indefinitely in anonymized form
  • Support communications: Retained for 3 years
  • All other data: Deleted within 90 days

7. Security

  • We implement industry-standard security measures including:
  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and employee training
  • PCI-DSS compliance for payment processing
  • No system is 100% secure. If you believe your account has been compromised, contact us immediately.

8. Children's Privacy

The Service is not intended for users under 13 (or 16 in the EU). We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We use Standard Contractual Clauses and other safeguards to ensure adequate protection for international transfers.

10. Third-Party Links

The Service may contain links to third-party websites, artist pages, or venue sites. We are not responsible for their privacy practices. Review their policies before providing personal information.

11. Cookies & Tracking

  • We use cookies and similar technologies for:
  • Essential: Authentication, security, and core functionality
  • Analytics: Understanding usage patterns (Google Analytics)
  • Preferences: Remembering your settings and choices
  • Manage cookie preferences through your browser settings or our cookie banner.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Your continued use after changes constitutes acceptance.

13. Contact Us

  • For privacy questions, requests, or concerns:
  • Email: privacy@gocrowdspark.com
  • Data Protection Officer: dpo@gocrowdspark.com
  • For unresolved complaints, you may contact your local data protection authority.