Privacy Policy

This Privacy Policy ("Policy") applies to tourcntrl.com, and TourCntrl, Inc. ("TourCntrl" or "We") and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to TourCntrl include tourcntrl.com. TourCntrl's website is a live event ticketing site. By using TourCntrl website, you consent to the data practices described in this statement.

TourCntrl is firmly committed to the privacy of its members. TourCntrl works hard to earn and keep your trust, so it adheres to the following principles to protect your privacy:

• TourCntrl does not rent or sell your personally identifiable information to third parties.
• TourCntrl does not share your contact information with other users or third parties without your consent.
• Any personally identifiable information that you provide to TourCntrl will be secured with industry standard protocols and technology.

• Reviewing your information. Applicable privacy laws may give you the right to review the personal information we keep about you (depending on the jurisdiction, this may be called right of access, right of portability or variations of those terms). You can request a copy of your personal information by putting in such a request to our support team.
• Updating your information. If you believe that the information we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion or object to its processing, please contact our support.

For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.

We store data for as long as it is necessary to provide products and services to you and others, including those described above. Information associated with your account will be kept until your account is deleted, unless we no longer need the data to provide products and services.

In order to better provide you with products and services offered, TourCntrl may collect personally identifiable information, such as your:

• First and last name
• Email address
• ZIP Code / Postal Code
• Phone Number

We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) sending us an email message; (c) submitting your credit card or other payment information when ordering and purchasing products and services.

The TourCntrl mobile apps for iOS and Android collect the following in addition to the information described above. These apps are used by promoters, venues, agencies, artists and their crews to run shows, and by box office staff selling tickets at the door.

• Device and installation identifiers. When you enable notifications, we store the push token issued to your device by Apple or Google so we can deliver alerts about your shows, tasks and advancing. Each installation also generates a random identifier that is sent with requests to our servers, so we can tell one device from another and alert you when your account is used from a device you have not used before. These identifiers relate to an app installation, not to you personally, and neither is an advertising identifier — our apps contain no advertising and collect no advertising ID.
• Payment information. Card payments taken at the door are handled by Stripe. Card details are entered directly into Stripe's own payment form and are never received or stored by TourCntrl. Where a buyer provides their name, email address, phone number or postal code with a sale, that information is sent to Stripe alongside the payment so the charge can be completed and checked for fraud, and is also stored by us as part of the order record.
• Photos. Images you choose to upload — such as a profile picture, a stakeholder logo or a document photographed for an event — are sent to and stored on our servers. The apps request access to your camera and photo library only when you use a feature that needs one.
• Crash reports and diagnostics. When the app encounters an error we record a crash report, together with device and app version information, your IP address, and the name, email address and account identifier of the signed-in user, so we can identify and fix the fault. We also sample a small proportion of sessions for performance measurements.
• Purchase history. Ticket sales made through the app, including walk-up sales at the door, are stored as order records.

The apps do not collect your device's location. They do not read your contacts, calendar, messages or the other apps installed on your device.

TourCntrl collects and uses your personal information for the following purposes:

• To provide the features, services, and products available through the Services;
• To send you information about your relationship or transactions with us;
• To send you alerts or other communications;
• With your consent, to send you SMS messages;
• To notify you about new features and offerings of the Services, including, but not limited to, discounts, events, shows, news about our Services, products, other services, and/or special offers;
• To process and respond to your inquiries;
• To contact you with information that we believe may be of interest to you;
• To improve the content and features of the Services and/or develop new Services;
• To enforce the legal or contractual terms that govern your use of the Services.

When you buy tickets or merchandise, or fill in a signup form, you can tick an optional box to get marketing texts. The box is never pre-ticked. By ticking it, you agree to receive recurring automated marketing text messages about shows, on-sales and news from the venue, promoter and/or artists named next to the box, at the number you provided. They send these messages using TourCntrl. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Texts are sent only between 9am and 8pm in your local time.

Reply HELP for help, or STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT) to cancel. You'll get one message confirming that you've opted out. Reply START to opt back in.

We record your consent with the wording you agreed to, the date and time, and the IP address and browser it came from.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent aren't shared with anyone except the sender you opted in to and the providers that deliver the messages, such as Twilio and the mobile carriers. Your SMS consent is never used to build advertising audiences.

Help: info@tourcntrl.com.

If you connect a YouTube channel in Marketing → Social, TourCntrl uses the YouTube API Services. With your permission, TourCntrl:

• reads your channel's ID, title, custom URL, thumbnail, and subscriber and video counts, so it can show which channel you are posting to;
• uploads the videos you choose to publish to that channel, with the title, description, visibility and made-for-kids setting you pick.

TourCntrl does not read your other videos, comments, playlists, subscriptions or analytics.

We store the channel details above and the IDs and links of videos you uploaded through TourCntrl. We refresh the channel details every day. If they can't be refreshed for 28 days, we delete or blank them. Your OAuth tokens are stored encrypted.

By using TourCntrl's YouTube features, you agree to be bound by the YouTube Terms of Service. Google's Privacy Policy describes how Google handles your data.

You can disconnect YouTube at any time in Marketing → Social → Accounts. This revokes TourCntrl's access with Google and deletes the stored channel data. You can also revoke TourCntrl's access from your Google security settings at https://myaccount.google.com/permissions.

If you connect Facebook in Marketing → Social, TourCntrl receives the permissions you approve in Meta's login dialog. TourCntrl uses them to:

• list the Facebook Pages you manage and the Instagram professional accounts linked to them, with each account's name, username, profile picture and follower count;
• publish the posts, photos and carousels you write and choose to publish, either right away or at the time you schedule;
• receive comments and @mentions on those accounts, so your team can see them in the Social inbox.

If you connect Meta in Marketing → Paid, TourCntrl also manages the ad campaigns you build, uploads the advertising audiences described under "Advertising Audiences and Conversion Measurement", and reads the campaign spend and results.

We store the Page and Instagram account details, access tokens (encrypted), the comments and mentions delivered to your inbox, and the IDs of the posts and ads TourCntrl created. We don't use Meta data for any purpose other than these features, and we don't sell it.

Deleting your Meta data. Click Disconnect on the Meta login in Marketing → Social → Accounts (or Marketing → Paid → Accounts). TourCntrl then revokes its permissions with Meta and deletes the stored tokens and the connected Page, Instagram and ad-account records, along with the comments and mentions received through them. You can also remove TourCntrl under Facebook Settings → Business Integrations and ask for your data to be deleted: Meta then notifies us, we delete the same data, and Meta gives you a confirmation code and a link where you can check the deletion's status. To ask us to delete anything else, email info@tourcntrl.com.

Advertising audiences. Venues, promoters and artists who use TourCntrl's Paid Ads can advertise to people who bought tickets or signed up with them. To do this, TourCntrl converts the fan's email address and phone number into an irreversible SHA-256 hash and uploads it to Meta, Google or TikTok. The platform matches it against its own users to show ads, and doesn't receive the readable contact details. For fans in the United States, this applies unless you opt out of ad targeting. For fans elsewhere, it applies only if you opt in. It never applies while you are unsubscribed from that organiser's emails.

You can opt in or out at any time, for each venue, promoter or artist, with the "Use for ads" box on the email preferences page. The "Manage preferences" link in marketing emails opens it, and so does your TourCntrl fan account profile. You can also email info@tourcntrl.com.

Conversion measurement. When you buy tickets, TourCntrl may tell the event organiser's Meta, TikTok or Google Analytics account that a purchase happened, so they can measure their ads. TourCntrl sends the order value and currency to all three. For Meta, it also sends hashed contact details, your browser's IP address and user agent, and Meta's browser and click identifiers. For TikTok, it also sends hashed contact details and TikTok's browser and click identifiers. For Google Analytics, it sends only the order ID and the items.

If you connect TikTok in Marketing → Social, TourCntrl uses TikTok's Login Kit and Content Posting API. With your permission, TourCntrl reads your account's display name, avatar and username. It then checks your posting options and publishes the videos you choose, with the privacy, interaction and disclosure settings you pick. TourCntrldoesn't read your other videos, followers or messages.

If you connect TikTok in Marketing → Paid, TourCntrl manages the ad campaigns you build in your TikTok advertiser account, uploads the advertising audiences described above, and reads the campaign spend and results.

We store the account details above, encrypted tokens, and the IDs of the videos and ads TourCntrl created. Disconnecting in TourCntrl revokes its access with TikTok and deletes this data. TikTok's own handling of your data is described in TikTok's Privacy Policy.

TourCntrl requests Google data only for the features you turn on:

TourCntrl's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide and improve the user-facing features listed above. We don't sell it, use it for advertising, or use it to train AI models. We don't let people read it, except with your permission, for security, to comply with the law, or when the data is aggregated and anonymised. OAuth tokens are encrypted at rest.

When you disconnect a Google feature, TourCntrl revokes its access with Google and deletes the data it stored for that feature. Disconnecting Calendar Sync also removes the events and calendar TourCntrl created, unless you choose to keep them. You can revoke access at any time at https://myaccount.google.com/permissions.

TourCntrl does not sell, rent, or lease its customer lists to third parties. Hashed advertising audiences and conversion events are shared with ad platforms only as described under "Advertising Audiences and Conversion Measurement". TourCntrl may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (email, name, address, phone number) is transferred to the third party. TourCntrl may share data with trusted partners to send you email, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to TourCntrl, and they are required to maintain the confidentiality of your information.

We use the following service providers to operate the TourCntrl apps and website. Each receives only the information it needs to perform its function:

• Stripe — payment processing. Stripe receives card details entered into its payment form, the billing name, email address, phone number and postal code provided with a sale, and technical signals about the device used to make it. Stripe also uses this information for its own fraud prevention and legal compliance purposes. See Stripe's privacy policy at stripe.com/privacy.
• Google Firebase Cloud Messaging — delivery of push notifications to your device, which requires your device's push token.
• Twilio — delivery of text messages, which requires your phone number and the message text.
• Sentry — crash reporting and performance monitoring, which receives the diagnostic information described above.

You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to opt out of the disclosure of your personal information. If you exercise your right to opt out of the disclosure of your personal information, we will refrain from disclosing your personal information, unless you subsequently provide express authorization for the disclosure of your personal information. To opt out of sharing your personal information for ad targeting, untick "Use for ads" on the email preferences page ("Manage preferences" in marketing emails; see "Advertising Audiences and Conversion Measurement"). To opt out of the disclosure of your personal information, contact us at: info@tourcntrl.com.

This website may contain links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

The laws in some jurisdictions require companies to tell you about the legal ground they rely on to use or disclose your "personal data" as such term is defined under applicable law. To the extent that those laws apply, our legal grounds are as follows:

• To honor our contractual commitments to you: Much of our processing of personal data is to meet our contractual obligations to our customers, or to take steps at customers' requests in anticipation of entering into a contract with them. For example, we handle personal data on this basis to provide you with tickets to events.
• Consent: Where required by law, and in some other cases, we handle personal data on the basis of your implied or express consent.
• Legitimate interests: In many cases, we handle personal data on the ground that it furthers our legitimate interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals:
  • Customer service
  • Marketing
  • Protecting our customers, personnel, and property
  • Analyzing and improving our business
  • Managing legal issues
• We may also process personal data for the legitimate interests of our business partners, such as to assist with marketing.
• Legal compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.
• To protect the vital interests of the individual or others: For example, we may collect or disclose personal data to help resolve an urgent medical situation.

Depending on your jurisdiction, you may have the right, in accordance with applicable data protection laws, to make requests related to your "personal information" or "personal data" (as such terms are defined under applicable laws, and collectively referred to herein as "personal data"). Specifically, you may have the right to ask us to:

• Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we disclose personal information.
• Provide you access to and/or a copy of certain personal information we hold about you.
• Correct or update personal information we hold about you.
• Delete certain personal information we have about you.
• Provide you with information about the financial incentives that we offer to you, if any.
• Restrict or object to certain uses of your information.

TourCntrl does not knowingly collect personally identifiable information from children under the age of 13. If you are under the age of 13, you must ask your parent or guardian for permission to use this website.

From time to time, TourCntrl may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. If you would like to stop receiving marketing or promotional communications via email from TourCntrl, you may opt out of such communications by clicking "unsubscribe".

We may store your data on servers provided by third-party hosting vendors with whom we have contracted.

TourCntrl reserves the right to change this Policy from time to time. For example, when there are changes in our services, changes in our data protection practices, or changes in the law. When changes to this Policy are significant, we will inform you. You may receive a notice by sending an email to the primary email address specified in your account, by placing a prominent notice on our TourCntrl Presents, and/or by updating any privacy information. Your continued use of the website and/or services available after such modifications will constitute your: (a) acknowledgment of the modified Policy; and (b) agreement to abide and be bound by that Policy.

Please do not hesitate to contact us about any questions, concerns, requests or comments at info@tourcntrl.com.