Privacy Policy

1. Overview

Tour Alert ("we", "us", "the Service") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

Account information

When you register, we collect your name and email address. If you sign in via Google, we receive your name, email address, and profile picture from Google — we do not receive or store your Google password.

Usage data

We store the artists you add to your watchlist and your notification preferences. We also collect aggregate usage data such as page views, session duration, and interactions with key buttons (for example, when you add an artist to your watchlist). This data is used to improve the Service.

Campaign attribution

When you arrive at the Service through a link containing campaign parameters (such as utm_source, utm_medium, utm_campaign, gclid, or fbclid), we capture those values in a first-party cookie and, if you create an account, store them on your user record. This lets us measure which marketing channels bring people to the Service. It does not include any personally identifying information beyond the campaign identifiers themselves and the referring URL.

Communications

If you enable email notifications, we store your email address for the purpose of delivering those alerts.

Cookies and analytics

We use essential cookies to manage authentication sessions. A session cookie is set when you sign in and is used to keep you logged in across page loads. These cookies are strictly necessary.

We use Google Analytics to understand how the Service is used. Google Analytics cookies are set when you visit the site. We use Vercel Analytics for privacy-friendly performance metrics, which does not use cookies or track individuals.

3. How We Use Your Information

• To create and manage your account
• To send tour and event notifications for artists on your watchlist
• To improve the reliability and performance of the Service
• To respond to support requests

We do not sell your personal information. We do not use your data for advertising or share it with third-party marketers.

Legal basis for processing (EEA users)

If you are in the EEA, we process your personal data under the following legal bases:

• Contract — account creation, watchlist management, and notifications are necessary to provide the Service you signed up for
• Legitimate interest — aggregate analytics (Google Analytics, Vercel Analytics) and rate limiting / security measures to protect and improve the Service. You can object to this processing at any time by contacting us.

4. Third-Party Services & Sub-Processors

The Service relies on the following third-party providers (sub-processors) to operate. We only share the minimum data necessary for each service to function:

5. Data Hosting & International Transfers

Tour Alert's infrastructure, including its database, is hosted in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data is transferred to the United States for processing.

We rely on the EU-U.S. Data Privacy Framework and standard contractual clauses where applicable to ensure adequate safeguards for international data transfers. By using the Service, you acknowledge and consent to the transfer and processing of your data in the United States.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal information and watchlist data will be removed from our systems within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (including the GDPR for EEA residents):

• Access — view the personal data we hold about you
• Portability — download a machine-readable copy of your data via the "Export My Data" button in your account settings
• Rectification — correct inaccurate data
• Erasure — delete your account and all associated data via your account settings
• Objection — object to analytics processing by contacting us at the email below, or by using a browser-level opt-out such as the Google Analytics Opt-out Browser Add-on
• Email notifications — opt out at any time via your account settings or the unsubscribe link in any email we send

You can exercise most of these rights directly from your account settings page. For any other requests, email us at support [at] touralert.io. We will respond within 30 days.

8. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS) and hashed session tokens. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a revised date. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

11. Contact

Questions or concerns about this Privacy Policy can be directed to support [at] touralert.io.