Privacy Policy

Reggae Shows ("we," "us") runs reggaeshows.com, a community for finding reggae concerts, tours, and festivals and for connecting with other fans. This policy explains what personal information we collect, why, who we share it with, and the choices you have. For any privacy question or request, email info@reggaeshows.com.

Information you give us:

• Account details: email address, password (stored hashed by our authentication provider), and display name.
• Profile photo, if you upload one.
• Activity: shows you mark as attended, favorite artists, events and edits you submit, and leaderboard points.
• Social features: link up requests and connections, massives (fan groups) you join, and the messages and posts you send.
• Membership and payments: your plan and subscription status. Card details go straight to Stripe. We never see or store your full card number.
• Anything you send us by email, such as support requests or feedback.

Information collected automatically:

• Device and connection data, such as browser type, operating system, approximate location from your IP address, and referring page.
• Usage data, such as pages viewed, searches, and features used.
• Cookies and similar technologies, described in the Cookies and analytics section.

We do not collect precise GPS location, and we do not ask for sensitive information such as health, religion, or government ID numbers. Please do not post sensitive information in public areas or messages.

• To run your account and the core site: show listings, attendance tracking, leaderboards, profiles, link ups, massives, and messaging.
• To process membership payments and manage your subscription.
• To send service emails, such as account and security notices, receipts, and alerts when artists you follow announce shows.
• To keep the community safe: moderating content and photos, preventing spam, fraud, and abuse, and enforcing our Terms.
• To understand how the site is used so we can fix problems and make it better.
• To comply with the law and respond to valid legal requests.

If you are in the European Economic Area, the UK, or Switzerland, we rely on these legal bases: performing our contract with you (running your account and membership), our legitimate interests (safety, moderation, security, and improving the service), your consent (optional analytics cookies, where required), and legal obligations.

We use AI models to help run parts of the site:

• Photo screening: profile photos are checked by an AI model before they are published, to block nudity, violence, hate symbols, and other content that breaks our rules.
• Content moderation: text you submit, such as event details, posts, and messages flagged for review, may be screened by an AI model for spam and abuse.
• Event research: we use AI to help find and check public show, tour, and festival information. This processes public listings, not your personal data.

These requests go through the Vercel AI Gateway to model providers such as OpenAI and Google. They process the content only to return a result to us. Under their API terms, they do not use it to train their models. An automated rejection only stops a photo or post from being published. It has no legal or similarly significant effect on you. If you think an automated decision was wrong, email us and a person will review it.

With other users: your display name, profile photo, attended shows, points, and public profile can be seen by other users and visitors. Messages are visible to the people in that conversation. Posts in a massive are visible to its members.

With service providers who process data for us under contract:

• Vercel: website hosting, performance monitoring, and AI Gateway
• Supabase: database, authentication, and file storage
• Stripe: payment processing and subscription billing
• Resend: sending emails
• Google Analytics: website usage analytics
• OpenAI and Google: AI moderation and research, as described above

For legal and safety reasons: when we believe in good faith that the law requires it, or to protect the rights, safety, or property of our users, the public, or Reggae Shows.

Business transfers: if Reggae Shows is merged, sold, or reorganized, your information may be transferred as part of that deal. This policy will continue to apply to it.

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.

• Essential cookies keep you signed in and keep your session secure. The site does not work without them.
• Google Analytics sets cookies to measure visits and feature use on the live site. You can block these in your browser settings or with the Google Analytics opt-out add-on.
• Vercel Web Analytics and Speed Insights measure page views and performance without cookies, using aggregated data.

You can delete or block cookies in your browser at any time. If you block essential cookies, you will not be able to sign in.

• Account, profile, and activity data: while your account is active.
• After you ask us to delete your account: we remove your profile, photo, and personal data within 30 days. Backups are cleared on their normal cycle, within 90 days.
• Payment and tax records: as long as tax and accounting law requires, usually up to 7 years.
• Records of moderation and safety actions: as long as needed to prevent repeat abuse.
• Analytics data: kept in aggregated or pseudonymous form, under each provider's retention settings.

You can update your display name and photo on your profile page, and you can cancel your membership on the membership page. Depending on where you live, you may also have the right to:

• Know what personal information we hold about you and get a copy of it in a portable format
• Correct inaccurate information
• Delete your account and personal information
• Object to or restrict certain processing, or withdraw consent you gave earlier
• Opt out of the sale or sharing of personal information. We do neither.

To use any of these rights, email info@reggaeshows.com from the address on your account. We may need to verify your identity first. We respond within 30 days, or within the time your local law requires. You can name an authorized agent to make a request for you. We will not treat you differently for using your privacy rights.

If we turn down your request, you can appeal by replying to our decision. If you are in the EEA or UK, you can also complain to your local data protection authority.

We use HTTPS encryption, hashed passwords, database access controls that limit each user to their own private data, and least-privilege access for our team. No system is perfectly secure. If a data breach affects you, we will notify you as the law requires. Use a strong, unique password, and tell us right away if you think your account has been compromised.

Reggae Shows is not meant for children under 13, and you must be at least 16 to create an account if you live in the EEA or UK. We do not knowingly collect personal information from children under these ages. If you believe a child has given us personal information, email info@reggaeshows.com and we will delete it.

We are based in the United States, and our service providers may process data in the US and other countries. When we transfer personal data from the EEA, UK, or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, where our providers take part in it.

We may update this policy as the site changes. We will update the "Last updated" date above. For significant changes, we will also notify you by email or with a notice on the site before they take effect.

For questions or requests about your privacy, email info@reggaeshows.com or visit our contact page.