Privacy Policy

Last updated June 2026

This Privacy Policy describes how Tell Your Friends LLC ("TYF," "we," "us") collects, uses, and shares information when you use the Live Archive product and the broader TYF Tools platform (the "Service"). It applies to producers and venues with accounts, to guests whose details producers upload, and to audience members who submit content at events.

1. What We Collect

Producer account and business data. Name, email, login credentials (managed by our auth provider), organization name and branding, and the business records you create in the Service: events, bookings, contracts, settlement figures, and similar.
Ticket buyers. When you buy a ticket through the TYF Tools Box Office, we collect your name and email, and, where the event or checkout requires it, your phone number and billing address, along with the items in your order. Payment card details go directly to Stripe and are never stored on our systems.
Guest information producers upload. Producers may upload guest lists and ticket lists containing names and contact details of their guests. Producers are responsible for having the right to share that information with us; we process it to run check-in and related show-day tools on the producer's behalf.
Audience submissions. Photos, videos, and captions submitted through event submission pages, along with the name the submitter chooses to provide and a hashed form of the submitter's IP address (used for abuse prevention and rate limiting; we do not store the raw IP with the submission).
Payment data. Payments are handled by Stripe. Card numbers go directly to Stripe and are never stored on our systems. We keep references such as a Stripe customer ID, your plan, and billing status. When a producer sets up payouts, Stripe collects the producer's identity and bank details directly for verification and payment; we do not collect or store that information.
Basic technical data. Standard server logs and the information needed to keep you signed in (see Cookies below).

We do not collect personal data that is treated as "sensitive" under privacy laws, and payment card details remain with Stripe.

2. How We Use Information

To provide and operate the Service: events, check-in, settlements, displays, archives.
To process payments and manage subscriptions through Stripe.
To send transactional email (account, billing, and service notices) through Resend.
To prevent abuse, enforce plan limits, and keep the Service secure.
To respond to support requests.

Audience submissions are displayed and used as described in the rights consent collected at the time of submission: the producer of the event and TYF receive a license to host and display the content in connection with the event and its archive.

3. Service Providers (Processors)

We use a small set of infrastructure providers to run the Service. Each processes data only to provide their service to us:

Supabase: database, authentication.
Vercel: application hosting.
Cloudflare R2: media storage (audience photos and videos).
Stripe: payment processing.
Resend: transactional email delivery.

4. Sharing

We do not sell personal data. We share information only with the service providers listed above, with the relevant producer (for example, audience submissions and guest check-in status for their own events), when required by law or legal process, or in connection with a merger, acquisition, or sale of assets (in which case this policy would continue to apply to the transferred data until updated with notice).

When you buy a ticket, you are transacting with the organizer of that event, who is the merchant of record and an independent controller of your information. Your payment is a direct charge to the organizer through Stripe, so the organizer receives your name, email, and payment details directly as the merchant. We process the same order information to run the platform, deliver your ticket, and provide support. The organizer uses your information under its own policy, which we encourage you to review. We do not sell personal data, and we do not share it for targeted or cross-context behavioral advertising.

Content that a producer publishes to a public archive or display page is, by design, publicly visible.

5. Financial Data & Platform Access

Producer financial data (settlements, payouts, offers, and artist guarantees) is visible to TYF's support tooling only as permitted by the producer's privacy setting. Every producer account includes a control ("Keep my financial data private from TYF platform support view") that, when enabled, blocks our support tools from displaying that producer's financial records. This restriction is enforced at the database level, not just in the interface.

To be plain about the limits of that setting: as with any hosted platform, TYF retains infrastructure-level access to the database that operates the Service (for example, administrative database credentials and backups). We use that access only to fulfill support requests, to debug problems with your consent, or to comply with legal requirements. Any analytics we run on financial data across the platform are aggregate-only and do not expose any individual producer's figures.

6. Retention

We keep account and business data for as long as the account is active, and for a short wind-down period (generally 30 days) after termination, after which it is deleted except where we must retain it (for example, payment and tax records). Audience media remains stored while the related event archive exists. Hashed IP data is kept only as long as needed for abuse prevention.

7. Your Choices and Deletion Requests

You can update most account information directly in the Service. To request deletion of your account or of specific content (including an audience submission you made), email tellyourfriendsxyz@gmail.com and we will handle the request within a reasonable time. Guests on a producer's list should contact the producer first, since the producer controls that list; we will assist with deletion on request.

If you applied to staff through a producer's sign-up page, you can ask us to delete your staff application and profile data. When we complete the deletion, we email you a confirmation. Records of shifts you actually worked are kept by the producer as their own business records.

Depending on where you live, you may have rights over your personal data, including the right to know what we collect, to access or get a copy of it, to correct it, and to ask us to delete it. Because we do not sell personal data and do not use it for targeted advertising, there is nothing for you to opt out of on those fronts. To make a request, email us at the address above. We may need to verify your identity, usually by confirming details tied to your account or order, and you may use an authorized agent. We will not deny you service or charge you a different price for exercising these rights.

8. Cookies

We use cookies only to keep you signed in (authentication session). We do not use advertising or cross-site tracking cookies.

9. Security

We use industry-standard measures to protect data, including encrypted connections, row-level access controls in our database, and payment handling delegated entirely to Stripe. No system is perfectly secure; if we learn of a breach affecting your personal data, we will notify you as required by law.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be announced by email or in the Service before they take effect. The "Last updated" date above reflects the current version.

12. Contact

Privacy questions and requests: tellyourfriendsxyz@gmail.com