Privacy Policy
Last updated June 2026
This Privacy Policy describes how Tell Your Friends LLC ("TYF," "we," "us") collects, uses, and shares information when you use the Live Archive product and the broader TYF Tools platform (the "Service"). It applies to producers and venues with accounts, to guests whose details producers upload, and to audience members who submit content at events.
1. What We Collect
- Producer account and business data. Name, email, login credentials (managed by our auth provider), organization name and branding, and the business records you create in the Service: events, bookings, contracts, settlement figures, and similar.
- Guest information producers upload. Producers may upload guest lists and ticket lists containing names and contact details of their guests. Producers are responsible for having the right to share that information with us; we process it to run check-in and related show-day tools on the producer's behalf.
- Audience submissions. Photos, videos, and captions submitted through event submission pages, along with the name the submitter chooses to provide and a hashed form of the submitter's IP address (used for abuse prevention and rate limiting; we do not store the raw IP with the submission).
- Payment data. Payments are handled by Stripe. Card numbers go directly to Stripe and are never stored on our systems. We keep references such as a Stripe customer ID, your plan, and billing status.
- Basic technical data. Standard server logs and the information needed to keep you signed in (see Cookies below).
2. How We Use Information
- To provide and operate the Service: events, check-in, settlements, displays, archives.
- To process payments and manage subscriptions through Stripe.
- To send transactional email (account, billing, and service notices) through Resend.
- To prevent abuse, enforce plan limits, and keep the Service secure.
- To respond to support requests.
Audience submissions are displayed and used as described in the rights consent collected at the time of submission: the producer of the event and TYF receive a license to host and display the content in connection with the event and its archive.
3. Service Providers (Processors)
We use a small set of infrastructure providers to run the Service. Each processes data only to provide their service to us:
- Supabase: database, authentication.
- Vercel: application hosting.
- Cloudflare R2: media storage (audience photos and videos).
- Stripe: payment processing.
- Resend: transactional email delivery.
4. Sharing
We do not sell personal data. We share information only with the service providers listed above, with the relevant producer (for example, audience submissions and guest check-in status for their own events), when required by law or legal process, or in connection with a merger, acquisition, or sale of assets (in which case this policy would continue to apply to the transferred data until updated with notice).
Content that a producer publishes to a public archive or display page is, by design, publicly visible.
5. Financial Data & Platform Access
Producer financial data (settlements, payouts, offers, and artist guarantees) is visible to TYF's support tooling only as permitted by the producer's privacy setting. Every producer account includes a control ("Keep my financial data private from TYF platform support view") that, when enabled, blocks our support tools from displaying that producer's financial records. This restriction is enforced at the database level, not just in the interface.
To be plain about the limits of that setting: as with any hosted platform, TYF retains infrastructure-level access to the database that operates the Service (for example, administrative database credentials and backups). We use that access only to fulfill support requests, to debug problems with your consent, or to comply with legal requirements. Any analytics we run on financial data across the platform are aggregate-only and do not expose any individual producer's figures.
6. Retention
We keep account and business data for as long as the account is active, and for a short wind-down period (generally 30 days) after termination, after which it is deleted except where we must retain it (for example, payment and tax records). Audience media remains stored while the related event archive exists. Hashed IP data is kept only as long as needed for abuse prevention.
7. Your Choices and Deletion Requests
You can update most account information directly in the Service. To request deletion of your account or of specific content (including an audience submission you made), email tellyourfriendsxyz@gmail.com and we will handle the request within a reasonable time. Guests on a producer's list should contact the producer first, since the producer controls that list; we will assist with deletion on request.
8. Cookies
We use cookies only to keep you signed in (authentication session). We do not use advertising or cross-site tracking cookies.
9. Security
We use industry-standard measures to protect data, including encrypted connections, row-level access controls in our database, and payment handling delegated entirely to Stripe. No system is perfectly secure; if we learn of a breach affecting your personal data, we will notify you as required by law.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be announced by email or in the Service before they take effect. The "Last updated" date above reflects the current version.
12. Contact
Privacy questions and requests: tellyourfriendsxyz@gmail.com