Privacy Policy
Last updated: August 14, 2026
Effective date: August 14, 2026
1. Overview
At ShowUp, we respect your privacy and are committed to protecting your personal data. ShowUp allows users who are at least 13 years old, or the minimum age permitted by applicable law if higher, to use non-commercial features such as browsing the Platform, creating an account, following Artists, joining Rallies, and receiving updates. Certain financial features, including Pledges and Ticket purchases, are restricted to users who have reached the age of majority in their jurisdiction under our Terms of Service. Privacy choices and consent govern how we collect and use personal information; they do not determine whether you are eligible to make a Pledge. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Platform.
This Privacy Policy governs how ShowUp collects, uses, and discloses personal information. Our Terms of Service govern your use of the Platform.
2. Information We Collect
2.1 Personal Information
We collect information you provide directly to us, including your email address, generated handle, optional display name, home location, rally and pledge activity, preferences, payment method information, and payment history. You can sign in with Google or email through Clerk. Clerk provides ShowUp with your email address and Clerk user ID so we can create and secure your account, sign you in, prevent abuse, and support account-related requests. Payment details are processed by Stripe; ShowUp does not store your complete card number or security code.
2.2 Location Data
To facilitate the "Tour on Demand" model, we collect your selected city, region, and country, and may use approximate device location when you grant browser permission. Pledge locations can include approximate coordinates and place details. We use this information to aggregate demand and signal to artists where their fans are located.
2.3 Public Visibility & Anonymity
Your email address, payment details, and account identifiers are never displayed publicly. Depending on your settings and the feature, other people may see your handle, optional display name, selected metro or approximate region, recognition badges, and activity such as joining or pledging to a rally. Attendee lists are hidden by default and can be enabled in Account Settings. ShowUp generates a default profile avatar for public profiles.
2.4 Technical & Security Information
We may collect IP address, browser or device information, request metadata, diagnostic information, and audit logs when you use the Platform. We use this information to operate the service, prevent fraud and abuse, troubleshoot failures, and protect accounts. We do not use it for targeted advertising.
2.5 Automated Analysis and Profiling
We analyze your selected location, Artist and rally activity, pledge amount and status, Companion Intent, referral activity, and timing information to infer interests and measure demand, momentum, and geographic density. This analysis begins when you sign in and use the relevant features, such as joining a rally or making a pledge; approximate device location is used only when you grant browser permission. Automated calculations rank content, generate recommendations and demand metrics, and support pricing recommendations. Those calculations do not by themselves charge you or complete a Ticket purchase. Automated eligibility, allocation, and waitlist rules can determine whether a Ticket is offered or reserved and may significantly affect your access to a Ticket. If ShowUp makes a decision about you exclusively through automated processing, we will notify you no later than when we communicate the decision. You may ask which personal information was used, the main reasons and factors that led to the decision, request correction of that information, and submit observations to a team member able to review the decision by contacting our Privacy Officer.
2.6 Children’s Privacy and Minimum Age
ShowUp is not directed to children under 13 or the higher minimum age required by applicable law, and we do not knowingly collect personal information from them. In Québec, we do not knowingly collect personal information directly from a child under 14 without the consent required by law, unless the collection is clearly for the child’s benefit as permitted by law. Pledges, saved payment methods, Ticket purchases, and Ticket transfers or resales are not available to minors: before using these features, a user must accept the Terms of Service and represent that they have reached the age of majority and have legal capacity. If we learn that a person below the applicable minimum age created an account or provided personal information without valid authorization, we will disable the account and delete or otherwise lawfully dispose of the information, except where retention is required by law. A parent or guardian who believes this has happened should contact [privacy@showup.fans](mailto:privacy@showup.fans).
3. How We Use Your Information
We collect and use personal information only as reasonably necessary for the following purposes:
-
Accounts and Service Delivery: To create and secure accounts, remember your settings, provide support, and operate rallies, pledges, review decisions, tickets, transfers, and other features you request.
-
Payments and Ticketing: To save payment methods through Stripe, process authorized payments, refunds, and disputes, maintain transaction records, allocate tickets, and deliver confirmed shows.
-
Demand Analysis and Planning: To combine rally, pledge, selected-location, Companion Intent, and timing data into counts, totals, ranges, demand curves, momentum and density scores, discovery rankings, and recommendations used to plan tours, shows, and capacity. The metrics we share generally omit direct account identifiers, but the underlying records remain linked to accounts. We treat information as anonymous only when it has been irreversibly anonymized in accordance with applicable law.
-
Communication: To send transactional messages about your account, rallies, pledges, payments, tickets, refunds, and cancellations, plus optional momentum and show updates according to your notification preferences.
-
Security and Fraud Prevention: To authenticate requests, enforce access controls and rate limits, detect misuse, investigate suspicious activity, protect accounts, and maintain audit records.
-
Operation and Improvement: To diagnose failures, monitor service reliability and email delivery, understand whether features work as intended, and improve the Platform. ShowUp does not currently use advertising analytics or personal information for targeted advertising.
-
Legal and Business Obligations: To comply with accounting, tax, privacy, consumer-protection, payment, and other legal obligations; respond to lawful requests; resolve disputes; and enforce our agreements.
4. Data Sharing
We do not sell your personal data. We share only the information needed to provide the service, process payments, deliver communications, protect ShowUp, or complete a confirmed show:
Show Materialization
When a show is confirmed and a ticket is issued to you, the event promoter and venue may receive the information reasonably necessary to operate the event, such as your name, contact information, ticket identifier, attendance status, and any information required for customer support or venue access. We may also disclose information when required by law or to protect rights, safety, and platform integrity.
Service Providers
We use service providers to operate ShowUp: Clerk for authentication, Stripe for payment processing, Resend for email delivery, Cloudflare for website delivery, security, and request processing through Workers, and Neon for PostgreSQL data storage. We also use a third-party cloud infrastructure provider to host our backend API and related operational logs, and may use monitoring providers to diagnose failures and protect the service. Our contracts require these providers to process personal information only for the contracted services and to apply appropriate confidentiality, security, retention, deletion, and incident-notification measures.
International Processing
Our backend API and related operational logs are hosted by a third-party cloud infrastructure provider on servers located in the United States. Our PostgreSQL database is hosted by Neon in a United States East region. Cloudflare processes website requests through its global network, so request information may be processed outside Québec and Canada. As a result, account, location, rally, pledge, ticket, transaction-reference, request, diagnostic, and security information may be processed or stored outside Québec and Canada, particularly in the United States. While information is in another country, it is subject to that country’s laws and may be accessible to courts, law-enforcement, or national-security authorities through lawful process. Before entrusting personal information to a service provider outside Québec, ShowUp assesses the relevant privacy factors and uses written agreements that limit processing to the contracted purposes and require appropriate confidentiality, security, retention, deletion, and incident-notification measures. Where European or United Kingdom transfer rules apply, we use an applicable adequacy mechanism or contractual transfer safeguards; contact our Privacy Officer for information about the relevant safeguards.
5. Cookies & Browser Storage
ShowUp uses cookies and browser storage, such as local storage and session storage, to provide, secure, and remember settings for the service. This includes authentication and restricted-site access, language preferences, selected metro and other local settings, temporary data for in-progress Rally and Pledge flows, persistent Rally drafts, and referral attribution from shared Rally links.
Referral attribution is retained for up to 14 days. Authentication cookies are retained only as long as needed to keep you signed in. Current first-party preference cookies are configured for up to 30 days. Clerk and Stripe provide authentication and payment features and may set their own cookies or similar technologies as part of those features.
You can block or delete cookies and browser storage through your browser settings. Essential technologies are required for authentication, security, payment features, and saved service settings; blocking them may prevent those parts of ShowUp from working. ShowUp does not use advertising cookies or similar technologies for targeted advertising. If we introduce analytics, advertising, or other non-essential cookies or similar technologies, we will request any consent required by applicable law and provide a way for you to manage or withdraw your preferences.
6. Data Security
We use administrative, technical, and organizational safeguards designed to protect your data, including access controls, authenticated requests, rate limits, encrypted connections, and provider security controls. Access to personal information is limited to personnel and service providers who require it to perform their responsibilities. No method of transmission or storage is completely secure.
7. Your Privacy Rights
Depending on where you live, you may have rights under applicable privacy laws, including the right to:
-
Access the personal information we hold about you.
-
Correct inaccurate personal information.
-
Request deletion of your personal information.
-
Receive a copy of your personal information where required by law.
-
Request restriction of processing where that right applies.
-
Object to processing based on legitimate interests, direct marketing, or other grounds provided by applicable law.
-
Withdraw consent where processing is based on consent, subject to legal or contractual limitations.
Residents of certain jurisdictions, including Canada, Québec, the European Economic Area, the United Kingdom, and certain U.S. states, may have additional rights under applicable law.
If you are in Québec, you have rights under Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, including rights of access and correction, data portability where applicable, withdrawal of consent, and deletion or de-indexation where the legal conditions are met. You also have the rights described above when a decision about you is made exclusively through automated processing. You may raise a concern with our Privacy Officer or file a complaint with the Commission d’accès à l’information du Québec.
We respond within the period required by the law that applies to your request—generally within 30 days under Québec and applicable Canadian law, within one month under EEA and UK law, and within 45 days under many applicable U.S. state laws. A permitted extension may apply for a complex request; if so, we will notify you and explain the extension.
To protect your information, in-account export and deletion requests require an authenticated Clerk session. For requests made by email or through an authorized agent, we may ask you to confirm control of the account or email address and provide information that reasonably matches our records. We use verification information only to process the request and will not ask for your password or complete payment-card number. We may be unable to fulfill a request if we cannot reasonably verify your identity or the agent’s authority.
You may complain to the regulator that applies where you live or where the issue occurred, including the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada where federal law applies, your local EEA supervisory authority, the UK Information Commissioner’s Office, or the applicable U.S. state regulator. We encourage you to contact our Privacy Officer first so we can try to resolve the concern.
ShowUp does not sell your personal information or share it for cross-context behavioral advertising as those terms are defined under applicable U.S. privacy laws.
We will not discriminate against you for exercising your privacy rights, except as permitted by applicable law.
To exercise your privacy rights, contact us at [privacy@showup.fans](mailto:privacy@showup.fans).
8. Lawful Basis for Processing
9. Data Retention
When you delete your account, your direct identifiers (including email address, display name, and location) are removed after a 30-day recovery window. We retain financial and operational records — including pledge history, payment ledger entries, and records needed to resolve disputes or meet legal obligations — for as long as necessary to provide the service, comply with legal obligations, resolve disputes, or enforce our agreements. Financial and tax records may be retained for up to 7 years where required by law. Email-delivery records are retained for up to 90 days. Aggregated demand metrics may be retained for planning and historical reporting. Unless a metric has been irreversibly anonymized so that no person can be identified using information reasonably available to us or another person, we continue to treat it as personal information and apply the applicable retention and protection requirements.
10. Privacy Officer
Plateforme ShowUp inc. is the organization responsible for personal information processed through this platform. Our Privacy Officer can be reached at privacy@showup.fans.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services or legal obligations. We will post the updated version on this page and update the effective date. If changes materially affect your rights, we will provide additional notice where required by law.
Privacy concerns? Reach out to privacy@showup.fans