Privacy Policy
Last updated: August 18, 2026
Effective date: August 18, 2026
1. Overview
At ShowUp, we respect your privacy and are committed to protecting your personal data. ShowUp allows users who are at least 13 years old, or the minimum age permitted by applicable law if higher, to use non-commercial features such as browsing the Platform, creating an account, following Artists, joining Rallies, and receiving updates. Certain financial features, including Pledges and Ticket purchases, are restricted to users who have reached the age of majority in their jurisdiction under our Terms of Service. Privacy choices and consent govern how we collect and use personal information; they do not determine whether you are eligible to make a Pledge. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Platform.
This Privacy Policy governs how ShowUp collects, uses, and discloses personal information. Our Terms of Service govern your use of the Platform.
2. Information We Collect
2.1 Personal Information
We collect information you provide directly to us, including your email address, generated handle, optional display name, selected city or region, rally and pledge activity, preferences, payment method information, and payment history. You can sign in with Google or email through Clerk. Clerk provides ShowUp with your email address and Clerk user ID so we can create and secure your account, sign you in, prevent abuse, and support account-related requests. Payment details are processed by Stripe; ShowUp does not store your complete card number or security code.
2.2 Location Data
To facilitate the Tour on Demand model, we collect the city or region you select for a rally. When you grant browser location permission, your device may use the returned latitude and longitude only on the device to suggest a city or region and, where local-demand features need it, convert the point to one broad local area (about 5 km²). The raw coordinate never leaves your device: ShowUp does not receive or store it, send it to a geocoding provider, or include it in request URLs, headers, analytics, logs, session replay, performance telemetry, or crash reports. We do not use IP geolocation to determine your rally market.
A rally stores its selected city or region. A rally membership may also store one optional broad local area for thresholded local-demand features; a fan who selects a city or region manually may have no broad local area. We do not store raw latitude or longitude, postal code, street address, venue-like point of interest, reverse-geocoder result, or a more precise local-area value for fan activity. Your browser may keep your selected city or region as a service setting, but it does not keep a raw device coordinate for this feature.
2.3 Public Visibility & Anonymity
Your email address, payment details, account identifiers, device-location source, and broad local area are not displayed publicly or returned to other fans. Depending on your settings and the feature, other people may see your handle, optional display name, recognition badges, activity such as joining or pledging to a rally, and city- or region-level demand summaries. ShowUp shows local-demand information only as thresholded aggregates; it does not reveal another fan’s selected city or region, broad local area, or location-linked contribution through profiles, pledges, recognition, or leaderboards. Standard internal operator tools do not show a fan’s broad local area or device-location source. Authorized support may see the intentional rally or pledge market only when needed to operate or support that record. Attendee lists are hidden by default and can be enabled in Account Settings. ShowUp generates a default profile avatar for public profiles.
2.4 Technical & Security Information
We may collect IP address, browser or device information, request metadata, diagnostic information, and audit logs when you use the Platform. We use this information to operate the service, prevent fraud and abuse, troubleshoot failures, and protect accounts. We do not use it for targeted advertising.
2.5 Automated Analysis and Profiling
We analyze your selected location, Artist and Rally activity, Pledge amount and status, Companion Intent, referral activity, and timing information to infer interests and measure demand, momentum, and geographic density. This analysis begins when you sign in and use the relevant features, such as joining a Rally or making a Pledge; browser-derived location is used only when you grant browser permission. Automated calculations rank content, generate recommendations and demand metrics, and support pricing recommendations. Those calculations do not by themselves charge you or complete a Ticket purchase. Automated eligibility, allocation, and waitlist rules can determine whether a Ticket is offered or reserved and may significantly affect your access to a Ticket. If ShowUp makes a decision about you exclusively through automated processing, we will notify you no later than when we communicate the decision. You may ask which personal information was used, the main reasons and factors that led to the decision, request correction of that information, and submit observations to a team member able to review the decision by contacting our Privacy Officer.
2.6 Children’s Privacy and Minimum Age
ShowUp is not directed to children under 13 or the higher minimum age required by applicable law, and we do not knowingly collect personal information from them. In Québec, we do not knowingly collect personal information directly from a child under 14 without the consent required by law, unless the collection is clearly for the child’s benefit as permitted by law. Pledges, saved payment methods, Ticket purchases, and Ticket transfers or resales are not available to minors: before using these features, a user must accept the Terms of Service and represent that they have reached the age of majority and have legal capacity. If we learn that a person below the applicable minimum age created an account or provided personal information without valid authorization, we will disable the account and delete or otherwise lawfully dispose of the information, except where retention is required by law. A parent or guardian who believes this has happened should contact privacy@showup.fans.
3. How We Use Your Information
We collect and use personal information only as reasonably necessary for the following purposes:
-
Accounts and Service Delivery: To create and secure accounts, remember your settings, provide support, and operate rallies, pledges, review decisions, tickets, transfers, and other features you request.
-
Payments and Ticketing: To save payment methods through Stripe, process authorized payments, refunds, and disputes, maintain transaction records, allocate tickets, and deliver confirmed shows.
-
Demand Analysis and Planning: To combine rally and pledge city or region data, optional broad local areas, Companion Intent, and timing data into counts, totals, ranges, demand curves, momentum and density scores, discovery rankings, and recommendations used to plan tours, shows, and capacity. Local-demand outputs are thresholded aggregates. The metrics we share generally omit direct account identifiers, but the underlying records remain linked to accounts. We treat information as anonymous only when it has been irreversibly anonymized in accordance with applicable law.
-
Communication: To send transactional messages about your account, rallies, pledges, payments, tickets, refunds, and cancellations, plus optional momentum and show updates according to your notification preferences.
-
Security and Fraud Prevention: To authenticate requests, enforce access controls and rate limits, detect misuse, investigate suspicious activity, protect accounts, and maintain audit records.
-
Operation and Improvement: To diagnose failures, monitor service reliability and email delivery, understand whether features work as intended, and improve the Platform. ShowUp does not currently use advertising analytics or personal information for targeted advertising.
-
Legal and Business Obligations: To comply with accounting, tax, privacy, consumer-protection, payment, and other legal obligations; respond to lawful requests; resolve disputes; and enforce our agreements.
4. Data Sharing
We do not sell your personal data. We share only the information needed to provide the service, process payments, deliver communications, protect ShowUp, or complete a confirmed show:
Show Materialization
When a show is confirmed and a ticket is issued to you, the event promoter and venue may receive the information reasonably necessary to operate the event, such as your name, contact information, ticket identifier, attendance status, and any information required for customer support or venue access. We may also disclose information when required by law or to protect rights, safety, and platform integrity.
Service Providers
We use the following service providers to operate ShowUp. They process personal information only as needed to provide their services to us and are bound by contracts that limit how they may use the data.
• Clerk — account authentication (email address, user ID, sign-in and session information)
• Stripe — payment processing, refunds, disputes, and fraud controls (payment details entered in Stripe’s fields, customer and payment IDs, transaction information). ShowUp does not store complete card numbers or security codes.
• Resend — email delivery (recipient email address, message content, and delivery events)
• Cloudflare — website delivery, request security, Turnstile abuse protection, and (when enabled) R2 object storage for artist images
• Neon — managed PostgreSQL database (account, rally, pledge, payment-reference, ticket, notification, and related records)
• Contabo — VPS hosting for the API, workers, and self-hosted logging/monitoring. We do not use a separate third-party analytics or error-monitoring SaaS.
• Photon by Komoot / Nominatim / Google Maps Platform — city and region search and, when configured, Places autocomplete; raw device coordinates are not sent to these providers for rally or pledge activity
• Spotify — only when an artist representative chooses to link a Spotify account
We do not use an advertising analytics provider or a third-party support-ticketing platform. Support requests are handled by ShowUp through email.
International Processing
The production deployment for ShowUp uses a Contabo VPS in the US East region and a Neon database in the AWS US East 2 (Ohio) region. Cloudflare, Clerk, Stripe, Resend, Photon, Nominatim, Google, and Spotify may process information through infrastructure in the United States and other countries, including outside Québec and Canada. Information processed in another country is subject to that country’s laws and may be accessible to courts, law-enforcement, or national-security authorities through lawful process.
This policy does not represent that a particular provider agreement, deletion commitment, or incident-notification term has been verified. Those terms depend on the applicable account, service plan, and signed vendor documentation. Before using a provider for personal information, ShowUp must maintain and review the applicable agreement or data-processing addendum, the provider’s retention/deletion terms, incident-notice terms, subprocessors, processing locations, and any required cross-border assessment or transfer safeguard. Contact our Privacy Officer for the current record for a provider or transfer.
5. Cookies & Browser Storage
ShowUp uses cookies and browser storage, such as local storage and session storage, to provide, secure, and remember settings for the service. This includes authentication and restricted-site access, language preferences, selected city or region and other local settings, temporary data for in-progress Rally and Pledge flows, persistent Rally drafts, and referral attribution from shared Rally links.
Referral attribution is retained for up to 14 days. Authentication cookies are retained only as long as needed to keep you signed in. Current first-party preference cookies are configured for up to 30 days. Clerk and Stripe provide authentication and payment features and may set their own cookies or similar technologies as part of those features.
You can block or delete cookies and browser storage through your browser settings. Essential technologies are required for authentication, security, payment features, and saved service settings; blocking them may prevent those parts of ShowUp from working. ShowUp does not use advertising cookies or similar technologies for targeted advertising. If we introduce analytics, advertising, or other non-essential cookies or similar technologies, we will request any consent required by applicable law and provide a way for you to manage or withdraw your preferences.
6. Data Security
We use administrative, technical, and organizational safeguards designed to protect your data, including access controls, authenticated requests, rate limits, encrypted connections, and provider security controls. Access to personal information is limited to personnel and service providers who require it to perform their responsibilities. No method of transmission or storage is completely secure.
7. Your Privacy Rights
Depending on where you live, you may have rights under applicable privacy laws, including the right to:
-
Access the personal information we hold about you.
-
Correct inaccurate personal information.
-
Request deletion of your personal information.
-
Receive a copy of your personal information where required by law.
-
Request restriction of processing where that right applies.
-
Object to processing based on legitimate interests, direct marketing, or other grounds provided by applicable law.
-
Withdraw consent where processing is based on consent, subject to legal or contractual limitations.
Residents of certain jurisdictions, including Canada, Québec, the European Economic Area, the United Kingdom, and certain U.S. states, may have additional rights under applicable law.
If you are in Québec, you have rights under Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, including rights of access and correction, data portability where applicable, withdrawal of consent, and deletion or de-indexation where the legal conditions are met. You also have the rights described above when a decision about you is made exclusively through automated processing. You may raise a concern with our Privacy Officer or file a complaint with the Commission d’accès à l’information du Québec.
We respond within the period required by the law that applies to your request—generally within 30 days under Québec and applicable Canadian law, within one month under EEA and UK law, and within 45 days under many applicable U.S. state laws. A permitted extension may apply for a complex request; if so, we will notify you and explain the extension.
To protect your information, in-account export and deletion requests require an authenticated Clerk session. For requests made by email or through an authorized agent, we may ask you to confirm control of the account or email address and provide information that reasonably matches our records. We use verification information only to process the request and will not ask for your password or complete payment-card number. We may be unable to fulfill a request if we cannot reasonably verify your identity or the agent’s authority.
You may complain to the regulator that applies where you live or where the issue occurred, including the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada where federal law applies, your local EEA supervisory authority, the UK Information Commissioner’s Office, or the applicable U.S. state regulator. We encourage you to contact our Privacy Officer first so we can try to resolve the concern.
ShowUp does not sell your personal information or share it for cross-context behavioral advertising as those terms are defined under applicable U.S. privacy laws.
We will not discriminate against you for exercising your privacy rights, except as permitted by applicable law.
To exercise your privacy rights, contact us at privacy@showup.fans.
8. Lawful Basis for Processing
9. Data Retention
You cannot delete a rally. ShowUp retains past rallies, including their artist, region, and related historical information, to provide the service and support historical reporting. A pledge is not deleted when you opt out or receive a refund; it remains part of the financial and operational record. A pledge inherits its rally city or region and does not collect a new device location.
When you request account deletion, ShowUp keeps your account available during the account-recovery period. At final account deletion, we remove direct identifiers from the user profile and delete the account-linked broad local area and any device-location source data. Required pledge, rally, payment, and tax records may retain their rally or show reference, including the selected city or region, under the applicable retention schedule, but not a device-derived broad local area, coordinate, or place-detail field. Financial and tax records may be retained for up to 7 years where required by law.
ShowUp deletes completed email-webhook event records after 90 days; this is not a representation of Resend’s own retention period. We have not yet implemented a complete retention schedule for inactive accounts, ordinary application logs, audit records, or provider-held data. Aggregated demand metrics may be retained for planning and historical reporting only when they are pre-aggregated, thresholded, and not account-linked. Unless a metric has been irreversibly anonymized so that no person can be identified using information reasonably available to us or another person, we continue to treat it as personal information and apply the applicable retention and protection requirements.
10. Privacy Officer
Plateforme ShowUp inc. is the organization responsible for personal information processed through this platform. Our Privacy Officer can be reached at privacy@showup.fans.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services or legal obligations. We will post the updated version on this page and update the effective date. If changes materially affect your rights, we will provide additional notice where required by law.
Privacy concerns? Reach out to privacy@showup.fans