Privacy Policy

1. Information We Collect

NextStage collects the following types of information:

• Account Information: Email, display name, password (hashed), date of birth, and role (fan, artist, organizer, venue)
• Ticket Purchases: Payment information (processed securely by Stripe), purchase history, and ticket details
• Relic Data: Generated Relic metadata, traits, and visual assets tied to your tickets
• Usage Data: Pages visited, events viewed, IP address, browser type, and device information
• Event Data: For organizers and venues, event details, attendee lists (for scanning), and sales analytics

2. How We Use Your Information

We use your information to provide and improve the Service, including: processing ticket purchases, generating Relics, displaying your event history and gallery, sending transactional emails (ticket confirmations, password resets), providing customer support, analyzing platform usage to improve features, and preventing fraud and abuse.

3. Information Sharing

NextStage does not sell your personal information. We share data only in the following circumstances:

• Event Organizers: Your display name and ticket details are shared with organizers of events you attend
• Payment Processors: Stripe handles payment processing and has access to your payment information
• Service Providers: Hosting (Render.com), database (Neon), and media storage (Cloudflare R2) providers
• Legal Requirements: We may disclose information if required by law or to protect user safety

4. Public Galleries

Your Relic gallery is publicly viewable by default. Other users can see your display name, Relics, and attended events. You may make your gallery private in account settings (feature coming soon). Event attendance information visible in galleries does not include personal contact information.

5. Data Retention

We retain your account and ticket data for as long as your account is active. If you delete your account, we will anonymize your data within 90 days, though transactional records may be retained for legal and accounting purposes. Relics associated with deleted accounts may remain visible in public archives but will no longer be linked to your identity.

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), secure session management, and PCI-compliant payment processing (Stripe). However, no system is completely secure, and we cannot guarantee absolute security of your data.

7. Cookies and Tracking

NextStage uses session cookies to keep you logged in and analytics to understand platform usage. We do not use third-party advertising cookies. You can disable cookies in your browser, but this may limit functionality.

8. Your Rights

You have the right to:

• Access and download your data
• Correct inaccurate information
• Delete your account and personal data
• Opt out of marketing emails (we only send transactional emails by default)
• Request information about how your data is used

To exercise these rights, contact privacy@getnextstage.com

9. Children's Privacy

NextStage is not intended for users under 13 years of age. We require a valid date of birth during registration and may verify age for certain events. If we discover that a user under 13 has created an account, we will delete it immediately.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Your continued use of NextStage after updates constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or requests, contact us at privacy@getnextstage.com