Privacy Policy

1. Introduction

PlugVerse ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile applications, or interact with our services (collectively, the "Service").

Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

• Create an Account: Name, email address, password, role (Artist/Venue/Admin)
• Complete Your Profile: Stage name, bio, location, genres, pricing, availability, social media links, media uploads (photos, videos, audio)
• Post Gigs: Gig details, dates, locations, payment information, requirements, media
• Apply for Gigs: Application details, custom pricing, portfolio materials
• Communicate: Messages sent through our platform, support requests
• Make Payments: Payment method information, billing address, transaction details
• Sign Contracts: Digital signatures, contract terms, agreement details

2.2 Information Automatically Collected

When you use our Service, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, search queries
• Location Data: General location information (city, state) based on IP address or provided location
• Cookies and Tracking Technologies: See Section 7 for details
• Log Files: Access times, error logs, system activity

2.3 Information from Third Parties

We may receive information about you from third-party services:

• Authentication Providers: If you sign in using OAuth (Google, etc.), we receive basic profile information
• Payment Processors: Stripe and other payment processors provide transaction and payment method information
• Social Media: If you connect social media accounts, we may access public profile information

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Create and manage your account
• Facilitate connections between Artists and Venues
• Process payments and transactions
• Generate and manage contracts
• Enable messaging and communication
• Provide customer support

3.2 Platform Improvement

• Analyze usage patterns to improve our Service
• Develop new features and functionality
• Personalize your experience
• Provide recommendations and suggestions

3.3 Communication

• Send service-related notifications (gig applications, messages, payments)
• Send marketing communications (with your consent, which you can opt out of)
• Respond to your inquiries and support requests
• Send important updates about our Service or policies

3.4 Legal and Safety

• Comply with legal obligations
• Enforce our Terms of Service
• Detect and prevent fraud, abuse, or illegal activity
• Protect the rights and safety of our users and third parties
• Respond to legal requests and court orders

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

Your profile information, gig postings, and public content are visible to other users of the platform as intended by the Service's functionality.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment Processors: Stripe and other payment processors to process transactions
• Cloud Storage: Supabase, Azure Blob Storage for data storage and media hosting
• Analytics: Service providers that help us analyze usage and improve our Service
• Email Services: Providers that send emails on our behalf
• Hosting: Vercel and other hosting providers

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government investigations
• Legal proceedings
• To protect our rights or the rights of others

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Storage and Security

5.1 Data Storage

Your information is stored on secure servers provided by our service providers, including Supabase and Azure. Data may be stored in various locations, including the United States and other countries where our service providers operate.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5.3 Data Retention

We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You have the right to access and receive a copy of your personal information.

6.2 Correction

You can update or correct your personal information through your account settings or by contacting us.

6.3 Deletion

You can request deletion of your account and personal information, subject to legal retention requirements.

6.4 Opt-Out

You can opt out of marketing communications by using the unsubscribe link in emails or adjusting your notification preferences in account settings.

6.5 Data Portability

You can request a copy of your data in a structured, machine-readable format.

6.6 Objection and Restriction

You may object to certain processing of your information or request restriction of processing in certain circumstances.

6.7 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information).

6.8 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the rights listed above. Our legal basis for processing your information includes contract performance, legitimate interests, and consent.

To exercise any of these rights, please contact us at privacy@plugverse.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7. Cookies and Tracking Technologies

7.1 Types of Cookies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our Service
• Advertising Cookies: Used to deliver relevant advertisements (if applicable)

7.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately.

9. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you use.

Key Third-Party Services:

• Stripe: Payment processing - see Stripe's Privacy Policy
• Supabase: Database and authentication - see Supabase's Privacy Policy
• Social Media Platforms: If you connect social media accounts

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website and updating the "Last updated" date. We may also notify you via email or through the Service.

Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

PlugVerse
Email: privacy@plugverse.com
Address: [Your Business Address]
Phone: [Your Phone Number]

For data protection inquiries in the EEA, you may also contact your local data protection authority.