Privacy Policy

1. Information We Collect

Personal Information

• Account information: email address, name, authentication credentials
• Band/artist profile: band name, description, genre, social media handles
• Social media OAuth tokens: encrypted access tokens for connected platforms

Media Content

• Video uploads: concert footage, interviews, promotional content
• Image uploads: band photos, merchandise images, promotional graphics
• Audio files: music tracks, soundcheck recordings, audio assets
• AI-generated content: transcriptions, captions, viral scores, edited videos

Payment Information

Billing details and transaction history. Payment processing is handled by Stripe; we do not store full payment card details.

Usage and Technical Information

Service usage data, device information, log data, and tour schedule data synced from Ticketmaster and Bandsintown.

2. How We Use Information

• Process and edit video content for multiple social media platforms
• Generate AI captions, transcriptions, and viral scores
• Detect viral clips from uploaded concert and interview footage
• Publish content to connected social media accounts on your behalf
• Manage your subscription and track usage
• Send service notifications and respond to support requests
• Improve AI content processing and develop new features
• Comply with legal obligations and protect against fraud

3. Information Sharing

We do not sell your personal information. We share data only with:

• Stripe: Secure payment processing
• Supabase: Authentication and cloud storage
• OpenAI: Audio transcription (Whisper) and caption generation (GPT)
• Google: Gemini API for viral scoring, YouTube OAuth
• Social media platforms: When you approve content for publishing (Instagram, TikTok, YouTube, Facebook, X)

4. Data Retention

• Account information: until you delete your account + 30 days
• Uploaded and processed content: until you delete it
• Payment information: as required by law (typically 7 years)
• Usage data: anonymized for service improvement

5. Data Security

We protect your data with encryption in transit (TLS) and at rest, row-level security on all database tables, time-limited signed URLs for media access, and encrypted storage of social media OAuth tokens.

6. Your Privacy Rights

Depending on your location, you may have the right to access, correct, delete, port, restrict, or object to processing of your personal information. Contact privacy@tourio.ai to exercise these rights.

7. Cookies

We use essential cookies (Supabase authentication), preference cookies (theme and layout settings), and anonymized analytics cookies. See our full Cookie Policy for details.

8. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and sending email notification.

10. Contact Information

We will respond to requests within 30 days as required by applicable law.