CROWDCONTROL

Privacy Policy

Effective Date: April 26, 2026
Operated by SourceSight, LLC

SourceSight, LLC (“Company,” “we,” “us,” or “our”) operates CrowdControl (the “Platform”), a social networking service for live music fans. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform. By using CrowdControl, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide.

Account information: Name, email address, phone number, and profile photo when you create an account.
Profile information: Any additional information you add to your profile, such as your bio, favorite artists, or location.
User content: Photos, reviews, setlist contributions, messages, and other content you post on the Platform.
Communications: Messages you send to other users, support requests, and feedback you provide to us.
Event responses: Your attendance status (going, interested) for events on the Platform.

1.2 Information Collected Automatically.

Device information: Device type, operating system, browser type, and device-specific tokens used solely to deliver push notifications you have opted into. We do not use advertising identifiers (IDFA/IDFV) for tracking.
Usage data: Pages visited, features used, interactions with content, and timestamps of activity.
Log data: IP address, referral URLs, and error logs.
Cookies and similar technologies: Session cookies for authentication and preferences. We do not use third-party advertising cookies.

1.3 Information From Third Parties.

Invites: If an existing user invites you by email or phone number, we receive that contact information for the purpose of delivering the invitation.
Third-party sign-in: If you sign in via a third-party service, we may receive your name, email, and profile photo from that service.

2. How We Use Your Information

We use the information we collect for the following purposes:

Provide, operate, and maintain the Platform
Authenticate your identity and secure your account
Personalize your experience, including event recommendations based on artists you follow
Facilitate connections between users (friends, groups, invites)
Send transactional communications, such as sign-in links, verification codes, and invite notifications
Send push notifications about activity directly involving you — chat messages from friends, group invites, event announcements for artists you follow, and presale codes for shows you have expressed interest in. We do not send marketing or promotional push notifications.
Respond to your support requests and feedback
Monitor and analyze usage patterns to improve the Platform
Detect, prevent, and address fraud, abuse, and security issues
Comply with legal obligations

We do not sell your personal information. We do not use your data for targeted advertising.

3. How We Share Your Information

3.1 With Other Users. Your profile name, photo, and activity (such as event attendance and group membership) may be visible to other CrowdControl users based on your privacy settings and the visibility of the content.

3.2 Service Providers. We share information with third-party service providers who assist us in operating the Platform, including cloud hosting (Amazon Web Services), database services (Supabase), email delivery, and SMS delivery. These providers are contractually required to protect your data and may only use it to provide services to us. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

3.3 Push Notification Delivery. We deliver push notifications through Apple Push Notification service (APNs) for iOS, Firebase Cloud Messaging (FCM) for Android, and standard Web Push for browsers. The notification text — for example, a sender’s name and a preview of their message — is transmitted to these services in order to deliver the notification to your device.

3.4 Bot Protection (reCAPTCHA). We use Google reCAPTCHA on our sign-in page to protect against automated abuse. When you use this page, reCAPTCHA may collect hardware and software information (such as device and application data) and send it to Google for analysis. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service. We do not use reCAPTCHA to track you across other applications or websites.

3.5 Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.6 Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Storage and Security

Your data is stored on servers located in the United States, hosted by Amazon Web Services (us-east-1 region). We implement industry-standard security measures, including:

Encryption of data in transit (TLS/HTTPS)
Encryption of sensitive data at rest
Secure, httpOnly session cookies
Hashed verification codes (never stored in plain text)
Rate limiting on authentication and verification endpoints

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law or to resolve disputes. Aggregated, anonymized data that does not identify you may be retained indefinitely.

6. Your Rights and Choices

6.1 Access and Update. You can access and update your profile information at any time through your account settings.

6.2 Delete Your Account. You can delete your account through your profile settings. Account deletion removes your profile, content, and personal data from the Platform, subject to our data retention practices.

6.3 Opt Out of SMS. You can opt out of SMS messages at any time by replying STOP to any message, switching to email sign-in, or contacting us. See our SMS Terms for details.

6.4 Cookies. We use only essential cookies for authentication and session management. We do not use advertising or tracking cookies.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to know: You may request the categories and specific pieces of personal information we have collected about you.
Right to delete: You may request deletion of your personal information.
Right to correct: You may request correction of inaccurate personal information.
Right to opt out: We do not sell or share your personal information for cross-context behavioral advertising.
Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at legal@crowdcontrol.us. We will verify your identity before processing your request.

8. Children's Privacy

CrowdControl is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us at legal@crowdcontrol.us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the Effective Date above and, for significant changes, by posting a notice on the Platform or sending you a notification. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

10. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

CrowdControl / SourceSight, LLC
Website: crowdcontrol.us
Privacy inquiries: legal@crowdcontrol.us

← Back to About