Privacy Policy

Effective date: June 11, 2026  ·  Last updated: June 11, 2026

CrowdCue ("we," "us," or "our") operates the CrowdCue platform at crowdcue.io. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using CrowdCue, you agree to the practices described here.

1. Who This Policy Covers

CrowdCue serves two types of users:

• Performers — musicians and entertainers who create accounts to manage their request queues.
• Fans — audience members who submit song requests or tips through a Performer's public page. Fans do not create accounts.

2. Information We Collect

From Performers (account holders):

• Name and email address (at registration)
• Password (stored as a secure hash — we never store your plain-text password)
• Profile information: display name, bio, profile photo, banner image, accent color
• Payment information: billing is handled by Stripe — we store only a Stripe customer ID, not card numbers
• Tip payment handles (Venmo, Cash App, PayPal usernames) if you choose to add them
• Twilio API credentials, if you use the SMS retargeting feature (stored encrypted)
• Usage data: song lists, request history, gig session history, analytics

From Fans (audience members):

• Song request text and requester name (required to submit a request)
• Email address — optional, only if the Fan chooses to opt in to updates from the Performer
• Phone number — optional, only if the Fan opts in to SMS notifications during an active gig
• Tip amount and payment method (processed by Stripe, Venmo, Cash App, or PayPal)
• IP address and basic device/browser information (standard server logs)

3. How We Use Your Information

Performer data is used to:

• Operate your account and provide CrowdCue's features
• Process subscription payments through Stripe
• Send transactional emails (account confirmation, password reset) via Resend
• Display your public performer profile to Fans
• Provide analytics and gig history within your dashboard

Fan data is used to:

• Display song requests in the Performer's queue
• Facilitate tip payments through third-party processors
• If opted in: allow the Performer to email or text the Fan about future performances

We do not sell personal data to third parties. We do not use personal data for advertising.

4. Fan Data and Performer Responsibility

Fan email addresses and phone numbers collected through CrowdCue are associated with individual Performer accounts. This data is provided to Performers to contact their own fans — it is not shared between Performers or used by CrowdCue for any other purpose.

Performers are solely responsible for how they use Fan contact data and must comply with all applicable laws, including CAN-SPAM and the Telephone Consumer Protection Act (TCPA). Fans may opt out of communications at any time by replying STOP to any SMS or unsubscribing from any email.

5. Third-Party Services

CrowdCue uses the following third-party services to operate. Each has its own privacy policy.

Service	Purpose	Privacy Policy
Stripe	Subscription billing and card tip processing	stripe.com/privacy
Supabase	Database and file storage	supabase.com/privacy
Resend	Transactional email delivery	resend.com/legal/privacy-policy
Twilio	SMS delivery (Performer's own account — BYOC)	twilio.com/legal/privacy
Render	Application hosting	render.com/privacy

6. Cookies and Local Storage

CrowdCue uses httpOnly cookies to maintain Performer login sessions securely. Access tokens are stored in httpOnly cookies and are never accessible to JavaScript. We do not use tracking cookies or third-party analytics cookies.

7. Data Retention

Performer account data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records).

Fan request and contact data is retained as long as the associated Performer account is active. Performers may delete individual fan records from their dashboard.

8. Data Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), hashed passwords, and httpOnly cookies. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but take reasonable steps to protect your information.

9. Children's Privacy

CrowdCue is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to certain uses of it. To exercise any of these rights, contact us at the address below. We will respond within 30 days.

Fans who wish to be removed from a Performer's contact list should contact that Performer directly, or reply STOP to any SMS message to opt out immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. For material changes, we will notify Performers by email or in-app notice. Continued use of CrowdCue after changes take effect constitutes acceptance of the revised policy.

---