Privacy Policy
Effective: April 24, 2026
CrowdVolt, Corp (referred to herein as “CrowdVolt”, “we”, “our”, or “us”) and its affiliates recognizes the importance of protecting the personal information we may collect from customers, users, visitors and any other individual or entity (“Users”, “you”, or “your”). This Privacy Policy applies to data collection and privacy practices of CrowdVolt and when we collect personal information through your use of the website, www.CrowdVolt.com, the mobile application, and other CrowdVolt-related sites where this Privacy Policy is located (each, a “Site” and collectively the “Sites”), through our social media pages that we control, through email messages that we may send to you, when you reach out to us via email or a phone call, and when you purchase a ticket(s) (the “Services”). Please note that this Privacy Policy excludes services that state that they are offered under a different privacy policy.
CrowdVolt is the data controller of the personal information of our United States and European visitors accessing and using the Sites and Services.
Specifically, our Privacy Policy covers the following topics:
- Site User Agreement
- Information We Collect
- Cookies and Similar Technologies
- How We Use Personal Information We Collect
- Our Legal Basis for Collecting Personal Information
- When You Choose Not to Provide Personal Information
- Our Retention of Your Personal Information
- Disclosing Personal Information
- Identity Verification and Fraud Prevention
- Sale of Personal Information
- Privacy Rights and Choices
- Jurisdiction-Specific Notices
- Changing or Deleting Your Account Information
- Our Opt-in/Opt-out Policy Relating to Emails and Text Messages
- Third Party Links
- Connected Music Services
- International Transfers
- How We Protect Personal Information
- Children's Privacy
- “Do Not Track” Signals
- Changes to this Privacy Policy
- How to Contact Us
Please familiarize yourself with our privacy practices and let us know if you have any questions. By using the Sites, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Sites.
For certain Services, such as giveaways, offered by CrowdVolt, you must be at least 18 years old. If you are a legal resident of the state of Washington, you may not use certain Services.
If you have any questions or comments about this Privacy Policy, please submit a request to [email protected].
Residents in the European Economic Area ("EEA"), United Kingdom ("UK"), Switzerland, California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia should refer to the body of this Privacy Policy as well as the "Privacy Rights and Choices" and the "Jurisdiction-Specific Notices" sections below for additional information that may be applicable to them.
Site User Agreement
By accessing or using the Sites in any manner, you also agree to be bound by CrowdVolt’s User Agreement or the agreement of any related services (the “Agreement”). Please read the Agreement carefully. If you do not accept all of the terms and conditions contained in or incorporated by reference into the Agreement, please do not use the Sites.
Information We Collect
We collect information, including personal information, to provide better Services to all our users and visitors. We use the term “Personal Information” to refer to any information that identifies, relates to, or describes an identified or identifiable natural person. Common examples of Personal Information include: full name, email address, information about your device, and certain metadata.
The Personal Information which we collect includes, but is not limited to, the following circumstances and data elements:
- If you express an interest in obtaining additional information about our Services, request customer support, use the "Help" or similar features on our Sites, register to use our Sites or Services, or download certain content, we may require that you provide to us your personal identifiers and contact information, such as your name, your organization's name, phone number, or email address, and in some instances, you may elect to provide us with location and address information;
- When you set up an account, CrowdVolt collects your personal identifiers (such as your name and email address), contact information (such as your phone number), any photographs you upload, or if you integrate your account with Google, we will copy your Google photo to your CrowdVolt account;
- When you refer a friend to our Sites or Services, we may collect the email of the individual you are referring and we will use their email address to invite them to CrowdVolt;
- If you call us, we will collect the information you provide during the call; we may also record phone calls, for quality and training purposes;
- If you report a problem or have a question about our Services, you may provide us with contact information, such as a phone number or email address;
- If you use and interact with our Sites or emails, we automatically collect information about your device and your usage of our websites or emails through cookies, web beacons or similar technologies, including Internet or other electronic network activity information (such as Internet Protocol (IP) addresses or other identifiers); please see the “Cookies & Similar Technologies” section, below for more information;
- If you voluntarily submit certain information to our Sites or Services, such as filling out a survey about your user experience or participating in promotional activities (such as contests, online campaigns, online programs, sweepstakes, prize draws), we collect the information you have provided as part of that survey and promotional activity;
- CrowdVolt may collect information about your location when you use our Sites and Services and uses such information for anti-fraud purposes; please see the "Cookies & Similar Technologies" section below for more information;
- We also may supplement the information we collect from you with information obtained from third parties or public sources; and
- When you use our Services, we may collect inferences drawn from the Personal Information collected, as described above.
If you provide us or our service providers with any Personal Information relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Privacy Policy. If you believe that your Personal Information has been provided to us improperly, or to otherwise exercise rights you may have relating to your Personal Information, please contact us by using the information set out in the “How to Contact Us” section below.
Business Contacts: We may receive your contact information, such as your personal identifiers (including your name, telephone number, and email address) and/or professional or business-related information (including your business address), through our online or offline interactions with you, such as when we work together on a project or discuss opportunities to work together. We may send you emails or call you with information about our business dealings, news, or marketing information to communicate with you for business purposes.
We obtain the categories of Personal Information listed above from the following categories of sources:
- Directly from our customers or their agents. For example, payment information for concerts or sporting events tickets that our customers purchase from us.
- Indirectly from our customers or their agents. For example, through information we collect from our customers in the course of providing Services to them.
- Directly and indirectly from activity on our Site (www.CrowdVolt.com). For example, from website usage details that are collected automatically. In addition, like many companies, we use “cookies” which are small text files a website can use to recognize repeat users, facilitate the user’s ongoing access to and use of the site and to track usage behavior of, for example, the webpages you visit.
- From social media websites, such as Facebook, Twitter, LinkedIn, YouTube, Instagram, and Pinterest.
- From third parties that interact with us in connection with the services we perform.
Cookies and Similar Technologies
We and our partners use various technologies to collect and store information when you visit one of our Sites or Services, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store personal identifiers (such as your IP address), Internet or other electronic network activity information (such as your browser characteristics, device IDs and characteristics, operating system version, and language preferences) and information concerning your usage of our Sites (including the link you used to reach a given webpage) when you interact with services from our partners, such as advertising services. Please see our Cookie Policy for more details.
The technologies we use for this automatic data collection may include:
Cookies. A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our services. For more information about our use of cookies, including details on how to opt-out of certain cookies, please see our Cookie Policy.
Web Beacons. Pages of our services or our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count Users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
Clickstream Data. Clickstream data is information collected by our computers when you request Web pages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular, what type of visitors in the aggregate are interested in particular kinds of content on the Sites.
Location Data. CrowdVolt may collect information about your location when you use our Sites and Services. Your location can be determined by: GPS, IP address, and information about things near your device, such as Wi-Fi access points and cell towers. When you use our Services via a wireless device, we may solicit your permission to collect your location data. Some features within our application may only function upon confirmation of your location, and therefore such features will not be available if you choose not to provide your location data to us. The specificity of the location data collected may depend on a number of factors, including the device you are using (e.g. laptop, smartphone or tablet) and how you are connected to the Internet (e.g., via cable broadband connection, WiFi). If you enable location services for our mobile application, we may collect location data periodically as you use or leave open our mobile application. We may associate such location data with Personal Information you provide to us. Depending on the platform you use to access our mobile application (e.g., Apple’s iOS, Google’s Android), you may be able to control whether location data is collected from within “Settings” or other controls on your wireless device or the mobile application.
How We Use Personal Information We Collect
We use your Personal Information in ways that are compatible with the purposes for which it was collected or authorized by you, including for the following purposes:
- To present, operate or improve the Site and Services, including analysis of Site activity;
- To inform you about Services and products available from CrowdVolt;
- To authorize access to our Sites and Services;
- To validate your identity or verify communications from you;
- To offer and administer programs;
- To customize or tailor your experience of the Services;
- To communicate about, and administer your participation in, special programs, surveys, contests, online campaigns, online programs, sweepstakes, prize draws and other offers or promotions, and to deliver pertinent emails;
- To send you confirmations, updates, security alerts, and support and administrative messages and otherwise facilitate your use of, and our administration and operation of, the Services;
- For marketing purposes, including but not limited to, facilitating interest-based advertising, creating custom audiences to target online and mobile advertising, sending integrated marketing messages across channels and devices, personalizing email marketing that we send to you, sending you other promotional materials, and notifying you about special promotions, offers, events or opportunities that may be of interest to you;
- To improve our customer service, conduct customer satisfaction, market research, and quality assurance reviews;
- To respond to and support users regarding their use of the Sites and Services;
- To process applications for employment that you submit through the Sites;
- To administer general recordkeeping;
- To comply with all applicable legal requirements;
- To investigate possible fraud or other violations of our Agreement or this Privacy Policy and/or attempts to harm our users or visitors;
- For any other purpose that is disclosed to you at the point of collection of the Personal Information, for any purpose for which you provide your prior consent, or for any other lawful purpose.
Any information that we collect through SMS marketing campaigns will not be shared with third parties or their affiliates for marketing purposes. This does not apply to information shared with mobile network operators (wireless carriers) and identity- verification service providers as described in the “Identity Verification and Fraud Prevention” section below, which is necessary to protect your account and prevent fraud.
Except where prohibited by applicable law or regulation, we may combine information collected through one source with information obtained through other resources. We will treat any information that we combine with your Personal Information as Personal Information pursuant to this Privacy Policy.
Our Legal Basis for Collecting Personal Information
Whenever we collect Personal Information from you, we may do so on the following legal bases:
- Your consent to such collection and use;
- Out of necessity for the performance of an agreement between us and you, such as your agreement to use our Services or your request for Services;
- Our legitimate business interest, including but not limited to the following circumstances where collecting or using Personal Information is necessary for:
- Intra-organization transfers for administrative purposes;
- Product development and enhancement, where the processing enables CrowdVolt to enhance, modify, personalize, or otherwise improve our Services and communications for the benefit of our visitors, and to better understand how people interact with our Sites;
- Fraud detection and prevention;
- Enhancement of our cybersecurity, including improving the security of our network and information systems;
- General business operations and diligence.
Provided that, in each circumstance, we will weigh the necessity of our processing for the purpose against your privacy and confidentiality interests, including taking into account your reasonable expectations, the impact of processing, and any safeguards which are or could be put in place. In all circumstances, we will limit such processing for our legitimate business interest to what is necessary for its purposes.
When You Choose Not to Provide Personal Information
Your provision of Personal Information is required in order to use certain Services and programs. In some instances, if you do not provide such Personal Information, you may not be able to access and use our Services, or parts of our Services.
Our Retention of Your Personal Information
We use and retain your Personal Information for as long as necessary to fulfill the purpose for which it is being processed, to carry out legitimate business interests, as well as on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiry of the applicable retention periods, your Personal Information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of such data.
The criteria we use to determine the retention period is as follows:
- whether there are contractual or legal obligations that exist that require us to retain the data for a period of time;
- whether there is an ongoing legal claim that relates to any business (or otherwise) relationship you have with us, or that is otherwise related to your relationship with us;
- whether any applicable law, statute, or regulation allows for a specific retention period; and
- whether the Personal Information is considered to be sensitive Personal Information, in which case a shorter retention period generally would be applied.
These criteria may also mean we adjust the period of time we retain the categories of Personal Information detailed above.
Disclosing Personal Information
CrowdVolt may disclose any of the categories of Personal Information listed above for our business and commercial purposes as described below and for any other purpose disclosed when you provide the information.
To our affiliates and service providers. Specifically, we will disclose your Personal Information to the following for a business purpose:
- Service providers we use to support our business, including without limitation those performing core services (such as billing, credit card processing, customer support services, customer relationship management, accounting, auditing, processing insurance claims, administering sweepstakes, surveys, advertising and marketing, analytics, email and mailing services, data storage, and security) related to the operation of our business and/or the Services, the processing and fulfillment of your orders, and making certain functionalities available to our users; and
- Affiliates, and any successors thereto, in the normal course of our business operations, such as to communicate with you and to promote and provide our Services. In this regard, Personal Information may be disclosed to one of our affiliates for use in providing a service to us.
To our business partners and third parties. We will disclose your Personal Information to the following for a business or commercial purpose:
- Strategic business partners who provide goods, services, and offers that enhance your experience, or that we believe will be of interest to you;
- Third parties to whom you or your agents authorize us to disclose your Personal Information in connection with the Services we provide to you;
- External providers and event providers when you use the Services to purchase or sell tickets (such as when you purchase a ticket, we may disclose your Personal Information with the seller of the ticket in order for the seller to complete the transaction, and we may disclose your Personal Information with the teams you see, the league or organization that sanctioned the game, a concert promoter, and/or the operator of the venue or facility that hosted the event);
- Third parties to assist in processing your payment with the seller, or a payment to you, if you are the seller. These third parties may use your Personal Information to fulfill your ticket purchase, for analytics, for customer service, offering you other products or services, and other legitimate business uses;
- Commercial providers, including independent sellers and resale partners.
For legal reasons. Specifically, we will disclose Personal Information with companies, organizations, or individuals outside of CrowdVolt if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:
- Fulfill any purpose for which you provide it;
- Meet any applicable law, regulation, legal process, or enforceable governmental request;
- Enforce applicable Agreement, including investigation of potential violations;
- Detect, prevent, or otherwise address fraud, security, or technical issues; and
- Protect against harm to the rights, property, assets, or safety of CrowdVolt, our users or the public, content found on the Services, or to protect the Services from unauthorized use or misuse, as required or permitted by law.
We attempt to notify you about legal demands for your Personal Information when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague, or lack proper authority, but we do not promise to challenge every demand.
Merger, sale, or other asset transfer. We will disclose your Personal Information to facilitate a business transfer, such as to a buyer or other successor in the event of merger, acquisition, consolidation, divestiture, change in control, dissolution, or other sale or transfer of some or all of CrowdVolt’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by CrowdVolt about its users will be among the assets to be transferred, and any such successor may use your information for the same purposes set forth in the Privacy Policy.
Consent. We will disclose your Personal Information when we obtain your consent to do so.
Identity Verification and Fraud Prevention
To protect your account and prevent fraud, we share limited information — including your mobile phone number and device identifiers — with our identity-verification service provider, Twilio Inc., and with your mobile network operator (wireless carrier). This data is used solely to (a) silently confirm that you possess the mobile device associated with your account, (b) detect SIM-swap fraud, and (c) prevent unauthorized account access at sign-up, login, password reset, and high-risk transactions such as payouts or payment-method changes.
The mobile network operator returns only the verification result (success or failure and, where applicable, a SIM-swap signal) to Twilio, which forwards it to CrowdVolt. We retain only the verification outcome and a hashed reference; no other carrier data is stored. This sharing is necessary to provide the security features of our Services and is not used for marketing purposes. For more information about how these providers handle data, see Twilio’s Privacy Notice and the privacy policy of your mobile carrier.
By providing your mobile number to CrowdVolt, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to CrowdVolt or its service provider for the duration of your business relationship, solely to help identify you or your wireless device and to prevent fraud.
Sale of Personal Information
We do not sell information, as this term is used under California law, except as set forth in our cookie disclosures. See the Jurisdiction-Specific Notices section below for more information.
Privacy Rights and Choices
Certain jurisdictions have specific legal requirements and grant privacy rights with respect to Personal Information, and we will comply with restrictions and any requests you submit as required by applicable law. If you are a:
- California resident, see the "California Residents" section below for additional information as to your rights and to how to exercise those rights; or
- Resident of the EEA, Switzerland, or the UK, see the “EEA, Switzerland, and UK Residents” section below for additional information as to your rights and to how to exercise those rights.
Nevada residents have the right to opt out of the sale of certain pieces of their information to third parties who will license or sell their information to others. However, CrowdVolt does not sell Personal Information as contemplated by Nevada law.
If you are a resident of one of the U.S. states listed below, you have one or more of the following rights: (1) to request additional information about our data collection, use, disclosure, and sales practices in connection with your Personal Information; (2) to request the specific Personal Information collected about you; (3) to request the deletion of the Personal Information we have about you, with exceptions; (4) to request a restriction on certain processing of Personal Information; (5) to request correction of inaccurate information; and (6) to opt-out of the processing of Personal Information for the purpose of “profiling” in furtherance of decisions that produce legal or similarly significant effects. CrowdVolt engages in profiling in furtherance of decisions that produce legal or similarly significant effects. You may also have the right to not be discriminated against for exercising your privacy rights. If you are a resident of one of the following U.S. states, you have one or more of these rights:
Colorado | Connecticut | Delaware | Iowa |
Maryland (as of Oct. 1, 2025) | Minnesota (as of July 31, 2025) | Montana | Nebraska |
New Hampshire | New Jersey | Oregon | Tennessee (as of July 1, 2025) |
Texas | Utah | Virginia |
If you are located outside that jurisdiction and seek to exercise your rights under the law of another jurisdiction, please contact us by emailing [email protected].
You or, depending on your state of residence, your authorized agent may submit a request regarding your Personal Information by:
- Email: [email protected]
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. When you make a request, we may require that you provide information and follow procedures so that we can verify your identity (and the applicable jurisdiction). The verification steps we take may differ depending on your jurisdiction and the request. Where possible, we will attempt to match the information that you provide in your request to information we already have on file to verify your identity. If we are able to verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us do so.
We will respond to your request within the time period required by applicable law. However, we may not always be able or required to comply with your request, in whole or in part, and we will notify you in that event.
Jurisdiction-Specific Notices
California Residents
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA"), California residents have specific rights regarding their Personal Information. This section describes Californians’ rights and explains how California residents can exercise those rights.
Information Collected Related to California Residents
During the last twelve (12) months, we have collected the following categories of Personal Information from consumers. Please see our Cookie Policy for information about the collection and use of Personal Information by third-parties who process information collected by cookies and related technologies that we permit them to use on the Sites. We do not seek to collect any "sensitive personal information" (as defined in the CCPA).
| Category (* may constitute "sensitive personal information" under the CCPA) | Type of Identifiers We Collect | Criteria used to determine retention periods | Sold or Shared | Disclosed to |
|---|---|---|---|---|
Identifiers. | First and last name, unique personal identifier, online identifier, date of birth, Internet Protocol address, email address, account name, username. | The duration of our relationship with you; the length of time necessary to complete a transaction; whether your Personal Information is a sensitive type; whether you specifically consented to retain the data; and our legal, contractual or similar obligations to retain or delete the data. | Certain information may be sold or shared, including to advertising and marketing partners and analytics providers | Service providers, affiliates, partners, commercial providers, advertising and marketing partners, and analytics providers |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, address, telephone number. | Same as above | Not sold or shared | Service providers, affiliates, partners, commercial providers |
Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Same as above | Not sold or shared | Service providers, affiliates, partners, commercial providers |
Internet or other similar network activity. | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. | Same as above | Sold and shared | Service providers, affiliates, partners, commercial providers, advertising and marketing partners, and analytics providers |
Geolocation data. | Physical location or movements. | Same as above | Not sold or shared | Service providers, affiliates, partners, commercial providers |
Sensory Data | Audio, visual (such as photographs) or similar information | Same as above | Not sold or shared | Service providers, affiliates, partners, commercial providers |
Inferences drawn from other personal information. | Profile reflecting a person's preferences. | Same as above | Not sold or shared | Service providers, affiliates, partners, commercial providers |
Rights Specific to California Residents
Under the CCPA, a California resident has the following rights: to request additional information about our data collection, use, disclosure, and practices in connection with your Personal Information; to request the specific Personal Information collected about you; to request the deletion of the Personal Information we have about you; to request a restriction on certain processing of Personal Information; to request correction of inaccurate information; and to opt-out of selling or sharing Personal Information. You may not be discriminated against for exercising your California privacy rights. You may submit a request to exercise your rights under the CCPA through one of two means:
- Email: [email protected]
- Call +1 (347) 716-7698 to submit your request.
You may also designate an agent to exercise your privacy rights on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government-issued identification, and the authorized agent’s valid government issued identification.
Upon receiving your request, we will confirm receipt of your request by sending you an email confirming receipt. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. In some instances, such as a request to delete Personal Information, we may first separately confirm that you would like for us to in fact delete your Personal Information before acting on your request.
We will aim to respond to your request as soon as reasonably practicable and consistent with any applicable laws. If we require more time, we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, listed below, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
California residents are also entitled to contact us to request information about whether we have disclosed Personal Information to third parties for the third parties’ direct marketing purposes. Under the California “Shine the Light” law, California residents may opt-out of our disclosure of Personal Information to third parties for their direct marketing purposes. You may choose to opt-out of the sharing of your Personal Information with third parties for marketing purposes. To make such a request you should send an email to [email protected] with the subject heading “California Privacy Rights”. In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California privacy rights requirements and only information on covered sharing will be included in our response. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.
EEA, Switzerland, and UK Residents
The European Union’s General Data Protection Regulation (“GDPR”), and corresponding legislation in the UK and Switzerland, provide EEA, Switzerland and UK residents with certain rights in connection with Personal Information you have shared with us. If you are resident in the EEA, Switzerland, or UK, you may have the following rights:
- The right to be informed. You are entitled to be informed of the use of your Personal Information. This Privacy Policy provides such information to you.
- The right of access. You have the right to request a copy of your Personal Information which we hold about you.
- The right of correction. You have the right to request correction or changes of your Personal Information if it is found to be inaccurate or out of date.
- The right to be forgotten. You have the right to request us, at any time, to delete your Personal Information from our servers and to erase your Personal Information when it is no longer necessary for us to retain such data. Note, however, that deletion of your Personal Information will likely impact your ability to use our services.
- The right to object (opt-out). You have the right to opt-out of certain uses of your Personal Information, such as direct marketing, at any time.
- The right to data portability. You have the right to a “portable” copy of your Personal Information that you have submitted to us. Generally, this means your right to request that we move, copy or transmit your Personal Information stored on our servers or information technology environment to another service provider’s servers or information technology environment.
- The right to refuse to be subjected to automated decision making, including profiling. You have the right not to be subject to a decision and insist on human intervention if the decision is based on automated processing and produces a legal effect or a similarly significant effect on you.
- The right to lodge a complaint with a supervisory authority. You have the right to lodge complaints about our data processing activities by filing a complaint with us or with the relevant Supervisory Authority. A list of Supervisory Authorities is available here: www.ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
We may contact you to request that you update your Personal Information on a regular basis to ensure its integrity for the purposes of ongoing data management.
You may exercise any of the rights described in this section by sending an email to [email protected]. Please note that we may ask you to verify your identity and request before taking further action on your request. We may respond to your request by letter, email, telephone or any other suitable method.
Changing or Deleting Your Account Information
All customers may update or correct information about yourself by making changes to your profile, or emailing us at [email protected]. If you completely delete all such information, then your account may become deactivated. We may retain an archived copy of your records as required by law, to comply with our legal obligations, to resolve disputes, to enforce our agreements or for other legitimate business purposes.
Our Opt-in/Opt-out Policy Relating to Emails and Text Messages
By providing an email address on the CrowdVolt Sites or Services, you agree that we may contact you in the event of a change in this Privacy Policy, to provide you with any Service-related notices, or to provide you with information about our events, invitations, or related educational information.
For purposes of this Privacy Policy, “opt-in” is generally defined as any affirmative action by a User to submit or receive information, as the case may be. We may send you SMS texts, including marketing texts, if you have opted in to receive such communications.
- At any time, you can follow the instructions provided in offers, newsletters or other email messages (except for e-commerce confirmation or service notice emails) received from us or a CrowdVolt Partner to unsubscribe from the service.
- At any time, you can reply “STOP” to opt-out of receiving SMS texts.
Notwithstanding anything else in this Privacy Policy, please note that we always reserve the right to contact you in the event of a change in this Privacy Policy, or to provide you with any Service-related notices.
Third Party Links
The Sites may contain links to webpages operated by parties other than CrowdVolt. We do not control such websites and are not responsible for their contents or the privacy policies or other practices of such websites. Our inclusion of links to such websites does not imply any endorsement of the material on such websites or any association with their operators. These websites and services may have their own privacy policies, which the User will be subject to upon linking to the third party's website. CrowdVolt strongly recommends that each User review the third party's terms and policies.
Connected Music Services
CrowdVolt allows you to optionally connect a third-party music service to your CrowdVolt account so that we can recommend events featuring artists you listen to. As of the effective date of this Privacy Policy, the only such service available is Spotify. We may add other music services (such as Apple Music or SoundCloud) in the future; if and when we do, this section will be updated to describe each new integration. Connecting a music service is entirely optional — you may use CrowdVolt without doing so, and you may disconnect at any time.
Spotify
When you click "Connect" on the Spotify integration in your CrowdVolt account and complete Spotify's authorization flow, Spotify provides CrowdVolt with your Spotify user ID, your Spotify display name, and an OAuth access token and refresh token that CrowdVolt uses to read the data described below on your behalf.
What we read from Spotify (and the Spotify scopes used):
- Your top artists (Spotify scope user-top-read) — used to surface upcoming events on CrowdVolt featuring artists you listen to most.
- Your recently played artists (Spotify scope user-read-recently-played) — derived from your last 50 plays; used to surface upcoming events featuring artists you've been listening to lately.
- Your followed artists (Spotify scope user-follow-read) — used to surface upcoming events featuring artists you have explicitly followed on Spotify.
We do not read your Spotify email address, your saved tracks or saved albums, your playlists, your current playback state, your podcast history, or any other Spotify data beyond the three categories listed above.
How we use the data: Solely to render personalized event recommendations to you within CrowdVolt — for example, the "For You on Spotify" section on our home page, which lists upcoming events featuring artists from your top, recently played, and followed lists. Each recommended event is annotated with the source(s) — top, recently played, or followed — that triggered the recommendation, so that the basis for each recommendation is transparent to you.
What we do not do with this data:
- We do not sell it.
- We do not share it with advertisers, marketing partners, or any third party (other than Spotify itself, which is the source of the data).
- We do not use it for advertising, advertising profiling, or training machine-learning models.
- We do not combine it with data from other CrowdVolt users to build aggregate profiles of any individual.
- We do not retain a long-running history of what you listen to. We read fresh data from Spotify on demand and cache it transiently (see "How long we store it" below).
How long we store it:
- A single database row in CrowdVolt's secure infrastructure containing your Spotify user ID, your Spotify display name, and your Spotify OAuth access and refresh tokens. The access and refresh tokens are encrypted at rest using AES-128 (Fernet) with a key managed by CrowdVolt; they are not readable without that key.
- Short-lived cached responses from the Spotify API (your top, recently played, and followed artists) stored in our cache layer and automatically expired between 1 hour and 24 hours, depending on the data type. These caches exist to reduce load on Spotify's API and improve page-load performance, and are not used for any other purpose.
How to revoke access: You can disconnect your Spotify account from CrowdVolt at any time by clicking the "Disconnect" button on your CrowdVolt Account page. Doing so immediately and permanently deletes the database row described above (including the encrypted access and refresh tokens) and removes any cached Spotify data we have for you. The deletion is hard-deletion, not soft-deletion — nothing is retained. You may additionally revoke CrowdVolt's access on Spotify's side at spotify.com/account/apps; doing so does not on its own delete the row in our database, so to fully sever the integration we recommend using the in-app Disconnect button.
Spotify's own privacy practices: Spotify is the data controller for your Spotify account itself. Spotify's collection and use of your data is governed by Spotify's privacy policy at spotify.com/legal/privacy-policy, which we encourage you to review.
International Transfers
We may, directly or indirectly through third party entities around the world, process, store, and transfer the information you provide, including your Personal Information, as described in this Privacy Policy. Specifically, the information and Personal Information that we collect may be transferred to, and stored at, a location outside of your jurisdiction. It may also be processed by staff operating outside of your jurisdiction who work for us or for one of the organizations outlined in this Privacy Policy in connection with the activities outlined in this Privacy Policy. By submitting your information and Personal Information using the Sites, you agree to this transfer, storing or processing. We will take all steps necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy. We have put in place commercially reasonable technical and organizational procedures to safeguard the information and Personal Information we collect on the Sites.
How We Protect Personal Information
CrowdVolt maintains administrative, technical and physical safeguards designed to protect the user's Personal Information and other information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Note however that certain aspects of Internet communications are inherently not completely secure.
Children’s Privacy
The Site is not intended for use by children. We do not intentionally gather Personal Information about visitors who are under the age of 18. If a child has provided us with Personal Information, a parent or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under age 18 in the applicable jurisdiction, please contact us at [email protected]. If we learn that we have inadvertently collected the Personal Information of a child under 18, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.
“Do Not Track” Signals
Where required by applicable law, our Sites, Services, and systems will respond to global privacy controls and opt-out preference signals.
Changes to this Privacy Policy
Our Privacy Policy may change from time to time. We will post any privacy policy changes on this page and, if the changes are material, we will provide a more prominent notice (including, for certain services or programs, email notification or privacy policy changes) for a reasonable period of time. Nevertheless, you should review this Privacy Policy from time to time to be sure you are aware of the most recent version.
How to Contact Us
If you have any questions, comments or concerns about this Privacy Policy, or if you would like to exercise the choices discussed above, please contact us at [email protected].