tourQ Privacy Policy

Last updated: May 28, 2026 Effective date: May 28, 2026

1. Introduction

This Privacy Policy ("Policy") describes how Gigz Technologies Inc., doing business as tourQ ("tourQ," "we," "us,**" or "our"), collects, uses, shares, and protects personal information when you use our websites at tourq.co and any related subdomains, our mobile and desktop applications, our APIs, and any other products, features, or services we offer that link to this Policy (collectively, the "Services").

tourQ is a live music intelligence and booking platform that connects artists, venues, festival producers, talent buyers, and fans through data-driven tools, marketplace functionality, AI-powered predictions, and engagement features.

By using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Services.

This Policy is incorporated into and forms part of our Terms of Service.

2. Who We Are

The entity responsible for your personal information (the "data controller" for the purposes of applicable data protection laws) is:

Gigz Technologies Inc. (d/b/a tourQ) 201 S Larchmont Blvd Los Angeles, CA 90004 United States Email: privacy@tourq.co

If we have appointed a representative or Data Protection Officer for users in the European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland, their contact details are published at tourq.co/legal and you may also reach them at dpo@tourq.co.

3. Scope and Applicability

This Policy applies to:

Visitors to our websites and marketing pages
Artists and their authorized representatives ("Artist Users")
Venues, talent buyers, and their staff ("Venue Users")
Festival producers, promoters, and their staff ("Festival Users")
Fans, ticket buyers, and members of the public who interact with tourQ-powered voting, ticketing, or fan-engagement features ("Fan Users")
API users, integration partners, and developers
Job applicants and prospective vendors

Different sections of this Policy may apply differently depending on your relationship to tourQ. Where a section applies only to a particular category of user, we say so.

This Policy does not apply to:

Third-party websites, applications, or services that link to or integrate with tourQ but that operate under their own privacy policies (for example, Spotify, Pollstar, Soundcharts, Bandsintown, Ticketmaster, and payment processors).
The privacy practices of artists, venues, or festival producers that use tourQ to communicate with you. Those parties are independent controllers of any personal information you share with them, and you should consult their privacy policies directly.

4. Information We Collect

We collect information in three main ways: (a) information you provide directly to us, (b) information collected automatically when you use the Services, and (c) information we receive from third parties and public sources.

4.1 Information You Provide Directly

Depending on how you use the Services, you may provide us with:

Account and identity information: your name, email address, password (stored in hashed form), phone number, date of birth, profile photo, professional title, company affiliation, country of residence, and preferred language.

Artist-specific information: stage name, legal name, Spotify artist ID, social media handles, management or booking agency contact details, performance rider, technical requirements, hospitality preferences, touring history, fee expectations, and verification documentation (such as proof of authority to represent an artist).

Venue-specific information: venue name, address, capacity, technical specifications, contact persons, deal preferences, available dates, room types, settlement preferences, and tax identification information.

Festival-specific information: festival name, edition history, lineup data, production partners, sponsorship information, budget parameters, and curation criteria.

Fan-specific information: for voting, ticketing, or fan-engagement features — your name, email, date of birth (used to confirm age eligibility for age-gated events and to comply with applicable laws), home city or region, and your votes, ballot selections, listening preferences, and engagement actions.

Payment and financial information: when you subscribe to a paid plan, make a purchase, or receive payment through the Services, we collect billing name, billing address, tax identification numbers, bank account information for settlements, transaction history, and invoices. Card numbers and bank credentials are processed by our payment processor, Stripe, and are not stored on tourQ servers.

Content you upload or create: show artwork, posters, photographs, audio files, video files, contracts, riders, marketing assets, AI prompts you submit, messages and chat history with other users, and notes or comments you record in the platform.

Communications: messages sent to our support team, survey responses, feedback, beta enrollment forms, and any correspondence with tourQ staff.

Authentication credentials from third-party providers: if you sign in via Google, Apple, Spotify, or another OAuth provider, we receive the information that provider shares with us (typically name, email, and a unique identifier). We never receive your password from these providers.

4.2 Information Collected Automatically

When you use the Services, we and our service providers automatically collect:

Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, language settings, time zone, mobile carrier (if applicable), device identifiers (such as advertising identifiers, where permitted), and crash logs.

Usage data: the pages, features, and screens you view; the actions you take (clicks, form submissions, votes, ballot changes, search queries, AI prompts, feature toggles); session duration; navigation paths; referring and exit URLs; and timestamps.

Location data: approximate location derived from your IP address. We do not collect precise GPS location unless you expressly grant permission.

Cookies and similar technologies: as described in Section 14 below.

Inferences: we may derive inferences about you — such as your apparent role, your professional sophistication, your likely market or genre, or your propensity to take certain actions — based on the data above. These inferences are themselves treated as personal information.

4.3 Information from Third Parties and Public Sources

A significant portion of the value of the Services comes from data we license or aggregate from third parties, or collect from public sources where permitted. This includes:

Industry data providers: Pollstar (box office reports, routebook entries, historical performance data), Soundcharts (streaming and chart data), Bandsintown (concert listings), Ticketmaster (concert listings and ticketing data), Setlist.fm (setlist and performance data), and similar services.

Streaming and social platforms: Spotify (artist metadata, monthly listeners, follower counts, playlist placements, listener geography), YouTube, TikTok, Instagram, Facebook, X (formerly Twitter), Audiomack, Deezer, Pandora, Last.fm, Yandex, NetEase, JOOX, LINE Music, and Songkick. We collect publicly available information through these platforms' APIs or other authorized means.

Public records and news media: press coverage, editorial mentions, public filings, and other publicly available information about artists, venues, festivals, and the live music industry.

Marketing partners: we may receive limited contact information about prospective business customers from reputable B2B data sources for outreach purposes, where such use is permitted by law.

Other users: if another user (such as a venue inviting an artist, or an artist's manager registering on the artist's behalf) provides information about you to tourQ, we will associate it with your record.

We rely on these third parties to provide accurate information and to have obtained the necessary rights and consents. We are not responsible for the accuracy of data sourced from third parties, although we make reasonable efforts to verify and update it.

4.4 Special Note on Artist Workspace Data

tourQ provides workspaces that surface intelligence about artists, including artists who are not currently customers of tourQ. We may display publicly available information, third-party-licensed information, and tourQ-derived inferences about an artist in a workspace accessed by tourQ staff, verified artist representatives, prospective customers in a demonstration setting, or other authorized parties.

If you are an artist (or an authorized representative) and you would like to claim, correct, or restrict the use of your artist workspace, contact privacy@tourq.co. We will verify your authority and respond as described in Section 12.

5. How We Use Information

We use personal information for the following purposes:

To provide and operate the Services, including creating and managing your account; authenticating you; processing transactions; generating predictions, recommendations, and analytics; facilitating communication between users; providing customer support; and maintaining and improving the Services.

To personalize your experience, including tailoring content, recommendations, and predictions to your role, genre, market, and history; remembering your preferences; and surfacing relevant opportunities.

To power our AI features, including producing market forecasts, demand predictions, venue fit scores, marketing recommendations, content generation (such as posters, social posts, and email drafts), and chat-based assistance. See Section 6 for more detail.

To communicate with you, including sending transactional emails (such as account confirmations, password resets, booking notifications, and settlement statements), service announcements, security alerts, and — where permitted — marketing communications.

For research, analytics, and product development, including understanding how users interact with the Services; testing new features; improving the accuracy of our predictive models; and benchmarking platform performance. Wherever feasible, we use aggregated or de-identified data for these purposes.

For safety, security, and compliance, including detecting and preventing fraud, vote manipulation, account takeover, unauthorized scraping, spam, and abuse; complying with legal obligations; enforcing our Terms of Service; and protecting the rights, property, and safety of tourQ, our users, and the public.

For business operations, including corporate accounting, tax reporting, audits, risk management, and conducting due diligence in connection with potential financing or M&A transactions.

With your consent, for any other purpose we describe at the time we collect the information.

6. Artificial Intelligence and Automated Decision-Making

The Services include AI-powered features. We want you to understand how they work.

6.1 What our AI does

Our AI features include, without limitation:

Predictive analytics (for example, forecasted ticket sales, demand scoring, venue fit scoring, peer benchmarking, "tourQ Score," "Composite Demand Index")
Content generation (for example, AI-generated show posters, social media captions, email drafts, marketing copy)
Conversational assistance (for example, AI marketing coach, AI chat features)
Recommendation systems (for example, recommended venues, recommended cities, recommended next moves)
Booking strategy synthesis (for example, "Stadium Run," "Arena Run," "Stretch goal" scenarios)

6.2 Inputs to our AI

To produce these outputs, our AI models process inputs including your account data, your usage patterns, content you upload or submit (including prompts), the third-party data described in Section 4.3, and aggregated information from other users (typically in de-identified form).

6.3 Limits of AI outputs

AI outputs are probabilistic and inferential, not guarantees. Predicted ticket counts, revenue forecasts, fit scores, and confidence levels reflect our best modeling effort given available data, but they are not promises and should not be the sole basis for financial, contractual, or operational decisions. We disclaim liability for AI outputs as described more fully in our Terms of Service.

6.4 Model training

We may use information collected through the Services to train, evaluate, and improve our own AI models. We do not sell your personal information to third parties for the training of their AI models. Where we use third-party AI providers to power features, we contractually require those providers not to retain or use your information to train their general-purpose models beyond what is necessary to provide the service to us.

If you would prefer that your account data not be used to train tourQ's models, you may opt out by emailing privacy@tourq.co. Opting out does not affect aggregated or de-identified data already used in prior training cycles.

6.5 No solely-automated decisions with legal effect

We do not use solely automated decision-making (including profiling) to make decisions that produce legal effects concerning you or that similarly significantly affect you. Where AI outputs influence decisions (such as marketplace ranking or eligibility for certain features), a human is involved in any material decision concerning you, or you have the right to request human review. To request human review, email privacy@tourq.co.

7. Legal Bases for Processing (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation ("GDPR") and UK GDPR:

Performance of a contract: where processing is necessary to perform our contract with you (such as providing the Services you have signed up for).
Legitimate interests: where processing is necessary for our legitimate interests, such as operating our business, improving the Services, preventing fraud, and conducting research and analytics — provided those interests are not overridden by your rights.
Consent: where you have given us specific consent (such as for certain marketing communications or optional cookies). You can withdraw consent at any time.
Legal obligation: where we are required to process information to comply with a legal obligation (such as tax, accounting, or anti-money-laundering laws).
Vital interests: in rare cases where processing is necessary to protect someone's life.

To request more information about the legal basis for any specific processing activity, contact privacy@tourq.co.

8. How We Share Information

We share personal information only as described below. We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

8.1 With other users

The Services are designed to facilitate interactions between users. Information you share within the Services may be visible to other users as follows:

Profile information (such as your name, role, organization, and public profile data) may be visible to other users you interact with or to users whose workspace surfaces your profile.
Messages, proposals, contracts, and shared documents are visible to the other parties to those communications.
Public votes, ballots, leaderboards, and engagement actions may be displayed publicly or to other fans, in aggregate or attributed form, as appropriate to the feature you are using. We will tell you at the time you take an action whether and how it will be displayed.

8.2 With service providers

We share information with third-party vendors that perform services on our behalf, including: cloud hosting (Amazon Web Services); database and authentication providers (Supabase); payment processing (Stripe); email and communications providers (such as SendGrid, Resend, and Twilio); analytics providers (such as PostHog); customer support tools (such as Intercom); AI model providers (such as Anthropic and OpenAI); and error monitoring (such as Sentry).

These vendors process personal information only on our instructions, subject to written agreements that require them to safeguard your information. The specific vendors we use may change from time to time as our infrastructure evolves.

8.3 With data partners and integrations

When you connect a third-party integration (such as Spotify, Google Calendar, Gmail, or Google Drive), we share information as needed to provide the integration. The third party's privacy policy governs their use of your information.

8.4 With professional advisors

We share information with our lawyers, accountants, auditors, and insurers as needed to obtain professional services.

8.5 In connection with corporate transactions

If tourQ is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honor this Policy or will notify you of any material change.

8.6 For legal and safety reasons

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with a subpoena, court order, or other legal process; (b) protect the rights, property, or safety of tourQ, our users, or the public; (c) investigate or prevent suspected fraud, security incidents, or violations of our Terms of Service; or (d) comply with applicable law.

8.7 With your consent

We share information with other parties when you direct us to or otherwise consent.

8.8 In aggregated or de-identified form

We may share aggregated or de-identified information (which cannot reasonably be used to identify you) with third parties for any purpose, including industry research, market reports, and commercial purposes. We maintain such information in de-identified form and do not attempt to re-identify it except to test that our de-identification is effective.

9. International Data Transfers

tourQ is headquartered in the United States, and we process personal information in the U.S. and in other countries where our service providers operate.

If you are in the EEA, UK, or Switzerland, your information will be transferred to and processed in countries that may not provide the same level of data protection as your home country. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms to protect your information.

To request a copy of the relevant transfer safeguards, contact privacy@tourq.co.

10. Data Retention

We retain personal information for as long as needed to provide the Services and to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Specifically:

Account information is retained for the life of your account and for a reasonable period afterward to handle disputes, comply with legal obligations, and enforce our agreements (typically up to seven years).
Transaction and financial records are retained for the period required by tax, accounting, and anti-money-laundering laws (typically seven years).
Marketing data is retained until you unsubscribe or object, after which we retain a minimal suppression record to honor your opt-out.
Aggregated or de-identified information may be retained indefinitely.
Backups and disaster recovery copies may be retained for a limited additional period after the primary copy is deleted.

You may request deletion of your account and associated personal information as described in Section 12. Some information may be retained after deletion as required by law or for the legitimate business purposes described above.

11. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These safeguards include encryption in transit (TLS); access controls and role-based permissions; logging and monitoring; routine security testing; secure software development practices; and employee training.

No system is perfectly secure. We cannot guarantee the security of your information, and you are responsible for safeguarding your account credentials. If you believe your account has been compromised, contact support@tourq.co immediately.

In the event of a personal data breach that poses a risk to your rights, we will notify you and applicable regulators as required by law.

12. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. We describe the major frameworks below; you may have rights under additional laws not listed here.

12.1 Rights available to most users

Subject to applicable law and verification of your identity, you may:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Delete your personal information (subject to exceptions for legal compliance, security, fraud prevention, and other legitimate purposes).
Object to or restrict certain processing.
Port your information to another service, in a structured, commonly used, machine-readable format.
Withdraw consent where processing is based on your consent (without affecting prior processing).
Opt out of marketing communications at any time by clicking "unsubscribe" in any marketing email or by contacting privacy@tourq.co.

To exercise any of these rights, email privacy@tourq.co or use the in-product privacy controls in your account settings. We will respond within the time required by applicable law (generally 30–45 days). We may ask you to verify your identity before fulfilling a request.

You may also designate an authorized agent to make a request on your behalf, subject to our verification of the agent's authority. We will not discriminate against you for exercising your privacy rights.

12.2 EEA, UK, and Switzerland (GDPR / UK GDPR)

In addition to the rights above, you have the right to lodge a complaint with your local data protection authority. A list of EEA authorities is available at edpb.europa.eu. In the UK, contact the Information Commissioner's Office at ico.org.uk.

12.3 California (CCPA/CPRA)

If you are a California resident, you have the rights to know, delete, correct, and port your personal information; to opt out of the "sale" or "sharing" of personal information; and to limit the use of sensitive personal information.

As stated in Section 8, we do not sell personal information and we do not share personal information for cross-context behavioral advertising. Because we do not engage in these activities, no opt-out is necessary; however, we honor Global Privacy Control (GPC) signals as a request to opt out should our practices change. If our practices change, we will update this Policy and provide an opt-out mechanism before engaging in any "sale" or "sharing."

In the preceding 12 months, we have collected the categories of personal information described in Section 4 for the purposes described in Section 5 and disclosed them to the categories of recipients described in Section 8. We retain personal information for the periods described in Section 10.

12.4 Other U.S. state privacy laws

Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Utah, Virginia, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, Maryland, Rhode Island, Kentucky, and others — may have rights similar to those described above. We honor those rights for residents of those states.

12.5 Verification and appeals

We will verify identity-based requests by matching information you provide against information already in our records. If we deny a request, you may appeal by replying to our denial email or contacting privacy@tourq.co with "Privacy Appeal" in the subject line. We will respond to appeals within the time required by applicable law.

13. Children's Privacy

The Services are not directed to children, and the minimum age to use them depends on the feature:

Business features (for artists, venues, festivals, talent buyers, API users, and similar) are intended only for users who are at least 18 years old and at least the age of majority in their jurisdiction.
Fan-engagement features (such as voting and ticketing) are intended only for users who are at least 16 years old, or older where a higher minimum age applies under local law or under the rules of a specific event (for example, age-restricted destination festivals).

We do not knowingly collect personal information from children under the applicable minimum age. For fan-engagement features, we use date-of-birth screening and other measures to enforce age requirements, and where an event is age-restricted we collect date of birth to confirm eligibility and to comply with applicable laws.

If you believe a child has provided us with personal information without the required consent, contact privacy@tourq.co and we will delete it.

14. Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies ("Cookies") on our websites and in our applications.

Strictly necessary Cookies support core functionality such as authentication, security, and load balancing. These cannot be disabled.
Performance and analytics Cookies help us understand how users interact with the Services so we can improve them.
Functional Cookies remember your preferences (such as language or theme).

You can manage non-essential Cookies through your browser settings and, where we offer them, through our in-product privacy controls and cookie consent banner. We do not set non-essential Cookies for users in jurisdictions that require prior consent until that consent is given. Disabling some Cookies may impair functionality.

We honor Global Privacy Control (GPC) signals as described in Section 12.3.

15. Marketing Communications

We may send you marketing emails about new features, industry insights, events, or other communications we believe may interest you. You may opt out at any time by clicking "unsubscribe" in any marketing email or by contacting privacy@tourq.co.

Even if you opt out of marketing, we may still send you transactional communications (such as service updates, security alerts, billing notices, and other messages necessary to operate the Services).

16. Public Information and User-Generated Content

Information you choose to make public — such as ballot picks displayed on a public leaderboard, profile information shown in public artist or venue listings, or content you post to public-facing surfaces — may be visible to anyone, indexed by search engines, and copied or shared by third parties. Use discretion when posting public information.

17. Demo Mode, Artist Workspaces, and Pre-Customer Data

A distinguishing feature of tourQ is the ability for prospective customers (and tourQ staff in demonstrations) to explore workspaces populated with real, publicly available data about artists, venues, and festivals.

If you are an artist or venue and your workspace appears in the Services without your account, the following applies:

The information shown is derived from publicly available sources, licensed third-party data, and tourQ's proprietary models. It is presented for the purpose of industry intelligence and platform demonstration.
We will not sell, license, or commercially exploit your workspace data outside the Services without your consent, except as aggregated or de-identified industry insights.
You may claim, correct, or request restriction of your workspace at any time by emailing privacy@tourq.co. We will verify your authority before making changes.
If you object to the display of your workspace, we will restrict or remove it, subject to applicable rights and legal obligations, and we reserve the right to retain aggregated or de-identified versions of the underlying data.

18. Third-Party Links and Services

The Services may link to or interoperate with third-party websites, applications, and services (such as Spotify, Ticketmaster, Bandsintown, social platforms, payment processors, and venue or festival websites). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.

19. Do Not Track

Our websites do not currently respond to "Do Not Track" browser signals because no industry consensus exists on how to interpret them. We do honor Global Privacy Control (GPC) signals as described above.

20. Changes to This Policy

We may update this Policy from time to time. When we do, we will post the updated Policy with a new "Last updated" date. If the changes are material, we will provide additional notice (such as an in-product banner or email).

Your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the changes.

21. Contact Us

If you have questions, concerns, or requests regarding this Policy or our privacy practices, contact us at:

Gigz Technologies Inc. (d/b/a tourQ) Attention: Privacy 201 S Larchmont Blvd Los Angeles, CA 90004 United States Email: privacy@tourq.co

For security issues, contact support@tourq.co. For data subject requests, contact privacy@tourq.co or use the in-product privacy controls.