Privacy Policy

About Gigvault

Gigvault is a community-driven platform for archiving and reliving live music experiences. We help you track concerts you've attended, discover upcoming shows, connect with fellow music fans, and preserve your musical memories. Your privacy is fundamental to our mission of creating a trusted space for the music community.

What Data We Collect

We collect information you provide directly and some data automatically when you use Gigvault:

• Account Data: Email address, username, password (encrypted)
• Profile Data: Display name, bio, avatar, location, favorite genres
• Concert Data: Events you've attended, plan to attend, or are interested in
• Social Data: Connections, messages, and shared content
• Usage Data: How you interact with our platform

View complete data collection details →

Why We Collect Your Data

We process your data to:

• Provide and maintain our service
• Enable social features and connections
• Personalize your experience (with your consent)
• Generate your year-in-review "Wrapped" statistics
• Send important service notifications
• Improve and protect our platform

Learn more about data usage →

What We Don't Do With Your Data

We do not:

• Sell your personal data to anyone
• Share your data with advertisers — Gigvault shows no ads
• Share your email address with third parties for marketing
• Read your private messages, except when investigating reported abuse
• Make decisions about you using solely automated processing

Gigvault is funded by Pro subscriptions and by ticket links: when you open a Ticketmaster or Eventim link on an upcoming show, we may earn a commission from that provider. Those links do not carry any of your personal data — only the event page you chose to open.

Email Communications

We send transactional and product-related emails to registered users — including account confirmations, feature updates, and activity notifications. You can unsubscribe from non-essential emails at any time using the unsubscribe link in any email, or by adjusting your notification settings in your account.

Legal Basis (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract: Processing necessary to provide our service to you
• Consent: For personalization, marketing, and optional features
• Legitimate Interest: For security, fraud prevention, and platform improvement
• Legal Obligation: When required by law

Profile Visibility

You control who sees your profile. By default, new profiles are private. You can choose to make your profile public or visible only to your connections. Public profiles display your username, display name, bio, and optionally your concert history and favorite artists. You can change these settings at any time in yourSettings.

Messaging & Social Features

Messages between users are stored securely and are only accessible to the participants. We do not read your messages unless required to investigate reported abuse or comply with legal obligations. You can block users and report inappropriate behavior at any time.

AI-Assisted Features

Gigvault uses AI to help create and parse event information from various sources. This processing is done to improve event accuracy and discovery. AI-generated or AI-assisted content is clearly labeled, and all community-submitted events go through moderation before being published.

Cookies

We use essential cookies to keep you logged in and ensure the platform works correctly. We may use analytics cookies to understand how our service is used, but only with your consent.

Learn more about cookies →

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., for legal claims or compliance). Some anonymized, aggregated data may be retained for analytics purposes.

Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict or object to processing
• Export your data (data portability)
• Withdraw consent at any time

Learn how to exercise your rights →

Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL)
• Secure password hashing
• Two-factor authentication (2FA) support
• Row-level security for database access
• Regular security audits and monitoring

International Data Transfers

Gigvault is hosted in the European Union. If you access our service from outside the EU, your data may be transferred to and processed in the EU. We ensure appropriate safeguards are in place for any international data transfers in compliance with GDPR requirements.

Children's Privacy

Gigvault is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice on our platform. The "Last updated" date at the top indicates when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us at: