Privacy Policy

FSTVL Festival Planner
Effective Date: January 2025
Last Updated: January 2025
This Privacy Policy ("Policy") describes how FSTVL Festival Planner ("FSTVL," "we," "our," or "us") collects, uses, stores, shares, and protects personal information in connection with the FSTVL Festival Planner web application and related services (the "Service"). By registering an account or otherwise using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your information as described herein.
FSTVL is based in San Francisco, California, and complies with applicable laws, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, "CCPA"), as well as other applicable data protection regulations.

Information We Collect

When you register for and use the Service, we collect the following categories of information:
Account Information. We collect identifiers including your email address, display name, and, if applicable, your Google profile information such as name and profile photograph when you use Google OAuth for authentication. We also collect metadata including your unique User ID, account creation date, last sign-in timestamp, and verification status.
Profile Content. You may choose to upload a profile photograph, provide a short biography or description, and edit your display name. This information is optional and user-controlled.
Festival and Artist Preferences. We collect information regarding festivals you mark as favorites, artists you rank using our three-tier preference system ("Not Interested," "Maybe," "Love"), and personalized schedules you generate within the Service.
Usage and Interaction Data. We collect information about your activity on the Service, including page views, session activity, timestamped preference changes, error logs, and analytics data about how features are used.
Device and Technical Data. When you access the Service, we automatically collect information such as browser type, operating system, IP address, device identifiers, and performance metrics to maintain and optimize the Service.
Third-Party Data. We process and enrich information about festivals and artists obtained from external data sources, including Clashfinder (for lineups and schedules), Spotify (for artist information, images, genres, top tracks, and popularity metrics), Google Maps/Geocoding (for venue data and mapping), and OpenAI (for content enrichment). These third-party services may also collect information subject to their own privacy policies.

How We Use Your Information

We use personal information for the following purposes:
  • To create and manage user accounts, authenticate users, and provide secure access to the Service.
  • To deliver, personalize, and improve the Service, including the generation of personalized schedules and recommendations based on your preferences.
  • To synchronize festival and artist data across devices and provide offline functionality where available.
  • To monitor, troubleshoot, and optimize performance, including debugging, error resolution, and analytics.
  • To communicate with you regarding Service updates, account issues, or support requests.
  • To comply with legal obligations, enforce our Terms of Service, and protect the integrity and security of the Service.

Sharing of Information

We do not sell your personal information. We may share your information under the following limited circumstances:
Service Providers. We use third-party vendors, including Firebase (authentication, database, and file storage), Netlify (hosting and serverless functions), and Railway (data processing), to operate and maintain the Service. These providers process information on our behalf under contractual agreements requiring data protection.
Third-Party Integrations. Where the Service integrates with external APIs (Spotify, Clashfinder, Google Maps, OpenAI), your data may be processed as necessary to enable functionality. For example, artist preference data may be cross-referenced with Spotify data to enrich your experience.
Administrative Access. Authorized administrators may access certain user data to manage accounts, oversee system operations, and enforce policies. Administrative access is restricted to personnel with a legitimate operational need.
Legal Compliance. We may disclose information when required by law, legal process, or government request, or to protect the safety, rights, or property of FSTVL, our users, or the public.
Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the terms of this Policy.

Data Storage and Security

We store personal data primarily in Firebase Firestore and Firebase Cloud Storage, protected by authentication requirements and access control rules. User data is isolated by unique identifiers and may not be accessed by other users without authorization.
We take commercially reasonable steps to safeguard your information, including the use of encryption, authentication, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute protection against unauthorized access or breaches.

Data Retention

We retain personal information for as long as your account remains active or as necessary to provide the Service. We may retain certain data longer if required for legal compliance, dispute resolution, enforcement of agreements, or business continuity. When information is no longer required, we will securely delete or anonymize it.

Your Rights and Choices

As a California resident, you have specific rights under the CCPA, including:
  • The right to know what personal information we collect, use, and disclose.
  • The right to request deletion of your personal information, subject to certain exceptions.
  • The right to opt out of any sale or sharing of your personal information (though FSTVL does not sell data).
  • The right to request correction of inaccurate information.
  • The right to not be discriminated against for exercising your privacy rights.
You may exercise these rights by contacting us at privacy@fstvl.com. We may verify your identity before responding to requests.

Children's Privacy

The Service is not directed to children under the age of thirteen (13). If we learn that personal information has been collected from a child under 13 without parental consent, we will promptly delete such information. If you believe a child has provided us information in violation of this Policy, please contact us.

International Users

FSTVL is operated from the United States. If you access the Service from outside the United States, you acknowledge and agree that your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located.

Changes to this Policy

We reserve the right to modify or update this Privacy Policy at any time. If we make material changes, we will notify you by posting an updated Policy within the Service or by other reasonable means. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Contact Us

If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, you may contact us at:
FSTVL Festival Planner
San Francisco, California
Email: privacy@fstvl.com
If you have any questions about this Privacy Policy, please contact us at privacy@fstvl.com.