Privacy Policy

1. Introduction

Welcome to Oncore ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for live show management, including our website, mobile application, and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, phone number, and profile photo when you create an account.
• Organization Data: Organization name, business type, team member information, and organizational structure.
• Show & Event Data: Show details, venue information, artist information, crew assignments, schedules, and production notes.
• Contact Information: Details of venues, promoters, artists, crew members, and other contacts you add to the platform.
• Financial Data: Payment information, invoicing details, deal memos, and financial terms related to shows and bookings.
• Documents: Contracts, riders, technical specifications, and other files you upload to the platform.
• Communications: Messages, notes, and communications made through our platform.

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Log Data: IP address, browser type, pages visited, time spent on pages, and other diagnostic data.
• Location Data: General location based on IP address; precise location only with your explicit consent.
• Usage Data: Features used, actions taken, and how you interact with our Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To operate, maintain, and improve our platform for managing live shows and tours.
• User Authentication: To verify your identity and manage your account access.
• Communication: To send you service-related notifications, updates, and respond to your inquiries.
• Collaboration: To enable sharing of information between authorized team members within your organization.
• Analytics: To understand how users interact with our Service and improve the user experience.
• Security: To detect, prevent, and address technical issues and security threats.
• Legal Compliance: To comply with legal obligations and enforce our terms of service.

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Within Your Organization: Information may be shared with other members of your organization based on their role and permissions.
• Service Providers: We work with third-party service providers who assist us in operating our Service, such as cloud hosting, analytics, and customer support.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental request.
• Protection of Rights: We may disclose information to protect our rights, privacy, safety, or property, or that of our users or the public.

We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest using TLS/SSL and AES-256 encryption.
• Secure authentication mechanisms including multi-factor authentication options.
• Regular security audits and vulnerability assessments.
• Access controls and role-based permissions.
• Secure data backup and disaster recovery procedures.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes described in this policy. Specifically:

• Account data is retained while your account is active and for a reasonable period thereafter.
• Show and event data is retained according to your organization's settings and preferences.
• Log data and analytics are typically retained for up to 24 months.
• We may retain certain information as required by law or for legitimate business purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing of your information for certain purposes.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at jean@oncore.io.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by relevant authorities.
• Compliance with applicable data protection frameworks.
• Encryption and security measures during transfer and storage.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). We process your data based on the following legal bases:

• Contract Performance: Processing necessary to provide our Service to you.
• Legitimate Interests: Processing for our legitimate business interests, such as improving our Service and preventing fraud.
• Consent: Processing based on your explicit consent.
• Legal Obligation: Processing necessary to comply with legal requirements.

You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with applicable data protection laws.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt-out of the sale of your personal information (we do not sell personal information).
• The right to non-discrimination for exercising your privacy rights.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and improve our Service. Types of cookies we use include:

• Essential Cookies: Required for the operation of our Service.
• Analytics Cookies: Help us understand how users interact with our Service.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

12. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

13. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: