Privacy Policy

1. Introduction

FanFuzer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website (www.fanfuzer.com), and related services (collectively, the "Platform").

We comply with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and other applicable data protection laws. By using our Platform, you consent to the practices described in this policy.

2. Data Controller

FanFuzer is the data controller responsible for your personal data. If you have questions about this policy or our data practices, contact us at: privacy@fanfuzer.com.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, password, profile picture (avatar URL), city, and preferences (favorite artists, favorite venues).
• Payment Information: Credit/debit card details, billing address, and transaction history. Payment processing is handled by our third-party payment processor; we do not store full card numbers on our servers.
• Waitlist Information: Email address provided when joining our waitlist.
• Communications: Messages, feedback, and support requests you send to us.

3.2 Information from Third Parties

• Spotify Data: When you connect your Spotify account, we access your top artists, listening history, and music preferences to provide personalized event recommendations. We do not access your Spotify credentials or modify your Spotify account.
• Social Login Providers: If you sign in via a third-party service (e.g., Apple, Google), we receive your name and email address as provided by that service.

3.3 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Location Data: With your permission, we collect approximate location data (city-level) to recommend events near you. We do not track precise GPS location without explicit consent.
• Usage Data: Pages visited, features used, time spent on the Platform, and interaction patterns.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and analyze usage patterns.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide our services, including ticket sales, account management, and FanPoints rewards.
• Consent: Where you have given explicit consent, such as connecting your Spotify account, receiving marketing communications, or sharing location data.
• Legitimate Interests: Processing necessary for our legitimate interests, including fraud prevention, platform security, analytics, and service improvement.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

5. How We Use Your Information

• Provide, maintain, and improve our Platform and services
• Process ticket purchases and manage your digital ticket wallet
• Administer the FanPoints rewards program
• Personalize event recommendations based on your music preferences and location
• Facilitate Spotify integration and artist matching
• Send transactional communications (order confirmations, ticket delivery)
• Send marketing communications (with your consent)
• Detect, prevent, and address fraud, abuse, and security issues (including bot and scalper prevention)
• Analyze usage patterns to improve user experience
• Comply with legal obligations

6. Data Sharing and Disclosure

We may share your information with:

• Event Organizers and Artists: When you purchase tickets, we share necessary information (name, email) with the event organizer for entry verification.
• Payment Processors: To process transactions securely.
• Service Providers: Third-party companies that help us operate the Platform (hosting, analytics, email delivery).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

7. Connecting AI Assistants (Claude, ChatGPT and Others)

Artist and venue accounts can connect an AI assistant, such as Claude (made by Anthropic) or ChatGPT (made by OpenAI), to FanFuzer through our MCP server (see FanFuzer MCP Server and FanFuzer for Claude). The connection is made only at your request, after you sign in on FanFuzer and approve it.

• What a connected assistant can access: your own events (names, dates, locations, descriptions, prices, ticket types and capacity), ticket sales and revenue figures for those events, attendance, interest and check-in counts, and totals of your followers and subscribers. It can create draft paid events and edit your drafts.
• What it cannot access: fans' names, email addresses or other personal details, payment or payout information, your password, or any other account's data. Audience information is shared as totals only.
• How it works: the assistant receives an access token tied to your account, which includes your account email address and basic profile details. Every request runs with your own permissions, so it can see and change only what you can in the app. We receive only the requests the assistant makes to FanFuzer, not your conversations.
• Anthropic and OpenAI: information an assistant retrieves from FanFuzer becomes part of your conversation with it. The assistant's provider (for example Anthropic for Claude, or OpenAI for ChatGPT) processes it as an independent controller under its own privacy policy, which you agreed to when you started using that assistant. We do not share data with these providers except at your direction through this connection.
• Legal basis and logs: we process this at your request to provide the service you asked for (contract performance). We keep standard technical logs of connector requests for security and troubleshooting, under the same retention terms as the rest of the Platform.
• Withdrawing access: disconnect FanFuzer in your assistant's connector or plugin settings at any time. To have every connection to your account removed on our side as well, email privacy@fanfuzer.com.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 6 years to comply with legal obligations (e.g., financial records). Anonymized data may be retained indefinitely for analytics purposes.

9. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at privacy@fanfuzer.com. We will respond within 30 days.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), encryption at rest, access controls, regular security audits, and 3D Secure payment processing. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our Platform is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

13. Cookies Policy

We use essential cookies for Platform functionality, analytics cookies to understand usage patterns, and preference cookies to remember your settings. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Platform and, where appropriate, by email. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

You also have the right to lodge a complaint with your local data protection authority (e.g., the Data Protection Commission in Ireland).