1. Information We Collect
A. Personal Information
We collect information you provide when registering, such as your name, email address, phone number, payment details, and company affiliation.
B. Usage Data
We automatically collect data including IP addresses, device/browser types, log data, and interactions for performance and security improvements.
C. Fan Data
Our platform enables users to collect and analyze data about their audiences, including the items below. Fan profiles fill in over time as fans continue to interact with an artist through the Service.
- Names, email addresses, and phone numbers (when fans opt-in)
- Location data (city, state, country)
- Engagement metrics (pre-saves, RSVPs, purchases)
- Communication preferences
D. Third-Party Platform Data
When users connect third-party accounts (such as Instagram or Spotify), we may receive data from those platforms in accordance with their terms and our users' permissions. This includes:
- Instagram: Username, profile information, and direct message content for automation purposes. Messaging names are saved to the artist's contact record.
- Spotify: Artist and track information for pre-save campaigns
E. Fanaura iOS app
When you use the Fanaura iOS app, we collect the account and product usage data described elsewhere in this policy, plus the following:
- Sign in with Apple: your name and email address, including Apple's private relay address when you choose to hide your email.
- Photos you choose to upload through the app.
- Push notification tokens when you opt in to notifications on your device.
- Crash and performance diagnostics through Sentry to keep the app stable.
- Product interaction data through PostHog for analytics. We do not use session replay in the iOS app.
- If you allow tracking through Apple's App Tracking Transparency prompt, we may collect an advertising identifier to attribute installs and subscriptions to marketing campaigns through AppsFlyer and Meta. The app works fully if you decline tracking.
- Aura Chat: when you ask Aura Chat a question, your message and the contact, journey, and account details it looks up to answer are sent to Anthropic, which provides the Claude model that writes its replies. The app asks your permission before your first Aura Chat message.
F. ChatGPT and MCP connectors
When you connect Fanaura through ChatGPT or another client that uses the Model Context Protocol (MCP), you sign in on app.fanaura.com and authorize access to your Fanaura account. We receive your email address, the OAuth scopes you approve, and the messages and tool actions needed to run your requests, such as creating or updating a journey draft, reading setup status, or searching contacts on your account. We use that information only to provide the Service you asked for. We do not receive your ChatGPT conversation history except for the prompts and replies involved in calling Fanaura. OpenAI, L.L.C. processes your use of ChatGPT under its own privacy policy when you use their client. You can disconnect the integration by revoking access in your Fanaura account or in the ChatGPT connector settings.
What We Do NOT Access or Store
- Payment card numbers, CVV codes, or bank account information (all payments are processed entirely by our third-party payment processor)
- Browsing history or cookies from any third-party storefront you operate
- Payment card numbers or bank details for in-app purchases billed through Apple. Apple processes those payments, and Fanaura does not receive your card data.
2. How We Use Your Information
- To provide, maintain, and improve our services
- To process payments and manage subscriptions
- To personalize features and offer recommendations
- To communicate with users about updates and support
- To send SMS and email notifications (with explicit consent)
- To enable marketing automation features
- To match fan identities across music, merchandise, and tour engagement data to provide merchants with a unified view of their audience
- To provide merchants with analytics about their fan base, including geographic distribution, purchasing behavior, and cross-platform engagement
- To comply with legal obligations
3. Sharing Your Information
We may share data with:
Service Providers
We work with vetted third-party service providers under strict contractual obligations to operate the Service. These providers fall into the following categories:
- Cloud hosting, database, and content delivery providers
- Payment processing providers
- AI and machine learning providers. Fanaura uses Anthropic and OpenAI for AI-powered features.
- Communications providers (email and SMS delivery)
- Analytics providers
- Product analytics through PostHog on web and in the Fanaura iOS app
- Mobile subscription management through RevenueCat and billing through Apple In-App Purchase
- Crash reporting through Sentry on the Fanaura iOS app
- Mobile attribution through AppsFlyer and Meta when you allow tracking on iOS
Legal Authorities
When required by law or to protect rights.
In Business Transfers
If Fanaura, Inc. is acquired or merges, data may be transferred.
No Sale of Data
We do not sell personal data. We do not sell, rent, or trade any personal data to third parties for their own marketing or advertising purposes.
4. Your Rights
Depending on your jurisdiction (e.g., EU, California):
- Access or update your personal information
- Request deletion of your data (see Section 11)
- Opt-out of promotional messages
- Exercise GDPR/CPRA rights including data portability, access, and correction
- Withdraw consent for data processing at any time
Rights of Fans and End Consumers
If you are a fan who submitted information through a Fanaura smart link, pre-save, or RSVP page:
- Your data is processed on behalf of the artist, manager, or label who operates the campaign
- That party is the data controller; Fanaura acts as a data processor
- You may exercise your privacy rights by contacting that party directly or by contacting us at privacy@fanaura.com
5. Data Security
We implement industry-standard safeguards including:
- TLS/SSL encryption for data in transit
- AES-256 encryption for data at rest
- Role-based access controls
- Regular security audits and penetration testing
- SOC 2 compliant infrastructure providers
- HMAC-SHA256 signature verification for all incoming webhooks
- Encrypted data backups with access controls
- Separation of test and production environments
- Data loss prevention strategy
- Security incident response policy
- Access logging for all personal data operations
Disclaimer
However, no system is 100% secure.
6. Data Retention
We retain data only as long as necessary to deliver services or comply with legal obligations:
- Active account data: Retained while account is active
- Deleted account data: Purged within 30 days (except as required for legal compliance)
- Communication logs: Retained for 2 years for compliance purposes
- Financial records: Retained for 7 years per tax requirements
7. Children's Privacy
We do not knowingly collect data from children under 13 (or 16 in the EU). If we discover such data, it will be deleted promptly. If you believe a child has provided us with personal information, please contact us at privacy@fanaura.com.
8. SMS/Text Message Terms
By providing your phone number and opting in to SMS notifications:
- You consent to receive SMS messages including verification codes, music release alerts, event reminders, and promotional content
- Message frequency varies based on your notification preferences
- Message and data rates may apply
- You may opt out at any time by replying STOP to any message
- For help, reply HELP or email support@fanaura.com
- Consent is not a condition of purchase
9. Compliance Frameworks
- GDPR: We comply with EU data handling standards and offer rights to EU residents including the right to access, rectify, erase, restrict processing, data portability, and object to processing
- CCPA/CPRA: We provide opt-out and access rights to California users. California residents may request disclosure of data collected and shared
- TCPA: SMS marketing requires explicit opt-in from users and includes clear opt-out options
- CAN-SPAM: All marketing emails include unsubscribe links and honor opt-out requests within 10 business days
10. International Data Transfers
If you are located outside the United States, your data may be transferred to and processed in the United States. We use Standard Contractual Clauses and other appropriate safeguards for international transfers.
11. Data Deletion
You may request deletion of your personal data at any time by:
- Visiting https://fanaura.com/data-deletion
- Emailing privacy@fanaura.com
- Using the "Delete Account" option in your account settings
- Using the Delete Account option in the Fanaura iOS app Settings screen
Processing
We will process deletion requests within 30 days. Some data may be retained as required by law or for legitimate business purposes (fraud prevention, legal compliance).
Apple-billed subscriptions
Deleting your Fanaura account does not cancel a subscription billed through Apple. Cancel Apple-billed subscriptions in your Apple account settings under Subscriptions.
12. Updates to This Policy
We may update this Privacy Policy. Material changes will be communicated via email or prominent notice on our website. Continued use of our services after changes indicates acceptance.
13. Contact
- Privacy Inquiries: privacy@fanaura.com
- Technical Support: admin@fanaura.com
- Customer Support: support@fanaura.com
- Data Protection Officer: dpo@fanaura.com