Privacy Policy

1. Information We Collect

When you use Summon, we collect:

• Account information — your email address, display name, and avatar (provided directly or via Spotify/Apple OAuth)
• Voting data — the artists and cities you have voted for
• Profile preferences — your home city, favourite artists, and favourite venue types
• Usage data — pages visited, interactions with the platform, and general analytics (via Vercel Analytics)

2. How We Use Your Information

We use your information to:

• Provide and improve the Summon platform
• Track and display vote counts per artist and city
• Personalise your experience (home city auto-detection, recommendations)
• Send transactional emails (account confirmation, submission status updates)
• Communicate fan demand to venues and promoters on your behalf

3. Information We Share

We do not sell your personal information. We may share information with:

• Venues and promoters — aggregated, anonymised vote counts only (no personal data)
• Service providers — Supabase (database and auth), Vercel (hosting), Resend (email delivery)
• Legal authorities — if required by law

4. Third-Party Authentication

If you sign in with Spotify or Apple, we receive your email address, display name, and profile picture from those services. We do not receive your Spotify listening history, playlists, or payment information. Review Spotify's and Apple's privacy policies for details on how they handle your data.

5. Cookies & Analytics

We use cookies and local storage to maintain your session and remember your city preference. We use Vercel Analytics to understand how users interact with the platform. This data is anonymised and does not include personally identifiable information.

6. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by emailing hello@wesummon.com.

7. Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS), secure authentication via Supabase, and access controls. No system is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us at hello@wesummon.com.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes via email or a notice on the platform.

10. Contact

For privacy questions or requests, contact us at hello@wesummon.com.