Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Venue Family ("Venue Family", "we", "us", or "our") collects, uses, and protects information when you use our event management platform at venuefamily.com and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following categories of information:

  • Account information — your name, email address, password, and organization details you provide when registering.
  • Event and venue data — events, event dates, venues, locations, documents, form submissions, and other content you create or upload to operate your organization.
  • Payment information — when you subscribe to a paid plan, payments are processed by Stripe. We do not store full card numbers on our servers; we retain only limited billing identifiers needed to manage your subscription.
  • Usage and technical data — IP address, browser type, device information, and pages visited, collected automatically to operate and secure the Service.

2. Google User Data

If you choose to connect your Google account to sync calendar events, we request the following Google OAuth scopes:

  • openid, userinfo.email, userinfo.profile — to identify your account and display your name and email.
  • calendar.app.created — a limited scope that allows the Service to create secondary calendars and to manage only the calendar events that the Service itself creates. It does not grant access to read, edit, or delete any other events on your Google Calendar.
  • calendar.acls — used solely so that an organization administrator can publish an organization's public calendar. When an administrator chooses to publish it, we add a single sharing rule that makes that Venue Family calendar publicly readable, so audiences can subscribe to the organization's public schedule. We only ever apply this to calendars the Service itself created, and we do not read or change the sharing settings of any other calendar you own.
  • drive.file — a limited scope that lets the Service create files and folders in your Google Drive and manage only the files it created there. We use it for one purpose: when an organization administrator connects Google Drive, we copy that organization's event and venue images and videos into a folder we create, so a marketing team can work with them in Drive. It does not grant access to read, edit, delete, or even see any other file in your Drive.
  • adwords — used solely when an organization administrator connects Google Ads to automate event promotion. It allows the Service to create, update, and pause Performance Max advertising campaigns and asset groups for your live events. It does not grant access to manage any unrelated campaigns or personal data.

We use Google user data solely to provide and improve the calendar-sync features you request — for example, adding event dates you schedule in Venue Family to a dedicated calendar.

Synchronization is one-way: Venue Family writes to the calendars it creates and never reads your existing Google Calendar data back into the Service. We store OAuth access and refresh tokens for connected accounts (encrypted at rest) along with the identifiers of the calendars and events we create.

Drive mirroring is also one-way: Venue Family writes copies into the folder it creates and never reads your other Drive files back into the Service. Copies we place in your Drive belong to you and count against your Google storage; we do not delete them, so removing an image from Venue Family leaves your Drive copy in place for you to manage.

If an administrator publishes an organization's public calendar, the events on that calendar become visible to anyone with the link. Only calendars created by Venue Family and explicitly marked public can be published this way; your personal and pre-existing calendars are never shared.

Limited Use disclosure. Venue Family's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we do not:

  • transfer or sell Google user data to third parties, except as necessary to provide or improve the Service, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users;
  • use Google user data for serving advertisements; or
  • allow humans to read Google user data, unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized.

You can revoke Venue Family's access to your Google account at any time from your Google Account permissions page.

3. Mobile Information and Text Messaging

If you opt in to our text message program, we collect and store your mobile phone number, the date you verified it, the date you opted in or out, and a log of the messages sent to or received from that number. The log exists so we can honour opt-outs reliably, investigate delivery problems, and account for messaging costs.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. We do not sell mobile information. Phone numbers and consent status are never included in any data we license, sell, or share for advertising.

The only third party that receives your mobile number is the carrier network that delivers the message, through our messaging provider Vonage, and only to the extent required to send and receive it. Vonage processes that data under its own privacy policy as our service provider.

You can end the program at any time by replying STOP to any message, or from your profile page. We retain the opt-out record after you leave, because that record is what prevents us texting you again.

4. Third-Party Services

We rely on the following third-party processors to operate the Service. Each handles data under its own privacy policy:

  • Stripe — payment processing
  • Mailchimp — newsletter and email communications
  • Amazon Web Services (S3) — file and document storage
  • Cloudflare Turnstile — bot protection on registration and forms
  • Google — calendar integration (see Section 2)
  • Vonage — text message delivery and phone number verification (see Section 3)

5. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and secure the Service. You can control cookies through your browser settings, though disabling them may affect functionality.

6. Managing Your Data and Privacy Rights

We believe in giving you full transparency and direct control over the personal data you share with Venue Family. You have the right to access, rectify, export, and delete your personal information, as well as manage how we communicate with you.

6.1 Accessing and Updating Your Account Information

You can review, edit, and update your personal information at any time by logging in to your account and visiting your Profile (available at /user/profile or through your venue organization's embedded dashboard):

  • Personal Details: Edit your account name, display name, artist name, chosen name, email address, phone number, birthday, pronouns, bio, and social/portfolio links.
  • Profile Images: Upload, replace, or remove your profile avatar and artist images.
  • Artist and Booking Profiles: Manage your public artist profile, booking availability status, performance formats, technical space requirements, and featured media showcase.
  • Interests and Volunteer Profiles: Update volunteer qualifications, skills, emergency contacts, availability schedules, and venue interests.

6.2 Communication and Notification Preferences

  • Email Notifications: You can customize which automated workflows and organization updates you receive per organization directly in your profile settings.
  • SMS and Text Messaging: You can verify your phone number, opt in to receive text message updates, or opt out at any time directly from the SMS settings panel in your profile, or by replying STOP to any text message from us (see Section 3).

6.3 Connected Accounts and Third-Party Integrations

  • Google Calendar Sync: You can view your calendar sync connection, trigger a manual sync, or disconnect Google Calendar sync at any time in your profile's Calendar Sync settings. You may also revoke Venue Family's access to your Google account at any time from your Google Account permissions page.
  • API Tokens and Active Sessions: You can generate and revoke API access tokens, view devices currently signed in to your account, and log out of other browser sessions remotely.

6.4 Data Portability: Downloading an Export of Your Data

You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format:

  • You can generate and download an export of your personal account data at any time by clicking "Download My Data" in the Data & Privacy section of your profile settings.
  • This export provides a complete JSON file containing your account profile details, artist settings, links, volunteer records, public listing details, organization memberships and roles, attendance and sign-in records, ticket order history, and notification preferences. Sensitive authentication secrets (such as hashed passwords and encryption tokens) are excluded for your security.

6.5 Account and Data Deletion (Right to Erasure)

You can permanently delete your account and associated personal data at any time:

  • Self-Service Deletion: Navigate to the Delete Account section at the bottom of your profile settings, click "Delete Account", and enter your password to confirm.
  • Assisted Deletion: You may also email us at privacy@venuefamily.com or info@venuefamily.com to request the deletion of your account and personal data.
  • What Happens Upon Deletion: Deleting your account immediately removes your personal login credentials, authentication tokens, profile photos, and personal profile information.
  • Retention Obligations: In accordance with standard accounting, tax, legal, and regulatory requirements (including PCI-DSS and card network rules), we retain historical transaction records (such as completed ticket orders, payout histories, and tax receipts) and audit logs for the period required by applicable law or to defend against fraud and dispute claims. These records are retained strictly for compliance and will not be used for marketing or active processing.

7. Security

We use industry-standard safeguards — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you of material changes.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at info@venuefamily.com.