Privacy Policy

soundr is the controller of the personal data it processes about you in connection with the platform. We operate from the European Union and apply the EU General Data Protection Regulation (GDPR).

• Account & profile data — your email, display name, roles (fan, artist, organizer/venue), and any profile details or media you add.
• Activity data — events you save or RSVP to, reviews, and fan media you submit.
• Usage & device data — pages and features you use, approximate location (city/area you choose for discovery), language, and technical data such as device type and IP address used to keep the service secure.
• Transaction data — for organizers, records of the credits you buy to list and promote events (soundr does not sell tickets, so we hold no ticket orders). Card and payment-instrument details are collected and processed by our payment provider, not by soundr — we never see or store your full card number.
• Communications — messages you send us and your newsletter / notification preferences.

We rely on the following GDPR lawful bases:

• Performance of a contract — to create and run your account, process organizer credit purchases, and provide the platform.
• Consent — for the soundr weekly newsletter, non-essential marketing, and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — to keep soundr secure, prevent fraud and abuse, understand and improve the service, and promote events — balanced against your rights.
• Legal obligation — to meet tax, accounting, consumer-protection and content-moderation duties (including the EU Digital Services Act).

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set with your consent, and you can change your choices at any time via cookie settings.

We share personal data with carefully selected service providers who process it on our behalf under data-processing agreements:

• Polar — our payment provider and Merchant of Record for organizer credit purchases (soundr does not sell tickets). Polar processes the payment and billing data of organizers who buy credits to list and promote events — taking payment, applying taxes (VAT) and handling Strong Customer Authentication as the seller of record for those purchases.
• Hetzner — our hosting and infrastructure provider, with data hosted in the European Union.
• Our email provider — to send transactional emails (e.g. order confirmations, security notices) and, where you have opted in, the soundr weekly newsletter.

We also share data where necessary with event organizers and venues — for example, engagement with their events and any content you post about them — and with authorities where we are legally required to. Because tickets are sold by organizers off-platform, your ticket-purchase details sit with the seller you buy from, not with soundr. We do not sell your personal data.

We aim to keep personal data within the European Economic Area. Where a provider processes data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with additional measures where needed.

We keep personal data only as long as needed for the purposes above:

• Account & profile data — for as long as your account is active, then deleted or anonymised after closure.
• Transaction records — retained for the period required by tax and accounting law (typically several years).
• Moderation & safety records — kept for as long as needed to handle reports, appeals and legal obligations.
• Marketing consent & preferences — until you withdraw consent or unsubscribe.

Subject to the conditions in the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@soundr.social. You can manage your newsletter and notification preferences directly in your account settings, and your cookie choices via cookie settings. We are building self-service tools to download and delete your data; in the meantime we will action your request within the time limits the GDPR requires.

soundr is not directed at children under the age at which they can consent to data processing in their country. Some events are restricted to people aged 18 or over; where an event is marked 18+, attendance and related processing are limited accordingly.

We may update this policy. When we make material changes we will update the effective date above and, where appropriate, notify you.

Questions about your privacy? Email privacy@soundr.social.