Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and password when you register
• Team Data: Team names, member roles, and repository access settings
• Website Content: Festival data including artists, stages, events, and configuration
• Technical Data: SSH keys (encrypted), IP addresses, browser type, and usage logs

2. How We Use Your Information

Your information is used to:

• Provide and maintain our festival management services
• Authenticate users and manage team access
• Execute automated builds and deploy your festival websites
• Send important service updates and security notifications
• Improve our platform based on usage patterns

3. SSH Keys & Repository Access

When you use our repository management features:

• We generate RSA 4096 SSH keypairs for your repositories
• Private keys are encrypted at rest using Rails secret_key_base
• Public keys are provided for you to add to your Git provider
• You can rotate keys at any time from repository settings

4. Data Sharing & Disclosure

We do not sell your personal information. We may share data:

• With team members you invite to your festival websites
• With service providers (hosting, email) under confidentiality agreements
• When required by law or to protect our legal rights
• In connection with a merger or acquisition (with notice)

5. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze platform usage through analytics tools
• You can control cookies through your browser settings

6. Data Security

We implement industry-standard security measures:

• Encryption of sensitive data (SSH keys, passwords) at rest
• HTTPS/TLS for all data transmission
• Regular security audits and updates
• Access controls and team-based permissions

7. Data Retention

We retain your data for as long as your account is active. You may:

• Delete individual festival websites from your dashboard
• Export your data by contacting support
• Request account deletion, which removes all associated data

8. Third-Party Integrations

Our platform integrates with third-party services:

• Git Providers (GitHub/GitLab): For repository access via SSH deploy keys
• Analytics (Google Tag Manager/Meta Pixel): Configured by you for your festival websites
• Social Media: Links to your festival's social profiles

9. Your Rights

Depending on your location, you may have rights to:

• Access and export your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to certain data processing

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at privacy@festival2025.com.