Legal

Privacy Policy

Effective 27 September 2026

BookTheTour is a tour-planning and booking workspace. The data controller is Anton Kasatkin, trading as BookTheTour, in Portugal. Privacy and data-rights contact: bookthetour@proton.me.

1. Data we collect

We process account details such as your name, email address, authentication records, and subscription status; band profiles and links; tour dates, routes, saved cities, venue selections, notes, and booking status; messages and delivery events; support communications; and technical information such as IP address, browser, timestamps, security events, and service diagnostics. Payment card details are collected by the payment provider and are not stored by BookTheTour.

2. Why we use data and our legal bases

We use account, workspace, message, and subscription data to perform our contract with you. We use security logs, service diagnostics, verified public venue contacts, and limited product analytics for our legitimate interests in operating a reliable booking service, preventing abuse, and improving data quality. We process billing and compliance records where required by law. Where consent is legally required, we ask for it and you may withdraw it at any time.

3. Venue contact data

Professional venue information is collected from official public sources or directly verified sources for relevant booking outreach. We record evidence and review status so unverified contact data is not presented as confirmed. A venue or authorised representative may ask us to correct, restrict, or remove personal contact information by emailing the privacy contact.

4. How we share data

We share only the data needed with contracted providers that support authentication and database hosting (Neon), payment processing (Stripe, when enabled), email delivery and receipt (Resend, when enabled), hosting and security, and map or routing services. A message is shared with its intended venue recipient when you choose to send it. We may also disclose information when required by law, to protect rights or security, or as part of a business reorganisation subject to appropriate safeguards. We do not sell personal data or use it for third-party advertising.

5. International transfers

Some providers may process data outside your country. Where European data-protection law applies, we rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.

6. Retention

Workspace data is kept while your account is active. When you delete the account, active workspace records are removed and an active subscription is canceled. Limited copies may remain in restricted backups until the provider's ordinary backup rotation completes. We retain billing, fraud-prevention, security, dispute, and legal records only for the period required by law or reasonably needed for those purposes. Public venue records and evidence may remain as part of the shared venue catalogue after the submitting account is anonymised.

7. Your rights

Depending on applicable law, you may access, correct, delete, restrict, or object to processing of personal data and request a portable copy. The Backstage page provides a JSON export and permanent account deletion. You may also email us to exercise a right. We may need to verify your identity and may retain information where a legal exception applies.

If European data-protection law applies, you may complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or the supervisory authority where you live or work.

8. Cookies and similar storage

BookTheTour uses essential cookies and local browser storage for authentication, security, and core workspace preferences. We do not currently use advertising cookies. If optional analytics or marketing technologies are introduced, we will provide the controls required by applicable law before using them.

9. Security

We use access controls, encrypted transport, account isolation, controlled administrative roles, and service monitoring designed to protect personal data. No online system is completely secure. Please use a unique password and report suspected account misuse promptly.

10. Children

The service is intended for adults and professional representatives and is not directed to children under 16. If you believe a child has provided personal data, contact us so we can investigate and remove it where appropriate.

11. Changes and contact

We may update this policy to reflect legal, provider, or product changes. Material changes will be notified through the service or by email. Questions and requests may be sent to bookthetour@proton.me. Contract, billing, cancellation, and refund terms are in the Terms of Service.