Privacy Policy

Last updated: February 20, 2026

At ArtistAlleyNotifier, your privacy matters. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

1. Information We Collect

Account Information: When you register, we collect your name, email address, and a hashed version of your password.

Subscription & Payment Data: Payments are processed by Stripe. We do not store your full credit card information — only a subscription status and Stripe customer ID.

Notification Preferences: Conventions you're interested in and your notification settings.

Usage Data: Basic server logs including IP addresses, browser type, and pages visited. This data is used for security and service improvement.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To send you convention alerts and account-related emails you've requested
• To process subscription payments
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your personal information to third parties. Ever.

3. Email Communications

We send:

• Transactional emails: Account confirmation, password reset, subscription receipts (cannot be opted out of)
• Notification emails: Convention application alerts based on your preferences (opt-out available in account settings)

All emails are sent from notifications@artistalleynotifier.com via Resend.

4. Data Sharing

We share data only with trusted service providers necessary to operate the Service:

• Stripe — payment processing
• Resend — email delivery
• Neon — database hosting (PostgreSQL)
• Vercel — application hosting

These providers are contractually obligated to protect your data and may not use it for their own purposes.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where required by law (e.g., billing records).

6. Security

We use industry-standard measures to protect your data, including:

• Passwords hashed with bcrypt
• HTTPS/TLS encryption for all data in transit
• Database access restricted to application infrastructure
• JWT tokens with short expiry for session management

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate information via your account settings
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format

To exercise these rights, email us at support@artistalleynotifier.com.

8. Cookies

We use minimal cookies strictly necessary for the Service to function (session authentication). We do not use tracking or advertising cookies.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service.

11. Contact

Questions or concerns? Contact us at support@artistalleynotifier.com.