Privacy Policy

CrowdFuel (the “Service”) is provided by SunRock IT, LLC (“SunRock IT,” “we,” “us,” or “our”).
Effective Date: 1-1-2026  |  Last Updated: 1-1-2026

1) Scope

This Privacy Policy describes how SunRock IT collects, uses, discloses, and protects information when you use CrowdFuel, including: (a) the CrowdFuel mobile applications; (b) fan-facing web pages opened via QR codes; (c) our website(s) and related services (collectively, the “Service”).

This Policy applies to Bands and their members (“Band Users”), fans/end users (“Fans”), and website visitors. By using the Service, you consent to the practices described here.

2) Information We Collect

2.1 Information You Provide

• Band account info: band name, contact email, admin/member details, venue/show details you enter (e.g., location, time), setlists/song catalogs, and other content you submit.
• Fan request info (via QR/web): requested song selection, optional name/display name, and optional message/note to the band.
• Support communications: messages you send to support and any information you choose to share (e.g., screenshots, logs, device details).

2.2 Payment Information (Processed by Stripe)

Payments (tips and/or request payments) are processed by our third-party payment processor, Stripe. We do not store full credit card numbers. Stripe may collect payment method details (e.g., card, Apple Pay, Google Pay), billing details, and device/payment identifiers to process transactions and prevent fraud.

Stripe’s use of your information is governed by Stripe’s privacy policy and terms. We may receive limited information from Stripe such as payment status, transaction identifiers, amounts, timestamps, and limited payer details (as permitted by Stripe and payment method rules) to provide receipts, manage disputes, support refunds, and reconcile payouts.

2.3 Automatically Collected Information

• Device & app data: device type, operating system version, app version, language, time zone, and crash logs/diagnostics.
• Usage data: features used, timestamps, pages viewed, and interactions (e.g., request submissions, queue actions).
• Log data: IP address, approximate location derived from IP (not precise GPS unless you explicitly enable it), and server access logs.
• Cookies/Local storage (web): when using web pages, we may use cookies or local storage for session management, security, and basic analytics.

3) How We Use Information

We use information to:

• Provide and operate the Service: create gigs, display song lists, manage real-time request queues, and deliver fan requests to bands.
• Process payments and payouts: facilitate tips/requests, confirm payments, handle disputes, chargebacks, and issue refunds (via Stripe).
• Improve and secure the Service: troubleshoot bugs, monitor performance, prevent fraud/abuse, and enforce our Terms.
• Communicate with you: respond to support requests, send service updates, and provide transactional messages (e.g., receipts or confirmations), where applicable.
• Analytics: understand usage patterns and improve UX (where enabled).
• Legal compliance: comply with applicable laws, regulations, and lawful requests, and protect our rights and users.

4) How We Share Information

We share information only as needed to operate the Service, including with:

• Payment processors (Stripe): to process payments, refunds, disputes, and payouts.
• Cloud infrastructure providers (Google Firebase/Firestore): to store data and deliver real-time updates.
• Service providers: vendors that help with hosting, analytics (if enabled), email/SMS delivery (if enabled), customer support tools, and security monitoring.
• Band visibility: Fan-submitted requests, names (if provided), and notes/messages are visible to the Band running the show and its authorized members.
• Legal and safety: if required by law, subpoena, court order, or to protect rights, safety, and prevent fraud or abuse.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets (subject to appropriate confidentiality safeguards).

6) We Do Not Sell Personal Information

We do not sell your personal information for money. We also do not share personal information for cross-context behavioral advertising as a business model.

7) Data Storage, Hosting, and International Transfers

CrowdFuel uses cloud services such as Google Firebase/Firestore and Stripe. Your information may be processed and stored in the United States and/or other countries where our providers maintain facilities. Those countries may have different data protection laws than your country.

8) Data Retention

We retain information as long as reasonably necessary to provide the Service, comply with legal obligations (e.g., accounting and tax), resolve disputes, enforce agreements, and maintain security. Retention periods vary by data type:

• Band account & gig data: retained while your account is active and for a reasonable period thereafter.
• Transaction records: retained as required for accounting, tax, and dispute handling (often multiple years depending on jurisdiction).
• Fan request messages/notes: retained to support show reporting and dispute resolution, and may be deleted or anonymized over time.
• Logs & diagnostics: typically retained for a limited time unless needed for security investigations.

9) Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is completely secure. You use the Service at your own risk.

10) Your Choices and Rights

• Access/Update: Band users can update certain account information in-app.
• Device permissions: you can control app permissions through your device settings.

11) Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps.

12) Third-Party Links and Services

The Service may include links to third-party websites or services (including Stripe). We are not responsible for third-party privacy practices.

13) Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated version and revise the “Last Updated” date. If changes are material, we may provide additional notice as required by law.

14) Contact

For questions or requests related to privacy:

SunRock IT, LLC
Email: support@sunrockit.com
Support: support@sunrockit.com