Privacy Policy

1. Data Controller

This service is operated by:

Represented by: Judson Moore (President & CEO)
Contact email: hello@moorewwe.com

2. Information We Collect

2.1 Information from Spotify

When you connect your Spotify account, we collect:

• Your Spotify user ID and display name
• Your top artists and tracks
• Your recently played tracks
• Artist and genre preferences

2.2 Information You Provide

• Festival preferences and saved festivals
• Artist stars (favorites) and skipped artists
• Personal schedule and plan data
• Profile settings and preferences

2.3 Automatically Collected Information

• Log data (IP address, browser type, access times)
• Cookies and similar tracking technologies
• Usage data and analytics

3. How We Use Your Information

We use your information to:

• Match festivals and concerts to your music taste
• Generate personalized festival recommendations
• Create conflict-aware festival schedules
• Discover new artists based on your preferences
• Improve our service and user experience
• Communicate with you about your account
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Consent: When you authorize Spotify integration and accept cookies
• Contract Performance: To provide the festival planning services you requested
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: When required by law

5. Data Sharing and Disclosure

5.1 Third-Party Services

We share data with:

• Spotify: To authenticate and retrieve your music preferences
• JamBase: To fetch festival and concert information
• Hosting Provider: Vercel (for application hosting)
• Database Provider: Neon (for data storage)
• Analytics: Google Analytics (with your consent)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

6. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. For EU/EEA users, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and Data Processing Agreements.

7. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a machine-readable format
• Object: Opt out of certain data processing
• Withdraw Consent: Revoke consent at any time

To exercise these rights, contact us at hello@moorewwe.com

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encrypted database connections, secure authentication, and regular security updates.

9. Contact Us

For privacy questions or data requests, contact: