Privacy Policy
Giglist helps you organize concert tickets and plans. This policy explains what information we collect, how we use it, and the choices you have.
Information we collect
- Account information: your email address and any display name or preferences you choose to provide.
- Ticket and event information: emails you forward to your personal Giglist address, including their sender, subject, message content, and attachments. We use this information to extract event details such as dates, venues, seats, and ticket links.
- Content you add: events, notes, images, PDFs, and social activity such as follows or shared events.
- Notification information: a device token and device platform when you enable push notifications.
- Technical information: information in server logs and error reports that helps us secure and maintain the service.
How we use information
We use information to:
- create and secure your account
- process forwarded ticket emails and organize your events
- sync your data across the Giglist apps
- send notifications and service emails you request
- support social features when you choose to use them
- protect, troubleshoot, and improve Giglist.
- answer questions in the in-app assistant, using your messages and the event, saved-show, and music-preference information needed to reply.
When we share information
We do not sell your personal information. We share information only as needed to provide Giglist, including with providers that process email, send push notifications, monitor errors, host data, or help extract ticket details from forwarded emails. Those providers receive only the information needed for their service.
The in-app assistant sends your messages and the event, saved-show, and music-preference details needed to answer them to OpenRouter. OpenRouter routes each request to a model provider. Requests set OpenRouter's data_collection: deny preference, which excludes providers OpenRouter identifies as allowing data collection. This filter is not a zero-retention guarantee. OpenRouter and the selected provider process requests under their own policies. The assistant's safety checks also send your current request and limited conversation context through this route. Text you type can contain anything you choose to share. Administrators may use the assistant on behalf of a selected account for support and testing. Mobile assistant sessions expire after 30 days without activity; mobile downloads expire after 24 hours. Admin support chats expire after 24 hours idle. Cached admin chat content may remain in a worker's memory until expiry, cleanup, or restart, but cannot be downloaded after account deletion. OpenRouter's provider data-collection routing documentation describes this filter.
When AI tracing is enabled, Giglist sends prompts, replies, tool results, model usage, timing, and errors to LangSmith to troubleshoot AI behavior. These records can include your chat history, music preferences, saved-show information, and text from forwarded ticket emails. Giglist removes known credentials and image payloads before uploading traces. This is not anonymization of all personal information. Trace retention is managed separately in LangSmith, and deleting your Giglist account does not automatically delete those records. LangChain's privacy policy describes how LangSmith processes information.
If you share an event or use a social feature, information about that event may be shown to the people you choose. We may also disclose information when required by law or when necessary to protect the service, our users, or others.
Public website analytics
We use PostHog to understand visits to our public websites, including page views, visit duration, referring websites, and browser and device information. PostHog also receives connection information such as your IP address. A random browser identifier is stored in local storage to recognize repeat visits on the same website. This identifier is not linked to your Giglist account, other genre websites, or an app installation.
Website analytics remove query strings and fragments from page URLs and retain only the referring website's origin. We do not collect form contents, record sessions, or create person profiles through this integration. We honor browser Do Not Track and Global Privacy Control signals. Clearing site storage resets the browser identifier but does not erase previously collected analytics. PostHog's privacy policy explains how it processes information.
Forwarded emails
Your personal forwarding address is intended for ticket and event emails. Giglist checks the sender against your account and any senders you allow in Settings. Emails that are not allowed are rejected before they are stored by Giglist, although the email provider that delivered them may still retain its own copy.
Retention and deletion
We keep information while your account is active or for as long as it is needed to provide the service, maintain security, resolve disputes, or meet legal obligations. You can delete your account from the app. Account deletion removes your account, events, forwarded email data, and uploaded files from Giglist's active systems. Operational logs and backups may remain for a limited period where needed for security or reliability.
Your choices
You can choose what to forward, manage notification and social settings in the app, and delete your account. To ask a privacy question or request help with your information, email contact@gigl.ist.
Security
We use reasonable safeguards to protect information. No online service can guarantee absolute security, so please forward only information you are comfortable storing with Giglist.
Children
Giglist is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy as Giglist changes. We will post the updated policy here and change the date above.