Privacy Policy

Who this notice covers

ShowFoyer helps show teams manage guest applications, preparation, scheduling, signed documents, communications, and published episode links. This notice covers the ShowFoyer website and its closed, invitation-only testing service. Public account registration is closed. Invited show teams and their guests can use the available features during testing. Testing does not make private information public; a show can still deliberately publish a page or episode link.

The ShowFoyer operator is Nikolay Kot. Privacy contact: orionlink24@gmail.com. Show organizers decide what guest information to request, who on their team may use it, and what to publish. For show-specific information or requests, contact the organizer who invited you; you may also contact us for help routing a request.

Information we process

Account and team information: names, email addresses, authentication identifiers, membership, permissions, preferences, and communications with support.

Guest and production information: contact details, applications, biographies, social links, questionnaire answers, team notes, uploaded files, booking dates and time zones, meeting locations, and episode links or other content supplied by the show or guest. The fields requested depend on the show.

Signature records: the document text and version, signing language, typed name, signature time, record integrity information, IP address, and browser user-agent information. Signing permission and publication permission are governed by the document you sign, not by this privacy notice.

Operational information: activity history, email content, recipient and delivery status, connection and synchronization status, and technical request or error logs. Hosting and security services may process IP addresses and device or browser details when serving requests. If a show uses payment tracking, we process the amounts, methods, status, notes, and references that its team records; that record is not itself a card transaction.

How we use information

We use information to provide accounts and access control; deliver guest preparation pages; store answers and signed records; schedule, reschedule, and cancel appointments; send requested invitations, confirmations, reminders, and publication messages; display content chosen for publication; and help show teams manage their workflow.

We also use information to support users, diagnose failures, secure the service, prevent abuse, keep relevant activity records, and meet applicable obligations. We do not sell personal information or use Google user data for advertising, credit decisions, or data-broker services.

Google Calendar connection

A show manager may connect a Google account. We receive the Google account email and identifier, the permissions granted, and OAuth access and refresh tokens. Tokens allow authorized requests without asking you to sign in for each request and are stored encrypted by the application.

We request permission to list accessible calendars, read availability, and manage calendar events. We use calendar names, identifiers, time zones, and access roles to let the manager select a recording calendar and calendars to check for conflicts. Availability checks use busy intervals and, where needed on the recording calendar, event identifiers, times, status, transparency, and ShowFoyer synchronization markers. They do not require unrelated event titles, descriptions, or guest lists.

When calendar updates are enabled, ShowFoyer creates, updates, and removes the events linked to its bookings in the selected recording calendar. These events can include the show or guest name, time, time zone, duration, location, and booking details. If guest invitations are enabled, the guest email is sent to Google as an attendee, and Google handles invitation delivery and responses. We retain event mappings and relevant synchronization or invitation status to manage those bookings.

The Calendar integration does not request Gmail or Google Drive access. Google-derived data is used for these visible connection, availability, and scheduling features, not to train general-purpose AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect Google in the show’s Integrations settings or revoke ShowFoyer access through your Google account’s third-party connections controls. Disconnecting stops future use of that connection and clears its stored OAuth credentials; it does not automatically delete existing Google events, invitations, ShowFoyer bookings, or copies held by attendees. Contact us or the organizer if you also want associated stored records reviewed for deletion.

Who can receive information

Authorized members of your show can access information according to their roles. Your personal guest link provides access to your preparation page; keep it private. Public show pages, published episodes, and linked media can be viewed or shared by others. Public links do not make private questionnaire answers or signed records public.

Service providers process information needed to operate the service, including hosting (Vercel), account, database and file infrastructure (Supabase), and transactional email (Resend). Diagnostic providers such as Sentry may process error reports when enabled. Google processes data when its Calendar connection is used. Email and calendar recipients may retain their own copies. External websites or media platforms linked from ShowFoyer operate under their own policies.

If an authorized team member uses an enabled AI drafting feature, the prompt, selected context, and any deliberately supplied source text or files are sent to the configured AI provider (OpenAI, Anthropic, or Google, depending on the enabled feature and selected provider) to generate the requested draft. Do not supply private guest information unless you are authorized to do so. Connecting Google Calendar does not by itself send Google data to those features.

Access by support personnel is limited to the purpose of providing requested assistance, maintaining security, or meeting applicable obligations. Human access to Google API data is limited to the circumstances allowed by Google’s User Data Policy, such as your specific permission, security investigation, or applicable law. We may disclose information when legally required or necessary to protect users and the service. Google API data remains subject to its additional transfer restrictions.

Cookies and similar storage

We use cookies and browser storage for functions such as authentication, security, language, theme, and interface preferences. Blocking necessary storage may prevent sign-in or other features from working. We do not use page-view or event tracking for advertising in the current testing service. Operational logs and show-level activity or workflow statistics are still processed. External services you visit have their own cookie practices.

Storage, retention, and deletion

We keep information while it is needed to provide the requested service and maintain relevant operational, security, and signed records. Retention depends on the type of information, the show’s instructions, and applicable obligations; there is no single automatic deletion period for every record.

A deletion request may require help from the show organizer or support. Archiving a guest is not deletion. Signed records and information required for a dispute, security investigation, or legal obligation may need to be retained. Backup copies may persist until the applicable backup lifecycle completes; we do not promise immediate removal from every backup. Disconnecting an integration is separate from deleting show or guest records.

Copies already delivered by email, stored in an attendee’s calendar, downloaded, or published on another service are controlled by their recipients or that service. We can explain what we control and help route requests concerning other copies.

Your choices and requests

Contact orionlink24@gmail.com to ask about access to, correction of, export of, or deletion of your personal information, or to raise a privacy concern. Include the show name and the email used with ShowFoyer, but do not send a password or your private guest link. We may verify your identity and authority before acting and may coordinate with the show organizer.

Depending on where you live and the circumstances, applicable law may provide additional rights, such as objection, restriction, withdrawal of consent, or a complaint to a relevant regulator. We assess requests under the law that applies and explain any necessary limits. You may stop using the service or ask the organizer to stop optional communications; operational messages can still be needed for an active booking or request.

Security and international processing

We use safeguards such as encrypted transport, access controls, tenant-scoped permissions, and encrypted stored Calendar OAuth tokens. No internet service can guarantee absolute security. Tell us promptly if you believe a private link or account has been misused.

We and our service providers may process information in the United States and other locations where they operate. Applicable protections and transfer requirements depend on the information and jurisdiction. Contact us if you need details relevant to your use of the service.

Children

ShowFoyer’s current guest workflow is intended for adults, and the guest release is not a consent form for minors. We do not knowingly seek personal information from children under 13. If you believe a child has supplied information, contact us so we can review and address it.

Changes to this notice

We may update this notice as the service changes. The date below identifies the current version. Material changes will be communicated through appropriate service or contact channels. A policy update does not itself authorize new uses of Google data or replace any consent required for a new purpose.