1. Introduction

encore ('we', 'us', 'our') is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it. By using our platform you agree to the practices described here.

2. Data we collect

We collect information in the following ways:

• Account data: Name, email address, and password when you register. If you sign in with Google, we receive your name and email from Google.
• Profile data: Display name, home countries, and preferences you set in your profile.
• Content data: Reviews, comments, photos, and ratings you submit.
• Usage data: Pages visited, features used, search queries, and interactions on the platform.
• Device data: IP address, browser type, operating system, and device identifiers.
• Promoter registration data: Full name, email, company name, and website URL submitted via the promoter registration form.

3. How we use your data

• To provide the service: Authentication, displaying your content, managing your saved shows and reviews.
• To improve the platform: Understanding how users interact with encore to make it better.
• To communicate: Sending account-related emails, update notices, and (if opted in) promoter programme updates.
• To ensure safety: Detecting and preventing fraud, abuse, and violations of our Terms of Service.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Legal basis for processing

We process your data on the following legal bases: (a) performance of a contract — to provide our services; (b) legitimate interests — to improve the platform and ensure security; (c) consent — for optional communications such as promoter programme updates, which you can withdraw at any time.

5. Data sharing

We share data only with:

• Supabase: Our database and authentication provider, which stores account and content data on servers in the EU/Singapore region.
• Vercel: Our hosting provider for the web platform.
• Google: If you use Google Sign-In, subject to Google's privacy policy.

We may disclose data where required by law or to protect the rights, property, or safety of encore or its users.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention. Reviews and comments may remain in anonymised form.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdrawal of consent: Opt out of communications at any time via account settings or by emailing us.

To exercise any of these rights, contact us at privacy@encore.app. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), secure authentication via Supabase, and row-level security on our database. No method of transmission over the internet is completely secure — we cannot guarantee absolute security.

9. Children

encore is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that a child has registered, we will delete their account promptly.

10. International transfers

Our infrastructure may store data in the EU or Singapore. By using encore, you consent to the transfer of your data to these jurisdictions. We ensure appropriate safeguards are in place for any cross-border transfers.

11. Changes to this policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notice. The 'last updated' date at the top of this page indicates when the policy was last revised.

12. Contact

For privacy questions or to exercise your rights, contact us at privacy@encore.app.