Privacy Policy
1. Information We Collect
We collect information you provide including your name, email address, phone number, and band/artist information, as well as social media data you choose to connect.
2. Phone Numbers & SMS Data
We collect phone numbers provided by band members through the Artist CNTRL dashboard for the sole purpose of enabling SMS communication between band managers and their team.
We do not sell, rent, lease, or share phone numbers or SMS data with any third parties for marketing or advertising purposes. Phone numbers are only used to deliver SMS messages initiated by the band manager through Artist CNTRL.
3. How We Use Your Information
We use information to provide and improve the Service, send SMS notifications as directed by band managers, process applications, and communicate about the Service.
4. SMS Messaging Consent
Band members consent to receiving SMS messages by providing their phone number to a band manager through Artist CNTRL and joining a band roster. Recipients can revoke consent at any time by replying STOP. Message types include scheduling notifications, availability requests, event updates, and band communications. Message frequency varies. Standard message and data rates may apply.
5. Data Storage & Security
Your data is stored securely using industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information.
6. Data Sharing
We do not sell your personal information. We may share information with service providers (such as SMS delivery providers) only to the extent necessary to provide the Service.
7. TikTok Data
When you connect your TikTok account through Artist CNTRL, we use TikTok's Login Kit and Display API. We request only the minimum scopes required to power the analytics features you've asked us to provide:
user.info.basic, so we can display your TikTok username and avatar inside Artist CNTRL and confirm the right account is connected.video.list, so we can read your own published videos (titles, view counts, like counts, comment counts, share counts) and surface them in your analytics dashboard.
From these scopes we store your TikTok open_id, display name, username, avatar URL, follower count, likes count, an OAuth access token, and a refresh token. We also cache video metadata (title, video ID, play count, like count, comment count, share count, create time, cover image URL) so the dashboard loads quickly. We do not download, rehost, edit, post, modify, or delete TikTok content. We never use your data for advertising, profiling, or training machine learning models.
We do not sell, trade, or transfer your TikTok data to third parties. TikTok data is retained only while your account remains connected. You can revoke Artist CNTRL's access at any time from inside Artist CNTRL (Settings → Connections → Disconnect TikTok) or from your TikTok account at tiktok.com → Settings → Manage app permissions. When access is revoked we delete your stored tokens and cached video metadata within 30 days. To request immediate deletion, follow the instructions in the Account & Data Deletion section below.
8. Google User Data
When you connect your Google account through Artist CNTRL, we request access to the https://www.googleapis.com/auth/calendar.events scope only. We use this access exclusively to create, update, and delete calendar events on your primary Google Calendar that mirror shows from your Artist CNTRL tour schedule.
We do not read your existing calendar events. We do not access calendars other than your primary one. We do not share your Google data with any third party. We do not use Google user data to train AI/ML models, profile you, or serve advertising. Artist CNTRL's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We store the OAuth access token and refresh token Google issues us, encrypted at rest, plus a map of Artist CNTRL show IDs to the Google event IDs we created so future syncs update rather than duplicate. You can disconnect Google Calendar at any time in Settings → Calendar sync (which immediately deletes the stored tokens and ID map), or revoke Artist CNTRL's access from your Google account at myaccount.google.com/permissions.
9. Facebook & Instagram (Meta) Data
When you connect a Meta account through Artist CNTRL, you authenticate with Facebook Login and select a Facebook Page you manage (and, if linked, its Instagram professional account). We request only the permissions needed to power the analytics and advertising features you ask us to provide:
pages_show_list, to list the Pages you manage so you can choose which one to connect.pages_read_engagement, to read the selected Page's content (posts, photos, videos) and engagement and show it in your dashboard.read_insights, to read the selected Page's insights (reach, impressions, views, new follows).instagram_basic, to read the linked Instagram professional account's profile (username, name, bio, follower and media counts) and confirm the right account is connected.instagram_manage_insights, to read that Instagram account's insights (reach, per-post performance).ads_read, to read your ad accounts, campaigns, spend, and performance so you can see them inside Artist CNTRL.ads_management, to create, edit budgets for, and pause/resume Meta ad campaigns from inside Artist CNTRL, only when you explicitly take those actions.
From these permissions we store, encrypted at rest, the access tokens Meta issues us, the connected Page ID and name, the linked Instagram account ID and username, and profile/avatar images so the connected-account identity is shown in the app. We cache Page and Instagram metrics and ad performance so the dashboard loads quickly. We do not post to your Page or Instagram and we do not modify or delete your content. We never use your Meta data to train machine-learning models or for profiling unrelated to your own analytics, and we do not sell or transfer it to third parties.
Meta data is retained only while your account remains connected. You can disconnect at any time in Settings → Connections, or remove Artist CNTRL from your Facebook Business Integrations settings. When you remove the app, Meta notifies us through our Deauthorize and Data Deletion Request callbacks, and we delete your stored Meta tokens and disconnect the linked Page and Instagram account. To request deletion directly, see the Account & Data Deletion section below.
10. Shopify Data
When you connect a Shopify store through Artist CNTRL (a product of CNTRL Global), we request only read-only scopes, read_orders and read_all_orders (so we can show your full historical merch sales, not just the last 60 days) and read_products. We never request write access and never create, modify, or delete anything in your store, products, or orders.
We use this access to display your merchandise products and to read order-level data (order totals, line items, currency, and order dates) so we can show your merch sales and roll them into the per-show settlement for your shows. We read only this order and product data. We do not request the read_customers scope, we do not import your customers' names, email addresses, phone numbers, or contact details, and we do not build a customer or fan list from your store. We limit the order fields we request to the sales figures we display.
We store, encrypted at rest, the access and refresh tokens Shopify issues us and your store's domain. We never sell, trade, or transfer your Shopify store or customer data to third parties, and we never use it to train machine-learning models, profile you, or serve advertising. Artist CNTRL does not bill you through Shopify or use Shopify's Billing API.
Shopify data is retained only while your store remains connected. You can disconnect at any time in Settings → Connections (Disconnect Shopify), which deletes the stored tokens. We also honor Shopify's mandatory privacy webhooks: a customers/redact request removes any order-derived data we hold associated with that customer, and a shop/redact request removes the store connection and all order-derived data we hold for that store. To request deletion directly, see the Account & Data Deletion section below.
11. Your Rights
You can access, correct, or delete your personal information. You can opt out of SMS by replying STOP. You can request account deletion by contacting us.
12. Data Retention
We retain information for as long as your account is active. When deleted, we remove your information within a reasonable timeframe, except where required by law.
13. Account & Data Deletion
You can delete your Artist CNTRL account and all associated personal data at any time, directly in the app, from Settings → Delete account, this permanently removes your account immediately. You can also request deletion by email: write to support@artistcntrl.com from the email address on your account with the subject line "Delete my Artist CNTRL account." Within 7 days of receiving your request we will permanently remove your account, profile, any connected social media or store tokens (Facebook, Instagram, TikTok, Spotify, Shopify, etc.), contacts, schedule, releases, brand assets, and all other personal data from our servers. Deletion is permanent and cannot be undone. Any Facebook or Instagram access tokens we hold on your behalf are revoked as part of this process. You can additionally revoke Artist CNTRL's access to your Meta accounts at any time from your Facebook Business Integrations settings without emailing us.
14. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect information from children under 13.
15. Changes
We may update this policy. Continued use constitutes acceptance.
16. Contact Us
Questions? Send us a note and we'll get back to you.
