Privacy policy

You can use Artisthere without an account. When you do:

• Analytics. We use Google Analytics to see which pages people visit and whether they find an artist. That includes the pages you view, the artists you open or follow, the filters you pick, what you type into the discover box, and general details Google records: your browser, device, and a rough location worked out from your IP address. Google sets cookies to tell visits apart.
• Server logs. Our host, Vercel, logs requests (including IP address and browser) to keep the site running and secure.
• Your location, if you allow it. When you let your browser share your location, we use it in your browser to sort shows by distance. We don't store it. It only leaves your device when you ask the AI concierge a question (see section 4).
• Things kept in your browser. Shows and artists you save while signed out, your recently viewed artists, and a draft studio profile are kept in your browser's local storage. They don't reach us. Clearing your browser's site data removes them.

• Sign-in details. Your email address and a password, which our auth provider (Supabase) stores only as a secure hash. If you sign in with Google, Google shares your name, email address and profile picture link with us.
• What you save. The artists you follow, the shows you save or mark as going, and the listings you mark as your own, so they follow you between devices.
• Your settings. Your home city.
• Your studio profile. What you write in your studio: disciplines, neighbourhood, a line about your work, influences. Only you can read it. It isn't published.
• Bot check. Sign-up and log-in forms use Cloudflare Turnstile to check you're a person. Cloudflare sees details about your browser and connection to do that.

We email you only about your account: confirming your address, magic links, password resets.

If you leave your email on a city page, we keep that address and the city, and use them only to tell you when Artisthere opens there or has news for that city. Every email will have a way to unsubscribe, or write to privacy@artisthere.ca and we'll take you off.

Some features — the AI concierge and writing help in your studio — use an AI model when they're switched on. When you use one, what you type (and, for the concierge, your approximate location, so it can find what's close) is sent through Vercel's AI Gateway to the model provider to write a reply. We don't keep those conversations.

Most artists on Artisthere haven't signed up. We list them from public sources: venue and festival calendars, ticketing listings, label rosters, the City of Vancouver's public art registry, MusicBrainz and Wikidata. For each artist we show their name, disciplines and genres, a short description written from those sources, where they work or play (a public artwork's site, or a room they're billed at — otherwise only their city), their upcoming shows, links to their own sites, and sometimes a photo, always credited to where it came from (their Bandcamp or Spotify, Wikimedia Commons, or Ticketmaster).

If you're an artist and something about you is wrong, or you'd rather not be listed, write to privacy@artisthere.ca from an address we can connect to you. We'll fix it or take the listing down.

• To run the features you use: your saves, your settings, sign-in.
• To keep the service secure and stop abuse.
• To understand, in aggregate, which pages help people find shows, so we can make them better. Those numbers are never shown in the product and never used to rank artists.
• To email you, only as described above.

We don't sell or rent personal information, we don't show ads, and we don't share it for anyone else's marketing.

We use these service providers. Each gets only what it needs to do its job for us:

• Supabase: database and sign-in.
• Vercel: hosting, and the AI Gateway when AI features are on.
• Google: Analytics, and Sign in with Google if you use it.
• Cloudflare: Turnstile bot checks on sign-up and log-in.
• Mapbox: the map. Your browser loads map tiles from Mapbox, which sees your IP address and the area you're looking at.
• An AI model provider, reached through Vercel, when you use an AI feature.

Links out — “Get tickets ↗”, “Listen ↗”, an artist's own site — take you to someone else's site, under their privacy policy, not ours. We may also disclose information if the law requires it.

These providers may store and process information outside Canada, including in the United States, where it's subject to the laws of those countries.

• Sign-in cookies (set by Supabase) keep you signed in. They're needed for accounts to work.
• Analytics cookies (set by Google Analytics) tell visits apart. You can block them in your browser settings, or with Google's opt-out add-on ↗, and Artisthere still works.
• Local storage holds your signed-out saves, recently viewed artists and studio draft, as described in section 1.

• Account information, for as long as you have an account. When you ask us to delete it, it goes, along with everything saved to it.
• City-list emails, until you unsubscribe.
• Analytics data, for the retention period set in Google Analytics, never longer than 14 months.
• Server logs, for the short period our host keeps them.

You can ask to see the personal information we hold about you, to correct it, or to delete your account and everything saved to it. You can also withdraw consent to anything optional, like the city list. Write to privacy@artisthere.ca from the address on your account. We'll answer within 30 days.

If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada ↗ or the Information and Privacy Commissioner for British Columbia ↗.

Connections to Artisthere are encrypted. Your saves, settings and studio profile are locked to your account at the database level, so other users can't read them. No system is perfectly secure; if something goes wrong that puts your information at real risk, we'll tell you and the regulator, as the law requires.

Artisthere isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has made an account, write to us and we'll delete it.

When this policy changes, we'll update the date at the top. If a change matters — new kinds of information, new uses — we'll say so on the site, or by email if you have an account, before it takes effect. Read it alongside our Terms.