Privacy Policy

Groovon International Inc. — Version 1.0, April 2026

1. Who We Are

Groovon International Inc. ("Groovon", "we", "us") operates a digital platform that enables fans, artists, venues, and event organizers to discover events, communicate, and transact.

For most platform activities, Groovon acts as a Data Controller under applicable data protection laws.

For regulated payment processing and identity verification, our payments partner Stripe operates under its own regulatory obligations (see Section 6).

For questions regarding privacy, contact: legal@groovon.com

2. What Personal Data We Collect

We collect only the data necessary to operate the platform.

a. Account & Profile Data

  • Name
  • Email address
  • Phone number
  • Username
  • Profile information
  • User role (fan, artist, venue)

Purpose: Account creation and platform functionality

Legal Basis (EU): Contract performance

b. Social & Communication Data

  • Community posts
  • Private messages
  • Comments and interactions
  • Report submissions

Purpose: Enabling user communication and moderation

Legal Basis: Contract performance + legitimate interest (platform integrity)

c. Event Interaction Data

  • Events viewed
  • Events saved or interacted with
  • User-submitted event data

Purpose: Provide personalized event discovery

Legal Basis: Contract performance

d. Transaction & Payment Metadata

Groovon does not directly process or store full payment credentials.

We may process:

  • Transaction identifiers
  • Transaction amounts
  • Status information
  • Wallet balance display information

Full payment processing and identity verification are handled by our regulated payments partner.

Purpose: Enable platform transactions

Legal Basis: Contract performance

e. Identity Verification Data (Artists/Venues)

Artists and venues may be required to complete identity or business verification through our payments partner.

Groovon does not independently perform financial KYC verification.

Purpose: Regulatory compliance and fraud prevention

Legal Basis: Legal obligation (via payment partner)

f. Technical & Device Data

  • IP address
  • Device type
  • Browser type
  • Access timestamps

Purpose:

  • Security
  • Fraud prevention
  • Platform stability

Legal Basis: Legitimate interest

g. AI Support Interactions

If users interact with our AI-based support tools:

  • Messages may be logged
  • Interaction metadata may be stored

Purpose: Improve support quality and system safety

Legal Basis: Legitimate interest

AI-generated responses may not always be accurate.

3. How We Use Operational Partners

Groovon does not sell personal data to third parties.

To operate securely and efficiently, Groovon relies on carefully selected operational partners who process limited personal data strictly to provide infrastructure and services necessary for the platform.

These categories include:

a. Infrastructure & Hosting Providers

We use secure cloud infrastructure providers to host the platform and store data.

Purpose: Platform availability and security

Role: Data Processor acting on our instructions

b. Payment & Identity Verification Partner

Payments, wallet balances, and identity verification are processed by our Payments Partner and its regulated financial institution partners.

These partners operate under financial regulations and may act as independent data controllers for regulated financial compliance purposes.

Purpose:

  • Process transactions
  • Conduct KYC/KYB
  • Comply with AML laws

c. Email & Communication Delivery Services

We use email delivery services to send:

  • Account confirmations
  • Password resets
  • Purchase receipts
  • Service notifications

These providers act solely on our instructions.

d. Security & Fraud Prevention Tools

We may use systems to detect suspicious activity and prevent abuse.

Purpose: Protect platform integrity

Legal Basis: Legitimate interest

4. Legal Bases for Processing (EU Users)

Where GDPR applies, we rely on:

  • Contract performance
  • Legitimate interest (security, fraud prevention, platform improvement)
  • Legal obligation (financial compliance via payment partner)
  • Consent (for optional cookies or marketing)

5. International Data Transfers

Groovon operates internationally. Personal data may be transferred outside your country of residence.

Where required, we implement Standard Contractual Clauses (SCCs).

6. Payments & Financial Data

Groovon does not directly store full credit card or bank information.

Payment processing, identity verification, and wallet management are handled by our regulated payments partner.

Users engaging in payment activity may also be subject to the payment partner's privacy policy and regulatory obligations.

7. Data Retention

We retain personal data only as long as necessary to:

  • Provide platform services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

Financial transaction records may be retained for legally required periods.

8. Your Rights (EU and Similar Jurisdictions)

Subject to applicable law, you may have the right to:

  • Access your data
  • Correct inaccuracies
  • Request deletion
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent

To exercise rights: legal@groovon.com

9. Security

We implement reasonable technical and organizational measures to protect personal data.

However, no system is completely secure.

10. Children

Groovon is not intended for individuals under 18 years of age.

11. Automated Content Moderation

To keep the community safe and comply with the EU Digital Services Act, messages and posts on Groovon (community replies and topics, direct messages, LiveConnect chat and broadcasts) are processed by an automated AI moderation system. The system detects illegal content, harassment, fraud, and other policy violations across multiple languages.

What is processed: the content of your message, a short excerpt for review, the surface (e.g. DM, community), and a detected language. We do not use this content to train third-party AI models.

Retention: Moderation logs and flagged content are retained for 12 months from the date of the moderation event, after which they are automatically purged unless subject to a legal hold (law enforcement request, ongoing dispute, or appeal). This retention is necessary to operate the appeals process, demonstrate consistent enforcement, and meet our DSA transparency obligations.

Your rights: You may appeal any moderation decision at /moderation/appeals. You may also request access to or deletion of your moderation history by contacting privacy@groovon.com, subject to legal retention requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via platform notice.