Privacy Policy — ShowRouter

1. Scope

This Policy explains how ShowRouter (“we”, “us”) collects, uses, and shares information in connection with the ShowRouter platform, APIs, and related services (the “Service”). It applies to registered users and organizations, and to individuals whose organizations appear as discovered or unclaimed profiles.

2. Information we collect

Account data — name, email, and credentials you provide when registering, and the organizations and roles you belong to.
Organization and marketplace data — offerings, events, editions, needs, availability, pricing, media, documents, messages, offers, holds, contracts, and reviews your organization creates.
Discovered data — organization and event information compiled from public sources to seed the marketplace, always labeled as discovered/unclaimed and carrying its source URL and fetch date.
Usage and technical data — API requests, IP address, user agent, and audit events recording state changes (actor, actor type, key, risk tier).

3. How we use information

To operate matching, routing, deal management, and messaging;
To surface offerings and needs to counterparties consistent with your visibility settings;
To compute reliability metrics from private post-engagement feedback;
To send notifications you have not opted out of, and transactional email;
To secure the Service, enforce rate limits and risk tiers, and maintain audit trails;
To comply with legal obligations.

4. Discovered and unclaimed profiles

To ensure the marketplace is never empty, we build profiles for fairs, festivals, and events from publicly available information. We never present this information as owner-provided. Every discovered field records its source_url and fetched_at. If a profile represents your organization you may:

Claim it to correct and control the information, or
Opt out to have it removed from the marketplace with one request, at privacy@edetroit.net.

5. How information is shared

Marketplace information is shared with other organizations according to the visibility level you set (public, marketplace, matched-only, negotiating-only, or private). Contact details are gated until mutual interest. Private reviews are never shown to the counterparty; only aggregate reliability and mutually consented public testimonials are visible. We share data with service providers (such as our email and hosting providers) only as needed to operate the Service, and when required by law.

6. AI extraction

When you import a profile from a website, we send the fetched page content to a language model to draft structured fields. Fetched content is treated as untrusted data; extracted fields are always drafts marked ai_extracted and are never authoritative until a human confirms them.

7. Webhooks and API

If you configure webhooks, we transmit event payloads to the endpoints you specify, signed so you can verify authenticity. You are responsible for securing those endpoints and any data delivered to them.

8. Retention

We retain account and marketplace data for as long as your organization uses the Service and as needed for legitimate business and legal purposes. Because counterparties may reference shared records, some data is soft-deleted rather than immediately erased. You may request deletion as described below.

9. Security

We use industry-standard measures including encrypted transport, hashed credentials, scoped API keys, rate limiting, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

10. Your choices and rights

Update your account and organization information at any time;
Set per-channel, per-event notification preferences;
Claim or opt out of a discovered profile;
Request access to, correction of, or deletion of your personal data at privacy@edetroit.net.

11. Children

The Service is intended for businesses and is not directed to children under 13.

12. Changes

We may update this Policy; material changes will be posted here with a revised effective date.

13. Contact

Privacy questions or requests: privacy@edetroit.net.