1.Who We Are
Lightwork Digital LLC, a New Mexico limited liability company operating on behalf of New Music Lives ("TrueFans CONNECT™," "we," "us," or "our") operates the TrueFans CONNECT™ platform, including the website, mobile applications, FanBase CRM, and related tools (collectively, the "Platform"). Our Platform connects fans with artists and venues, enables direct financial support, and provides tools for artists and venues to manage and grow their fan relationships.
For EU/EEA residents, Lightwork Digital LLC is the data controller of your personal data unless otherwise noted.
2.Scope of This Policy
This Privacy Policy applies to:
- Fans and general visitors who browse the Platform, donate, buy tickets or merchandise, RSVP to shows, interact with social links, or text an SMS keyword.
- Artists who register accounts, use FanBase CRM, and receive fan relationship data.
- Venues and merchants who register accounts, use Venue CRM, and process commerce transactions.
- Developers who access TrueFans developer tools or embed TrueFans integrations on their own websites or applications.
This Policy does not apply to third-party websites or services linked from the Platform. When artists, venues, or developers process your data through their own systems (such as a connected third-party CRM), their privacy policies govern that use.
3.Information We Collect
3.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Account and identity | Email address, password, display name, avatar, phone number, account role |
| Profile and preferences | Location preferences, genre interests, linked social accounts, verification status |
| Donations and payments | Donor name, email address, phone number (when provided), donation amounts and dates, billing address (when saved for future use) |
| Ticket and merchandise purchases | Purchaser name, email address, order details, amounts |
| Show RSVPs | Email address, phone number (when provided), SMS consent |
| SMS interactions | Phone number, message content |
| Social link opt-ins | Email address, the destination platform, consent timestamp |
| Uploaded contact lists | Name, email, phone, and tags — as uploaded by an artist or venue |
| Communications | Messages you send us or through the Platform |
3.2 Information Collected Automatically
| Category | Examples |
|---|---|
| Device and browser | IP address, user agent, browser type, operating system |
| Usage and engagement | Page views, clicks, referrer URLs, search queries, event interactions, last activity |
| Location | General location (city and country) derived from your IP address. More precise signals are derived internally for analytics purposes and are never surfaced to any user in identifiable form |
| Identifiers | Pseudonymous visitor identifiers, session identifiers |
3.3 Information from Third Parties
| Source | Data Received |
|---|---|
| Connected CRM platforms | Contact fields (name, email, phone, tags) when an artist or venue has connected a third-party CRM and you exist as a contact in it |
| Payment processors | Payment confirmation and transaction reference identifiers |
| Streaming and event integrations | Public artist profile data for artists who connect these integrations |
| Developer integrations | Traits (such as email) submitted by a developer who has embedded TrueFans tools on their own site |
4.How We Use Your Information
4.1 Platform Operations
- Creating and maintaining your account
- Processing donations, ticket purchases, and merchandise orders
- Facilitating artist–fan relationships and CRM features
- Sending transactional communications (receipts, RSVP confirmations, pre-show reminders)
- Enabling SMS fan features where you have opted in
4.2 Analytics and Product Improvement
- Understanding how users engage with the Platform
- Computing aggregated engagement metrics and discovery signals
- Powering AI-assisted marketing tools and analytical reports available to artists and venues — these tools surface derived, aggregated outputs (such as audience summaries and broad geographic reach); raw records and individual-level data are never directly exposed to any user
- Debugging, quality assurance, and infrastructure monitoring
4.3 Marketing and Outreach
- Platform-initiated: We may contact registered users about Platform features, promotions, and updates. You may opt out at any time (see Section 12).
- Artist/venue-initiated: Artists and venues use FanBase CRM or Venue CRM to reach fans and attendees with whom they have an established relationship, subject to the scope described in Section 6.
4.4 Developer Tools
Providing engagement tracking and analytics services to developers who have agreed to our Developer Terms.
4.5 Safety and Legal Compliance
- Fraud detection, abuse prevention, and account security
- Operating the opt-in Venue Safety Network (see Section 9)
- Complying with applicable laws, responding to lawful legal process, and enforcing our Terms of Service
4.6 Legal Bases (EU/EEA — GDPR)
| Purpose | Legal Basis |
|---|---|
| Account creation and service delivery | Performance of a contract (Art. 6(1)(b)) |
| Processing donations and payments | Performance of a contract (Art. 6(1)(b)) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f)) |
| Analytics and product improvement | Legitimate interests (Art. 6(1)(f)) |
| Platform marketing emails | Legitimate interests / consent where required (Art. 6(1)(a)/(f)) |
| Developer tool services | Performance of a contract (Art. 6(1)(b)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
6.FanBase CRM — What Artists and Venues Receive
This section describes what an artist or venue can see when you interact with their presence on TrueFans.
6.1 What Artists Receive
Donations
Your name, email address, phone number (when provided at checkout), donation amounts, dates, and giving history are visible to the artist in their FanBase CRM. Donations are not anonymous by default — artists receive donor contact details as part of the fan relationship.
Logged-In Fan Profiles
Display name, avatar, and email address (when synced to a connected CRM account).
Social Link Opt-Ins
Email address, the destination platform, opt-in timestamp, and general location (city and country) derived from your IP at the time of consent. These records are only created after you explicitly submit your email and agree.
SMS Interactions
Phone number and message content for fans who have texted a keyword. If the artist has connected a third-party CRM, a contact record may be created there.
Show RSVPs
Email address and phone number (if provided). SMS outreach is only sent where you have given SMS consent.
Engagement Summaries
Aggregated engagement metrics scoped to that artist's content — such as interaction counts by type and your last activity date. Unnamed visitors are only linked to a contact record if you submitted your email through an opt-in on that artist's content.
Fan Score
A derived engagement index comparing your activity relative to other fans of that artist. This is a computed metric and does not expose payment credentials or raw behavioral records.
Outreach
Artists may contact you by email or SMS. All messages are sent in the artist's name, not TrueFans. Opting out of an artist's communications marks you as ineligible for their future outreach but does not delete your fan record. To request removal of your data entirely, see Section 12.
6.2 What Venues Receive
- Applicants and invited performers: name and email from their TrueFans profile
- Fans associated with artists who performed at the venue: donor name and email
- Commerce purchasers: purchaser name and email
- Venues may send communications to these contacts depending on their plan tier.
6.3 Third-Party CRM Connections
Artists and venues may connect their own third-party CRM account. When they do, TrueFans syncs relevant contact data — such as name, email, phone, and relationship tags — to the artist's or venue's own account in that system. TrueFans does not share one artist's fan data with another through these connections. Once data is in an artist's or venue's CRM, their own privacy practices govern it.
7.Developer Tools and Integrations
TrueFans provides tools that allow developers to embed engagement tracking on their own websites and query aggregated analytics data. These tools are subject to our Developer Terms and are not consumer-facing products.
Engagement Tracking
Developers may embed TrueFans tracking on their own properties to collect engagement events (such as page views) from visitors. Developers who have agreed to our terms may request that a visitor be matched to a known TrueFans identity, which may draw on engagement signals from across the Platform. Developers are required under our terms to disclose this in their own privacy policies and obtain any consents required by applicable law.
Analytics Access
Developers may query engagement data associated with their integration. This data includes interaction types, page paths, referrer information, and general location (city and country). Precise coordinates are never included in any data made available to developers.
All developer access is authenticated, restricted to authorized integrations, and logged.
8.Payment Processing
TrueFans uses third-party payment processors to handle transactions. We do not store full payment card numbers in our systems. Billing address information may be stored when you choose to save a payment method. All card data is handled within the PCI-DSS scope of our processors.
9.Venue Safety Network
Opted-in venues may participate in the TrueFans Venue Safety Network. When a venue flags an individual for safety reasons, only a non-reversible cryptographic representation of that person's identity is shared with other opted-in venues. No name, date of birth, photo, document image, or other readable personal information is transmitted. Venue participation is voluntary and opt-in only.
10.Data Retention
10.1 Account Deletion
When you delete your TrueFans account, your account profile, credentials, and directly associated data are removed from our systems. You may request account deletion through your account settings or by contacting us as described in Section 17.
10.2 Fan Relationship Data
Interacting with an artist — by donating, buying tickets, RSVPing, texting a keyword, or opting in — creates a fan relationship record tied to that artist. This record (your name, contact information, and engagement history with that artist) is retained for as long as that artist maintains an active TrueFans account. If the artist's account is closed, their associated fan data is removed.
Deleting your TrueFans account does not automatically remove fan relationship records created through those interactions. To request removal of a specific fan record, contact us as described in Section 17.
10.3 Opting Out of Communications
Opting out of an artist's email or SMS communications marks you as ineligible for their outreach. It does not delete your fan record. Your contact information and history remain in the CRM; the artist simply cannot send you messages. To have your data removed, submit a deletion request to us.
10.4 Other Data Types
| Data Type | Retention |
|---|---|
| Donation and transaction records | 7 years (financial record-keeping) |
| Engagement and analytics events | Duration of the associated artist relationship or account lifetime |
| Developer access logs | 12 months |
| SMS and email campaign logs | 24 months after last send |
After the applicable period, data is deleted or anonymized.
12.Your Privacy Rights
California Residents (CCPA/CPRA)
California residents have the following rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, our purposes, and the categories of third parties with whom we share it.
- Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Marketing: You may unsubscribe from TrueFans platform emails at any time using the unsubscribe link. Opting out of an artist's messages flags you as ineligible for their outreach but does not delete your fan record. To request deletion, submit a separate request.
- Right to Limit Use of Sensitive Personal Information: We derive precise location signals internally for analytics but never surface them to any user. Only city and country are used in any user-facing context. You may request that we limit this processing to what is necessary to provide the services.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
Categories of personal information collected: Identifiers; commercial information; internet or other electronic network activity; general geolocation; inferences used to generate engagement profiles.
Washington State Residents
Under the Washington Privacy Act, Washington residents have the following rights:
- Right to Access: Confirm whether we process your personal data and obtain a copy.
- Right to Delete: Request deletion of personal data we hold about you.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Data Portability: Receive a copy of your personal data in a portable format.
- Right to Opt Out of targeted advertising, sale of personal data, and profiling for decisions with legal or similarly significant effects.
To exercise these rights, email [email protected] with the subject line "Washington Privacy Request." We will respond within 45 days, extendable by an additional 45 days where necessary. To appeal a declined request, email us with "Privacy Appeal" in the subject. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov.
European Union / EEA Residents (GDPR)
EU/EEA residents have the following rights:
- Right of Access (Art. 15): Obtain a copy of your personal data and information about how it is processed.
- Right to Rectification (Art. 16): Request correction of inaccurate data.
- Right to Erasure (Art. 17): Request deletion, subject to legal retention obligations.
- Right to Restriction of Processing (Art. 18): Request restricted processing in certain circumstances.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
- Right to Lodge a Complaint: File a complaint with your national Data Protection Authority.
To exercise your rights, contact us at [email protected].
International transfers: TrueFans is based in the United States. Transfers of personal data from the EU/EEA to the US are made under Standard Contractual Clauses (SCCs) as adopted by the European Commission.
All Users
Regardless of your location, you may:
- Unsubscribe from TrueFans platform emails using the unsubscribe link in any message.
- Opt out of an artist's outreach via the unsubscribe link in their messages. This marks you as ineligible for their campaigns but does not delete your fan record.
- Request deletion of your fan record or account data by emailing [email protected]. Fan relationship data tied to an active artist is retained for the duration of that artist's account unless you request removal.
- Update your profile directly in your account settings.
- Manage location permissions through your browser or device settings.
13.Children's Privacy
The TrueFans Platform is not directed to children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages. If you believe we have done so inadvertently, please contact us at [email protected] and we will promptly delete it.
14.International Data Transfers
TrueFans operates from the United States. If you access the Platform from outside the US, your information will be transferred to and processed in the United States. For transfers from the EU/EEA or United Kingdom, we rely on Standard Contractual Clauses (SCCs) as the appropriate safeguard.
15.Security
We implement technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. No method of electronic transmission or storage is fully secure, and we cannot guarantee absolute security.
16.Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by posting a prominent notice on the Platform before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised policy.
17.Contact Us
TrueFans CONNECT™
Lightwork Digital LLC
Corrales, NM, United States
Privacy Inquiries
Email: [email protected]
Data Protection Contact (EU/EEA)
Email: [email protected]
Washington Privacy Act Appeals
Email [email protected] with "Privacy Appeal" in the subject line.
This document was last reviewed May 21, 2026.