Privacy
Policy

Chile's Law 21.719 is set to apply from 1 December 2026. Chile's Congress is discussing a postponement: a bill passed by the Senate proposes 15 October 2027. If the date changes, we will update this text.

1. Who is responsible for your data

• Controller: Alive Music SpA, Chilean tax ID (RUT) 76.948.519-8, with its address at Irarrázaval 471 E, Ñuñoa, Santiago, Chile. Alive Music SpA operates ShowCloser (showcloser.app).
• Contact about your data: hola@showcloser.app and the form at Profile › Privacy › Make a request.
• Internal data officer: Ignacio Fuenzalida, founder.
• Data protection officer: we have not appointed one today. Questions about your data are handled by the internal data officer at hola@showcloser.app.
• If you live in the European Union or the European Economic Area, also read the annex at the end of this policy.

2. Which law applies

• Chile's Law 19.628 on the protection of personal data, as amended by Law 21.719.
• ShowCloser is established in Chile, so this law applies to the data of everyone who uses the platform, wherever they live.
• If you live in the European Union (for example, in Spain) or the European Economic Area, the EU General Data Protection Regulation also applies (see the annex).
• If you live in Mexico, you can also exercise the rights of access, rectification, cancellation and objection recognised by the Federal Law on the Protection of Personal Data Held by Private Parties, through the channels in point 7.

3. What data we process and where it comes from

3.1 Your account and your profile (you provide them)

Email, first and last name, password (our authentication provider stores it encrypted, never as text) or sign-in with Google (in that case, Google gives us your email, your name and the photo of your Google account), city, country, bio, photo, language, preferred currency and the maximum distance you accept to travel for work. The city is stored with the approximate coordinates of the city, never those of your home.

3.2 Your pages (you or your team provide them)

The name and details of each artist, agency, venue or promoter page you belong to: bio, styles, formats, gallery photos, links and, if you add it, the venue's address. If the page issues invoices, its billing details (company name, tax ID, line of business and address). Also who is a member of each page and with which permissions. A venue's address, if you add it, can be seen by signed-in accounts.

3.3 The verification of your identity

• To publish an offer, quote, accept or sign a contract you need a verified identity. An artist can apply without being verified, with a limit on open applications, and has to get verified to quote, accept or sign.
• The photo of your document is read on your own device (text recognition inside the browser) and is not uploaded to our servers.
• Only the text of the document's machine-readable zone leaves your device, with the name line covered. That text contains the document number and its dates of birth and expiry, and our server uses it to check the check digits. We do not store that text or your date of birth.
• We store: the type of document, its country, its expiry, whether it was verified and when, and a fingerprint of the number: an irreversible fingerprint calculated with a key that does not live in the database. The fingerprint is used so that the same document cannot be used on two accounts. We do not store the number as text; the fingerprint is still personal data (pseudonymised data), and we protect it as such.
• We do not process biometric data: we do not compare your face with the photo on the document or use facial recognition.
• Manual review. If the system cannot validate your document, or if you ask for it, you can request that a person on the team reviews it. In that case we write to you by email and, if you wish, you send us a photo of your document and a selfie. A person compares them by eye; we do not use any facial recognition system. You send them voluntarily, and only for this review. We delete them from the mailbox and from any copy no later than 30 days after the review is resolved. Only the result, who approved it and when remain.

3.4 What you do on the platform (generated by you and the other party)

Offers, applications, the chat messages of each deal, proposals and counter-proposals, contracts with their signatures (which account signed, with date and time), annexes, the contract's change History and the deal timeline, documents you upload to a deal, reconfirmations, your calendar, breach reports with their statements and evidence, ratings, support tickets and your privacy requests.

3.5 Data of other people that you add

If you add another person (for example, someone in the lineup of a contract, or someone you invite to your page), you are the source of their data. You declare that you have their authorisation (see the Terms of Use), and that person can ask us to see, correct or delete their data.

3.6 Technical data

• Your IP address and the type of browser or device are processed by our hosting, authentication and anti-bot providers to provide the service and prevent abuse.
• When you type a city, your browser asks a city search service (Open-Meteo) for its coordinates; it receives the text of the city and your IP.
• When you view the offers map, your browser downloads the map images from the OpenStreetMap servers, which receive your IP.
• Acceptance of these texts: we store which version of the policy and the terms you accepted, when, in which language and from where (sign-up or the acceptance screen). We do not store your IP or your browser.
• We do not use third-party analytics, social media pixels or advertising.

3.7 What is stored in your browser and the sign-up measurement

• We do not use cookies. We use your browser's local storage for what is necessary (your session) and for your preferences (language, theme, the active page, what you left collapsed). The details, key by key, are on the Cookies and local storage page.
• Sign-up measurement. To learn at which step people get stuck when signing up, we record milestones of the sign-up itself and of verification (the name of the milestone and the time). If you accept the measurement notice, we store a random visit identifier in your browser, which is deleted when you close the tab, and we send it with each milestone. If you decline or do not choose, we neither store nor send that identifier, and sign-up and the whole site work the same.
• When you are signed in, milestones are linked to your account (for example, that you verified your identity or published your first offer), whether or not you accept the notice; if you did not accept it, no identifier is stored in your browser. We never store your IP or your browser; where you came from, only what the next two points say.
• Anonymous count of the campaign and venues pages. We count how many times the ambassador campaign pages and the venues page are opened, and how many times their main button is pressed, as figures per day and per ad (the link tags, such as utm_campaign). It is anonymous and aggregated: no identifier, no IP and nothing stored on your device, whether or not you accept the measurement notice. A reload counts twice.
• Where you came from when you created your account. If you create your account from one of those pages, we store with your account which page or ad you came from (the campaign and the link tags). It is included in your export and deleted with your account.
• You can change your choice whenever you like, with the Privacy and cookies link in the page footer, in Profile › Privacy or on the Cookies and local storage page.

3.8 If you join an ambassador campaign

• To ask to join a campaign you need an ambassador page with a photo, a description and at least one social network. That page does not appear in search and is not suggested to anyone: it is seen by the organisers of the campaigns you ask to join and by the ShowCloser team.
• With your request we store your message, your WhatsApp (only if you choose to share it), whether you can issue invoices, the version of the conditions you accepted and the social networks you declare (network, username and followers). The organiser of that campaign sees your request, your page and whether your identity is verified (yes or no, never the document).
• If you are approved, you get your own link. The organiser records the tickets bought with your link and, at the end, a closing sheet with the tickets, what you are owed, whether you did what you published, a note and the payment. You see the tickets; the full sheet is seen by the organiser.
• Breaches. If the organiser reports that you did not attend or did not do what you published, we store the case with the statements and evidence of both sides. Your history (how many cases, of what type and the date of each event, without names) is seen by your page, by the organiser of a campaign you apply to and by the ShowCloser team. It is never published.
• The chat with the organiser and the campaign announcements are stored like any other messages (point 3.4).
• When you export your data, it includes your requests, your declared social networks, your complimentary tickets and your closing sheets. When you delete your account, your message, your WhatsApp, your social networks and your guests' names are deleted; the tickets, the payments and the closing sheets stay with the request, without your account, as a record of what was agreed.

3.9 Complimentary tickets and your guests' names

If your proposal includes complimentary tickets, you can write down each guest's name next to their code. You see that name; the organiser does not receive it. We delete it when the complimentary ticket is blocked, released or marked as delivered and, in any case, 31 days after the event. If you write down another person's name, you declare that you have their permission (point 3.5).

3.10 The daily summary and what you have already seen on the home screen

• Daily summary. If you have something pending (applications, ambassador requests, complimentary tickets, unread messages or news about your deals), we send you a single email a day, at 10:00 your time. It does not include the text of the messages. To prepare it we keep the list of pending notices for up to 3 days. You can unsubscribe in Profile or with the link at the bottom of the email, without signing in.
• What you have already seen on the home screen. So as not to show you a home notice twice (a change in your contracts or a signed deal), we store which notice you marked as seen and when. It is deleted with your account.

3.11 Which data is mandatory

• To create your account you need an email and a password (or Google sign-in), your first and last name, your country and your city. Without them we cannot give you an account.
• To publish an offer, quote, accept or sign you need to verify your identity (point 3.3). If you do not, you can keep using the rest of the platform.
• To ask to join an ambassador campaign you need a photo, a description and one social network on your page (point 3.8).
• Everything else (biography, gallery photos and links, among others) is optional.

3.12 If you use sponsorships

• If your brand page proposes a sponsorship or your page runs a programme, we store what the parties write: the brand profile (its industry, website and country and, declared by the brand, its legal name, its tax ID and its legal representative), the proposals, the agreement with the identification of both parties and their representatives, the value, the terms, the follow-up report with its photos, the comments and the conversation.
• Both parties to the agreement can see it. The programme's public page does not show data about people or other brands.
• We do not share with the brand personal data of the people who attend the event: the organiser only declares figures, such as total attendance.
• The agreement, the report and the confirmations are kept as evidence of what was agreed, even if one of the parties deletes its account: the person's data is anonymised and the companies' data stays in the agreement.
• If you report content, we store the reason, the location you give, your name, your email, the date, your good-faith declaration and the decision. We do not store your IP. We explain the decision to the other party without telling them who reported it. If you delete your account, your name, your email and the location you wrote are erased from the report; the report, its reason and the decision are kept as a record. When you download your data, your reports include everything you wrote. If we remove a message from the conversation of an agreement, both parties stop seeing its text; we keep the text separately, and whoever wrote it receives it when they download their data.

4. What we use them for and on what legal basis

How we balance legitimate interest. For verification, reputation and sign-up measurement we weigh what we need against how it affects you: we process the minimum (the fingerprint and not the number; milestones and not your path through the site), we explain it here and you can object. If you object, we review it case by case.

Advertising: today we do not send you promotional emails. If one day we do, it will only be with a separate, unticked box, and with one-click unsubscribe.

Automated decisions: the check of your document is automatic, and whether you can publish offers, quote, accept or sign depends on it. If it fails or you disagree with the result, you can ask for a person to review it (point 3.3). Reputation is only displayed: it does not automatically decide who can hire or hide anyone.

Artificial intelligence: we do not use your data to train artificial intelligence systems.

5. Who it is shared with

• The other party of a deal sees your profile, your pages, the deal's messages, the contract and its History. Once they receive them, they process them under their own responsibility and may keep what they already received.
• What is public (your profile, your pages and their photos, and the reputation of your pages) can be seen by anyone on the internet.
• The ShowCloser team has no screen for reading chats and does not read them as part of its work. In a breach report it sees the statements and evidence the parties upload, not the chat. The people who administer the database have technical access to everything in it, including messages; they only access a specific item when it is needed for security, to solve a technical problem or because the law requires it. Do not send sensitive data through the chat (for example, health data or photos of identity documents).
• Our providers, who process the data to provide their service to us (table below). We do not sell or share your data for commercial purposes.
• Authorities: we hand data to a competent authority only when the law obliges us, and only what it asks for.
• Reorganisation: if Alive Music SpA sells ShowCloser or merges with another company, your data would pass to the new controller to keep providing the same service. We will tell you beforehand, and you can delete your account if you disagree.

International transfers. Your data is stored in Switzerland and the application's functions run in the United States, so it leaves Chile. Chilean law allows transferring data to a country with an adequate level of protection or with contractual safeguards. Chile's Personal Data Protection Agency has not yet published the list of adequate countries or its model clauses: in the meantime we rely on the European Union's adequacy decisions and on the safeguards in the table, and we will update this policy when the Agency publishes them.

6. How long we keep them

• While your account exists: your account, your profile, your pages and your activity, including applications and proposals that did not lead to a contract. You can delete them by deleting your account or by asking in Profile › Privacy.
• When you delete your account (Profile › Privacy › Delete my account), the database deletes or anonymises it instantly:
  • If nothing of yours is part of a signed contract or used by other people, everything is deleted: your account, your profile, your document, your messages, your applications and offers without a contract, your photos, your tickets and the pages where nobody else is.
  • If something of yours is part of a signed contract or used by other people (for example, you signed a contract, wrote in a signed deal, received or gave a rating, or created something on a page that continues with more people), it is anonymised: your name, email, bio, city, photo, document, sign-in and tickets are deleted; your account remains as "Deleted account", unable to sign in; you leave your pages; and what the contract and the other people need is kept, without your personal data.
  • If you are the only person who administers a page with more people, before deleting your account you have to name another administrator.
  • A page where nobody else is and that is part of a signed contract is not deleted: it stays archived and empty, so the contract keeps the page that signed it.
• Backups: our provider makes a daily copy of the database, which is overwritten on its own in about 7 days. What was deleted disappears from the copies within that period.
• The record of a signed contract (the parties as they signed, the terms, the dates, who signed and the History): we keep it 6 years from signing. Today it is not deleted automatically when that period ends: we review it and delete or anonymise it.
• The messages and ratings of an already deleted account in a signed deal: they are kept anonymised, as a record of the contract for the other party, and are deleted automatically 6 years after signing.
• Breach reports (statements and evidence): they are kept together with the record of the show.
• Your privacy requests once answered: 3 years, as proof of the answer. Today they are not deleted automatically when that period ends: we review them and delete them.
• Manual identity review: the photo of the document and the selfie, no later than 30 days after it is resolved (point 3.3).
• Sign-up measurement: when you delete your account it stops being associated with you and remains an anonymous figure.
• The fingerprint of your document: it is deleted when you delete your account.
• Guests' names for complimentary tickets: no later than 31 days after the event (point 3.9).
• Pending notices for the daily summary: up to 3 days.
• Closing sheets and breaches of an ambassador campaign: kept with the request, as a record of what was agreed. Today they have no deletion period of their own.
• Unused accounts: today we do not delete or anonymise an account because it is not used; it is kept until you delete it. If we set a period, we will say so here before applying it.
• Sponsorship agreements (the parties and their representatives, the terms, the confirmations, the report and the content reports): they are kept as evidence of what was agreed. Today they do not have their own deletion period.

7. Your rights and how to exercise them

• Access: knowing what data of yours we process, where it comes from, what for, who it is shared with and for how long. It is free at least once per quarter.
• Rectification: correcting inaccurate or incomplete data.
• Erasure: deleting your data. It does not apply when the data must be kept to comply with a legal obligation, perform a contract or defend a claim: that is why the record of a signed contract is kept.
• Objection: objecting to a use based on legitimate interest or to direct marketing.
• Temporary blocking: while we resolve a request for rectification, erasure or objection, you can ask us to block the use of that data; we answer that blocking within 2 business days.
• Portability: downloading your data in a commonly used format. In Profile › Privacy › Export my data you instantly download a .zip file with your data. The document only appears as "verified", never the number.
• Withdrawing your consent when the use is based on it (for example, the measurement identifier), by an equally easy means.
• Not being subject to solely automated decisions with significant effects: you can ask for a person to review.

How: in Profile › Privacy › Make a request or by writing to hola@showcloser.app. It is recorded with its date, its status and its deadline, and you see the answer in the same section.

How we check that it is you: if you write from your account or from your account's email, that is enough. If you have no account, or write from another email, we will ask you for proof proportionate to what you request, without asking for more data than necessary. You can act through a representative with a power of attorney that proves it.

Deadlines: we answer within 30 calendar days, extendable only once by 30 days more, with notice of the reason. Rectifying, erasing and objecting are free.

If we reject your request, we will tell you why, and you can complain to Chile's Personal Data Protection Agency within 30 business days. If you live in the European Union, also to the authority of your country (see the annex).

8. Minors

ShowCloser is only for people aged 18 or over, in every country. We do not knowingly process data of minors. If we discover the account of a minor, we close it and delete their data. If you know of a case, write to us at hola@showcloser.app.

9. Security

• The database decides, row by row, who can read and change each item of data, and each permission is granted explicitly.
• Everything travels encrypted (HTTPS). The number of your document is not stored: only its fingerprint.
• We apply measures proportionate to the risk and review them with periodic audits.
• If there is a security breach with a risk to your rights, we notify the Personal Data Protection Agency by the fastest means and without undue delay, and we notify you if it affects sensitive data or economic, financial, banking or commercial data. We keep a record of each incident. For people in the European Union, see the annex.

10. Changes to this policy

Each version has its number and its date. If something important changes, we notify you 30 days in advance by email and on the platform, and when you sign in we ask you to accept the new version once. The current version is always at showcloser.app/en/privacy.html.

11. Contact

hola@showcloser.app · Profile › Privacy › Make a request.

Annex for users in the European Union and the European Economic Area

If you live in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) gives you, in addition to the above, the following:

• Legal basis: performance of the contract with you to provide the service; our legitimate interest in preventing fraud, showing reputation and measuring sign-up without a stored identifier; your consent to store the visit identifier in your browser; and compliance with legal obligations to keep the record of a contract and the invoicing (see point 4).
• Your rights: access, rectification, erasure, restriction of processing, objection, portability, withdrawing your consent and not being subject to solely automated decisions. We answer within one month, extendable by two further months when the request is complex or there are many, with notice of the reason within the first month.
• Representative in the European Union: Alive Music SpA has designated Ignacio Fuenzalida, who lives in Blanes (Girona, Spain), in writing as its representative. Contact: hola@showcloser.app, with the subject "Protección de datos UE".
• Supervisory authority: you can complain to the data protection authority of your country. In Spain it is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.
• Transfers: Alive Music SpA is in Chile and receives your data directly from you. We store it in Switzerland, and our providers also process it in Ireland, the United Kingdom and the United States. Switzerland and the United Kingdom have adequacy decisions; for the United States we rely on the EU-U.S. Data Privacy Framework and on the standard contractual clauses in the table in point 5. You can ask us for a copy of those safeguards by writing to hola@showcloser.app.
• Breaches: if a breach affects people in the European Union, we notify the supervisory authority within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to their rights, and we tell you without delay if the risk is high.