Fan Sign-Up Consent

Draft notice: This is a plain-English consent notice for the "Join the Show" sign-up gate. It should be reviewed by a qualified attorney in your jurisdiction before public launch. It is layered on top of the full Privacy Policy and Terms of Service.

Version

v1 — effective August 2026. The version tag saved on your record shows which version you agreed to. If we materially change this notice, we'll ask you to re-agree.

Plain-English summary

• When you sign up to Join the Show, we collect your name, date of birth, and either your email or phone number.
• We use that info to send you tour news, ticket presales, and marketing about OVRHD, the Jonas Brothers, and events we produce.
• We use the same info — combined with anonymized in-show analytics — for typical marketing and advertising, including audience segmentation and lookalike audiences on advertising platforms.
• We never sell your data. We share only with the service providers listed below.
• You can revoke consent, delete your record, or request a copy at any time by emailing hello@ovrhd.co.
• You must be 13 or older to sign up. If you're under 18, please have a parent or guardian involved.

1. What we collect at sign-up

The Join-the-Show sign-up sheet asks for:

• Name — free-text. Optional if you decline.
• Date of birth — from a wheel picker. We store the full date and derive an age band for reporting and ad segmentation. We use it to enforce our 13+ age minimum.
• Contact — either an email address or a phone number. You pick which. We only store the one you provide.
• The Show you're at — the venue, city, and section you check in to.
• Consent record — a boolean flag, a timestamp, and the version of this document you agreed to.

2. How we use it

By tapping AGREE + JOIN, you agree that we may use the information above to:

• Send you marketing communications — presale invites, tour announcements, drops, and product news related to OVRHD, the Jonas Brothers, and shows we produce. Emails go through our marketing provider; SMS (if you gave a phone number) is sent through a mainstream SMS gateway. Message frequency: no more than a few per month unless we're in an active tour cycle.
• Advertising and audience targeting — we may hash your email or phone (SHA-256, one-way) and share the hash with mainstream ad platforms (e.g. Meta, TikTok, Google) to build custom or lookalike audiences. The platforms receive the hash, not the raw contact. This is standard practice for tour marketing.
• Show operations + analytics — your check-in section is used to time the phone-light effects during the show. We keep aggregated attendance stats (how full a section was, how long the show ran) and tie them to your record for internal reporting.
• Improve OVRHD — anonymized event counts help us understand which features are used and where the app hits snags.
• Legal, safety, and fraud prevention — where required.

3. Who receives your data

We share your Sign-Up data only with these categories of service providers, each bound by a data-processing agreement:

• Cloud + storage — Supabase (Postgres, RLS-protected) and Google Firebase (auth, realtime database).
• Email delivery — a mainstream transactional/marketing email provider (e.g. Resend, SendGrid, or successor).
• SMS delivery — a mainstream SMS gateway (e.g. Twilio) if you gave a phone number.
• Ad platforms — Meta, TikTok, Google, and comparable networks receive hashed versions of your email/phone for audience matching. Raw contact info is not shared.
• Analytics — anonymized event and crash telemetry providers.
• Tour partners — the touring artist's official team may receive aggregated fan-list stats. Individual records are shared with an artist team only if we're contractually obligated and your consent covers it (this consent form does).

We do not sell your data. "Sale" and "sharing" are defined narrowly under California law (CCPA/CPRA); we do not engage in either.

4. Retention

• Sign-up record + contact info — kept as long as your OVRHD account is active, plus 24 months after you stop using OVRHD, whichever is longer. This lets us re-invite you to a future tour cycle.
• Consent record — kept for the life of your account, then anonymized. We keep the version tag + timestamp longer than the contact fields as a legal record that you consented.
• Ad-platform hashed audiences — subject to the receiving platform's retention rules (typically 30–540 days).
• You can delete your record early — email hello@ovrhd.co.

5. Your rights

Regardless of where you live, you can:

• Withdraw consent at any time. Marketing stops within a few business days.
• Access a copy of what we hold about you.
• Correct anything that's wrong.
• Delete your record.
• Object to specific processing (like ad-audience matching) without deleting the rest.
• Port — receive your data in a machine-readable format.

To exercise any of these, email hello@ovrhd.co. We respond within 30 days.

5.1 California residents (CCPA / CPRA)

You have the additional right to opt out of "sharing" for cross-context behavioral advertising. Because we build custom / lookalike audiences from your hashed contact, this may qualify as "sharing." To opt out, email us — we'll remove your hash from the audience seed within 15 business days and stop future uploads.

5.2 EEA / UK residents (GDPR / UK GDPR)

Our legal basis for the uses in Section 2 is your consent (Art. 6(1)(a) GDPR). You can withdraw at any time without affecting the lawfulness of processing that happened before withdrawal. You also have the right to lodge a complaint with your local supervisory authority.

6. Age minimum

OVRHD is rated 12+ in the App Store and this sign-up requires you to be at least 13 years old. Fans between 13 and 17 should have a parent or guardian involved. We don't knowingly collect sign-up data from anyone under 13. If we learn we have, we'll delete it — contact hello@ovrhd.co.

7. International transfers

OVRHD is operated from the United States. If you're outside the U.S., your data will be transferred to and processed in the U.S. We use Standard Contractual Clauses (where applicable) for transfers from the EEA, UK, and Switzerland.

8. Security

Data is encrypted in transit (TLS) and at rest via our providers' default encryption. Access is restricted to engineers who need it. No system is perfectly secure — we can't guarantee absolute security.

9. Changes to this consent

If we materially change what we collect at sign-up, who we share it with, or the purposes above, we'll ask you to agree to the updated version before we continue using your data under the new terms. We'll bump the version field at the top of this page and log the new consent against your record.

10. How this fits with the rest of our policies

This consent is layered on top of, not a replacement for, our Privacy Policy and Terms of Service. Anything not covered here is governed by those documents. If there's a conflict, the more specific document controls.

11. Contact

Questions or requests?
Email: hello@ovrhd.co
Jonas Enterprises · United States