TourCue Privacy Policy
Effective date: June 1, 2026 Last updated: June 1, 2026
This Privacy Policy explains how Ascent Information Management ("TourCue," "we," "us," or "our") collects, uses, stores, and shares information when you use TourCue — including the web portal at tourcue.com and the TourCue mobile app.
1. Who This Applies To
This policy applies to:
- Organizers — people who create accounts and use the TourCue portal to build and manage tours
- Participants — people who register for tours or join a route using the TourCue app
- Visitors — people who visit tourcue.com without an account
2. Information We Collect
From Organizers (account holders)
When you create an organizer account and use TourCue:
| Data | How collected |
|---|---|
| Name, email address | Account signup |
| Organization name | Account setup / wizard |
| Payment information | Stripe (we do not store card numbers directly) |
| Billing history | Stripe |
| Tour and route data | Created by you in the portal |
| Session and login activity | Automatically |
| IP address | Automatically on login |
From Participants (event registrations)
When a participant registers for a tour through an organizer's registration page:
| Data | How collected |
|---|---|
| First and last name | Registration form |
| Email address | Registration form |
| Phone number | Registration form |
| Emergency contact name and phone | Registration form |
| Vehicle information (year, make, model, color) | Registration form (optional) |
| Passenger count | Registration form |
| IP address | At form submission (for waiver evidence) |
| Payment information | Stripe (card numbers not stored by TourCue) |
| Waiver acknowledgment timestamp | At form submission |
| Join code | Generated at registration |
From App Users (drivers)
When a driver uses the TourCue mobile app during an event:
| Data | How collected |
|---|---|
| Display name | Entered at app join |
| Car number | Entered at app join (optional) |
| Real-time GPS location | Device location services during event |
| Email address | For verified (registered-only) events via magic link |
| Route progress | Automatically during navigation |
Automatically collected
When you use TourCue (web or app):
- Device type, operating system, browser version
- App version
- IP address
- Crash reports and error logs (via Sentry)
- Usage patterns (pages visited, features used)
3. How We Use Your Information
| Purpose | Data used |
|---|---|
| Providing the TourCue service | All data necessary to operate the platform |
| Processing organizer payments | Billing information (via Stripe) |
| Processing participant payments | Payment information (via Stripe Connect) |
| Sending confirmation emails | Participant email, join code |
| Event-day navigation | GPS location, route progress |
| Real-time driver map (organizer view) | GPS location, display name |
| Identity verification (registered-only events) | Email address, magic link OTP |
| Waiver evidence | Name, email, IP address, timestamp |
| Safety reference on event day | Emergency contact information |
| Customer support | Any data necessary to resolve your issue |
| Legal compliance | As required by applicable law |
| Fraud prevention and security | IP address, usage patterns, login activity |
| Product improvement | Aggregated, anonymized usage data |
We do not sell your personal information. We do not use your data for advertising purposes.
4. How We Share Your Information
With organizers. Participant data (name, email, registration details) is shared with the organizer of the event you registered for. Organizers are responsible for how they use this data.
With Stripe. Payment information is processed by Stripe. Stripe's Privacy Policy governs their handling of your payment data.
With Sentry. Crash reports and error logs are processed by Sentry for debugging and quality purposes. Sentry may receive device information and error context.
With Resend. Transactional emails (confirmations, join codes, verifications) are sent via Resend. Resend processes your email address to deliver messages.
With Mapbox. Route building, map display, and GPS snap-to-road features use Mapbox. Location data used for routing may be processed by Mapbox per their Privacy Policy.
With law enforcement. We may disclose information if required by law, court order, or government request, or to protect the safety of any person.
Business transfers. If TourCue is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you of any such change.
We do not share your personal information with any other third parties without your consent.
5. GPS and Location Data
GPS location data from the TourCue app is used only during active events to:
- Show your position to the organizer (lead car view and driver map)
- Advance your route progress as you drive the route
GPS data is ephemeral. Your live GPS position is stored in an active_drivers table and is automatically deleted within 24 hours of the event ending. We do not build a historical record of your driving routes.
Location access can be revoked at any time through your device settings. Revoking location access prevents participation in live navigation.
6. Data Retention
| Data category | Retention period |
|---|---|
| Organizer account data | Retained while account is active; deleted on account deletion request |
| Participant registration PII (name, email, phone, emergency contact, vehicle, IP) | 3 years from event date |
| Financial records (payment amounts, Stripe IDs, line items) | 7 years (legal/accounting requirement) |
| Waiver acknowledgment records | 5 years from event date |
| GPS position data (active_drivers) | Deleted within 24 hours of event end |
| Auth session data | Expires when session ends |
| Inactive organizer accounts | Notified at 18 months inactivity; deleted at 24 months |
Financial records cannot be deleted in response to a deletion request — they are required for accounting and legal compliance. We anonymize the personal identifiers in these records (replacing names and emails with "[deleted]") while retaining the transaction record.
7. Your Rights
Access. You may request a copy of your personal data by emailing info@tourcue.com.
Deletion. You may request deletion of your account and personal data by emailing info@tourcue.com. We will fulfill deletion requests within 45 days. See Section 6 for data that cannot be deleted (financial records retained for legal compliance).
Correction. If your personal information is inaccurate, contact us and we will correct it.
Portability. You may request a machine-readable export of your personal data.
California residents (CCPA). California residents have additional rights including the right to know what personal information we collect, the right to delete, the right to opt out of sale (we do not sell data), and the right to non-discrimination for exercising privacy rights. To exercise your California rights, contact info@tourcue.com.
To exercise any of these rights, email info@tourcue.com with the subject "Privacy Request." We may verify your identity before processing your request.
8. Data Security
We implement industry-standard security measures including:
- HTTPS encryption for all data in transit
- Supabase (PostgreSQL) with Row Level Security — each organizer can only access their own data
- Session tokens stored in device secure storage (iOS Keychain, Android Keystore)
- Payment data handled entirely by Stripe (we do not store card numbers)
- Access controls limiting employee access to personal data
No security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
9. Children's Privacy
TourCue is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact info@tourcue.com and we will delete it.
10. Third-Party Links
TourCue may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We are not responsible for the privacy practices of third parties.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a notice within the TourCue portal at least 14 days before the changes take effect. The updated policy will be posted at tourcue.com/privacy.
12. Contact
Privacy questions or requests:
Ascent Information Management / TourCue Email: info@tourcue.com Website: tourcue.com
For deletion requests, rights requests, or data concerns, email info@tourcue.com with the subject line "Privacy Request."
This Privacy Policy was last updated June 1, 2026.