Privacy Policy

Who we are

KeenToGo (www.keentogo.com) is a live-music discovery directory run by a small, South Africa–based team. For anything privacy-related, email us@keentogo.com.

What we collect

• Account details — if you sign up: your email address and password (stored and secured by our authentication provider, Supabase; we never see your password).
• Your lineup — the acts and venues you follow and the shows you mark, so we can build your personalised feed.
• Contact messages — if you use the contact form: your name, email address, subject and message, and — if you are signed in — which account sent it. To prevent abuse of the form we also store an approximate location (city, region and country), a network-level IP address (truncated, so it identifies your network rather than your device) and your browser type. Those three technical details are removed after 90 days; the message itself is kept for as long as we need it to handle your request.
• “Is this you?” updates — if you use the form on an act or venue page to suggest a correction or confirm the details: your name, email address, your role (how you are connected to the act or venue), an optional phone number, the change you propose and any note you add. The same technical details as a contact message are stored for abuse prevention and removed after 90 days; the suggestion and the email we can reply to are kept as the review record.
• Keen campaigns— if you say you're keen to see an act at a venue: your name and email address. Nothing counts until you confirm by clicking the link we email you (double opt-in). Your first nameis shown publicly on that campaign's page as one of the people who are keen; your email address never is. We email you when the campaign reaches a milestone or its organiser posts an update, and every one of those emails has an unsubscribe link. The technical details stored with your sign-up (truncated IP address and browser type) are removed after 90 days. When anyone opens a shared Keen link we also record that an arrival happened — with a truncated IP address and browser type, which we use only to count arrivals once per day and to tell people from link previews — and delete those records after 180 days.
• Venue requests— if you tell us a venue is missing: the venue's name and town, the act you were asking about, and optionally your name and email address so we can let you know when it is added, plus a truncated IP address for abuse prevention that is removed after 90 days.
• Waiting list — while KeenToGo is in closed beta, if you leave your email address on the waiting list: that address, the page you were on, and a truncated IP address, approximate location (city, region, country) and browser type for abuse prevention, which are removed after 90 days. We use the address only to tell you when we open, and you can ask us to remove it at any time.
• Usage analytics — we use Google Analytics 4 to understand how the site is used (pages viewed, approximate location, device type). This involves cookies and collects data in aggregate; it is not used to identify you personally. Analytics cookies are only set if you accept them in the consent bar on your first visit — decline and no analytics cookies are placed; your choice is remembered.
• Activity on KeenToGo— we record which act, venue and show pages are viewed, and clicks through to ticket sellers, so we can see what's popular and improve the catalogue. Alongside each page view we store a truncated IP address (the last part is removed before anything is written, so it identifies your network, not your device), your browser user-agent string, and the country and city your connection resolves to, plus the time of the visit, the site that referred you and — on the rare occasions a search engine passes them on — the terms you searched for. We also store a random identifier in your browser so we can tell a first visit from a returning one. It contains no personal details and is never shared, but it does mean we can recognise the same browser across visits. If you're signed in, this activity is linked to your account to power your feed, alerts and recommendations. Page-view records are deleted after 13 months. If you subscribe to one of our calendar feeds, we record that the feed was fetched and which calendar app fetched it (no IP address), so we can see which feeds are in use. All of it is visible only to KeenToGo's administrators and is never sold or shared.

We don't sell tickets, so we never collect payment details. Ticket purchases happen on the seller's own site under their privacy policy.

How we use it

To run the service: personalising your feed, notifying you about shows from acts and venues you follow (if you opt in), running the Keen campaigns you join, answering your messages and update suggestions, keeping the forms free of spam, and improving the site. We don't sell or rent your personal information to anyone.

Who processes it

• Supabase — database and authentication hosting.
• Vercel — website hosting and delivery, served from its Dublin (Ireland) region.
• Resend — sends our transactional email: contact and update notifications, show alerts you opt in to, and Keen confirmation, milestone and update emails.
• Google Analytics — aggregate usage analytics.
• Cloudflare Turnstile — an invisible check that a real person, not an automated program, is signing in, following a ticket link or joining a Keen campaign.

Each processes data on our behalf under their own security and compliance programmes. Some processing happens on servers outside South Africa and the EU/UK.

Your rights

Under South Africa's POPIA, the EU/UK GDPR and similar laws, you can ask us to access, correct or delete the personal information we hold about you, or object to how we process it. Email us@keentogo.com and we'll act on it promptly. You can also delete your account at any time, which removes your profile and lineup data.

Retention & security

We keep account data for as long as your account exists, and contact messages and update suggestions for as long as needed to handle them. The technical details stored with a form submission or a Keen sign-up (truncated IP address, approximate location, browser type) are removed after 90 days; records of arrivals on shared Keen links are deleted after 180 days; page-view records are deleted after 13 months. A Keen sign-up stays on that campaign's list until you unsubscribe, and we keep a note of the unsubscribe so you are not emailed again. A waiting-list address is kept until we have told you we are open, or until you ask us to remove it. Data is encrypted in transit (HTTPS everywhere) and protected by access controls at our providers.

Changes

If we change this policy, we'll update this page and the date at the top. Significant changes will be flagged on the site.