Privacy Policy.
Last updated 16 April 2026.
About this policy
Crowdsurf operates crowdsurf.com.au. This policy explains how we collect, use, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Spam Act 2003 (Cth).
What we collect
We collect your email address, display name and username, music genre preferences, gigs you save, attend, or follow, and artists you follow, along with other interactions with the platform.
We also collect non-personal analytics data via Google Analytics, including pages visited, time on site, device type, and general location. Analytics data is aggregated and cannot identify you individually.
How we use your information
We use your information to provide and improve the service, send opted-in emails about gigs and artists, and send transactional notifications for saved gigs.
We may generate aggregated, anonymised insights about Melbourne live music audiences. These insights may be shared with promoters and venues in non-identifiable form only. We do not sell personal information. We do not share individual data with promoters or venues.
We also use your information to comply with our legal obligations.
Email communications
Every marketing email includes an unsubscribe link. Email preferences can be managed at crowdsurf.com.au/profile. We will not send unsolicited commercial electronic messages without consent, in accordance with the Spam Act 2003 (Cth).
Third party services
Crowdsurf uses the following third-party services, each operating under their own privacy policies:
Supabase — database and authentication. Google Analytics — aggregated website analytics. Resend — email delivery. Spotify — artist and music data enrichment; we do not access your Spotify account without explicit OAuth consent.
Data storage and security
Your data is stored securely on servers in Australia and/or the United States via Supabase infrastructure. We take reasonable steps to protect personal information from misuse, loss, and unauthorised access or disclosure.
Access and correction
You have the right to access and correct the personal information we hold about you. To make a request, contact us at hello@crowdsurf.com.au.
Deletion
You may request deletion of your account and personal data at any time by emailing hello@crowdsurf.com.au. Deletion requests will be actioned within 30 days.
Cookies
Crowdsurf uses cookies for authentication and analytics. Cookies can be disabled in your browser settings, though this may affect your ability to use certain features of the service.
Changes to this policy
Material changes to this policy will be communicated via email or a notice on the site. Continued use of Crowdsurf after changes are posted constitutes your acceptance of the updated policy.
Contact
For any privacy-related questions or requests, contact us at hello@crowdsurf.com.au.