TourNex Privacy Policy
Live Event Production Services, LLC d/b/a TourNex
Version 1.3 — Effective August 9, 2026 (revised October 6, 2026)
Currently offered to customers in the United States and Canada only.
1. Who we are
TourNex is production management software for live touring. It is operated by Live Event Production Services, LLC, a Tennessee limited liability company doing business as TourNex ("TourNex", "we", "us").
Live Event Production Services, LLC
102 Hartmann Dr., Ste. G, Box 154
Lebanon, TN 37087
United States
hello@tournex.live
This policy explains what personal information TourNex handles, why, who else touches it, and what rights you have. It applies to the TourNex web and installed applications and to tournex.app and tournex.live. TourNex is currently offered only to customers in the United States and Canada.
2. The two roles TourNex plays
This distinction determines who you go to about your information, so it comes first rather than buried in a definitions section.
We are the controller of account information — the email address and name you register with, your password credential, your session and device records, your theme preference, and your beta status. We decide how that is used, and requests about it come to us.
We are a processor for everything a production company puts into a tour: crew cards, schedules, guest lists, hotel and travel records, labor calls, settlements, venue notes, plots, and attachments. The production company that holds the account decides what goes in and how long it stays. If you are a crew member, a guest, or a venue contact and you want your details corrected or removed, the fastest route is the production manager who entered them. You may also come to us and we will either act or route you, as described in Section 9.
3. What we handle
From you, when you have an account
- Name and email address
- Authentication credentials (passwords are hashed by our authentication provider; we never see or store them in readable form)
- Session records: device type, a device identifier, and last-active time, used to show who is currently online to a production manager and to let you sign out of a device remotely
- Your interface preferences and, if applicable, beta program status and the record of which agreements you accepted, when, and from what browser
- Your device's location, only if you allow your browser to share it. The Command Center uses it to show local weather: it is sent to our weather provider, Open-Meteo, at that moment and is not stored by TourNex
Entered by a production company about people on a tour
Crew records can include name, nickname, job title, department, company, work and cell phone, email, birthday, gender, T-shirt size, home airport, bus assignment, hotel preference, per diem rate, emergency contact name, phone and relationship, and free-text notes.
Two of these deserve to be named separately, because they are sensitive personal information and carry stricter conditions:
- Union affiliation — recorded because tours must call the right locals and honour the right agreements.
- Dietary restrictions — recorded to feed people correctly, but capable of revealing health conditions or religious belief.
Crew records may also contain a Known Traveler Number, a government-issued identifier used for airport screening.
Where TourNex is the processor, the lawful basis for these fields is the production company's to establish, not ours. Our Data Processing terms require the customer to have that basis before entering the data.
Guest lists
Guest entries hold a name, ticket count, pass types, seat details, pickup method, optional email address, affiliation, and notes. Guests generally have no relationship with TourNex and no account. We hold their details on the production company's instruction and use them for nothing else. Guest emails are used only to send that guest their own confirmation for that show.
Venue and contact records
Venue technical specifications, addresses, dock and load-in detail, and named venue contacts with their business phone and email.
What we do not do
TourNex runs no analytics, advertising, tracking pixels, or third-party behavioural cookies. We do not profile you, we do not sell or share personal information for cross-context behavioural advertising, and we make no automated decisions that produce legal or similarly significant effects. Cookies and local storage are used only to keep you signed in, remember your last tour, and store your theme preference.
4. Why we handle it, and on what basis
| What | Why | Lawful basis |
|---|---|---|
| Account and login | To provide the service and secure it | Contract |
| Session and device records | To show presence, allow remote sign-out, detect misuse | Legitimate interests (security) |
| Tour content (crew, guests, travel, settlements) | To provide the service to the customer | Contract with the customer; we act on their instruction |
| Confirmation and invitation emails | To deliver something a person asked for or was invited to | Contract / legitimate interests |
| Agreement acceptance records | To evidence which terms you accepted and when | Legal obligation / legitimate interests |
| Security logs and backups | To protect the service and recover from failure | Legitimate interests |
5. Artificial intelligence
TourNex can extract structured data from documents you upload — deal memos, venue information sheets, and travel itineraries — so you do not retype them. This is always available and works as follows.
When you use an import feature, the content of that document is sent to Anthropic, PBC for processing and the structured result is returned to you for review before anything is saved. Deal memos contain commercially sensitive terms such as guarantees and percentages; travel itineraries contain traveller names and booking references. You should know that before you use the feature.
Under our agreement with Anthropic, that content is not used to train models and is not retained beyond what is needed to return the result. Anthropic is listed as a sub-processor in Section 7.
Nothing is written to your tour without you reviewing and confirming it. TourNex does not make automated decisions about people.
6. Who can see your tour
Access inside a tour is controlled by role. A production manager decides who is on a tour and what each person can access. Some material is deliberately narrower — settlements are visible only to the production manager and tour manager, with management having read-only access; the security and evacuation plan is not visible to crew until the security director publishes it.
TourNex personnel
We think you are entitled to a specific answer rather than a reassuring one.
- The TourNex administrative console exposes metadata only — tour names, user counts, sign-in activity, subscription and beta status. It does not read advance content, settlements, guest lists, or crew records, and it is not built to.
- Direct database access is limited to named personnel who require it to operate the service.
- We access customer tour content only (a) with the customer's permission, to investigate a problem they have reported, (b) where strictly necessary to maintain or restore the service, or (c) where legally compelled. Database activity is recorded in the logs kept by our infrastructure provider.
- Non-use covenant. TourNex personnel will not use, reference, or disclose any customer's tour data for the benefit of any other production, including productions that TourNex personnel are personally engaged on. This is a binding commitment, and it is here because our personnel work in the same industry as our customers.
7. Sub-processors
We use outside providers to help deliver the Platform. The table below reflects our current sub-processors and may change as we add or replace providers over time. Except where noted below the table, each provider that handles personal information is bound by contract to protect it and to use it only to provide their service to us.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | United States |
| Vercel | Application hosting and delivery | United States |
| Resend | Transactional email (invitations, guest confirmations) | United States |
| Anthropic, PBC | AI document extraction (Section 5) | United States |
| HERE Global B.V. | Geocoding, truck-legal routing, map images | Netherlands / EU |
| api.qrserver.com (Foundata GmbH) | QR code image generation for driver sheets | Germany / EU |
| Open-Meteo | Weather on the command center; receives your device location if you allow it | European Union |
The QR code service is used under its public terms rather than a contract with us. It receives only the destination address printed on a driver sheet — a venue loading dock — and no personal information.
The weather service, Open-Meteo, is also used under its public terms rather than a contract with us. If you allow your browser to share your location, the Command Center sends your device's coordinates to Open-Meteo to fetch the local forecast. TourNex does not store them. If you decline, no location is sent and the weather is simply not shown.
A current list is maintained at this document's location. We will give customers notice before adding a sub-processor that handles tour content.
8. Where information is stored, and for how long
Information is stored in the United States. TourNex is currently offered only to customers in the United States and Canada.
Retention
| What | How long |
|---|---|
| Settlements and financial tour records | 7 years from the end of the tour |
| Advance content, schedules, crew records, venue notes, plots | For as long as the account is active, then 12 months |
| Guest list entries | 12 months after the show date |
| Account, profile and agreement acceptance records | Life of the account, then 12 months |
| Session and device records | 90 days maximum, often sooner |
| Backups | Deleted on the normal backup rotation, no later than 90 days |
Guest lists are purged earliest on purpose: they hold details of people who never chose to use TourNex, and keeping them longer serves nobody. Deletion runs automatically each night rather than on request.
Sessions expire on a hard 90-day limit measured from when you signed in, no matter how recently you used TourNex — at that point you are signed out and have to sign in again. Inactive sessions clear sooner. A credential that refreshes forever is one that never rotates, so this is a security measure as much as a retention issue.
A customer may request earlier deletion, and we will honour it except where we are required to retain something by law. Deletion requests are also subject to Section 9.
9. Your rights
Depending on where you live, you may have the right to access a copy of your information, correct it, delete it, restrict or object to how it is used, receive it in a portable format, or withdraw consent. In California, Virginia, Colorado, Tennessee and other US states with privacy statutes, these are established rights. If you are in Canada, applicable Canadian privacy law provides comparable rights.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We never have.
To exercise a right, write to hello@tournex.live. We will respond within the applicable statutory period, and we will tell you if we need longer.
If your information was entered into a tour by a production company — as a crew member, guest, or venue contact — that company decides what happens to it. We will forward your request to them promptly and tell you we have done so. You do not need to work out which of us is responsible before writing to us.
10. Security
Access to tour data is enforced at the database with row-level security, so a permission is a rule the database applies rather than a button the interface hides. Data is encrypted in transit and at rest by our infrastructure providers. Access for our own personnel is limited as described in Section 6.
No system is perfectly secure. If a breach affects your personal information we will notify affected customers and, where required, the relevant authority, as promptly as the circumstances and applicable law require.
11. Children
TourNex is a professional tool intended for adults. It is not directed to children under 18, we do not knowingly collect their information, and customers are prohibited from entering a minor's details into a tour. If you believe a child's information is in TourNex, write to us and we will remove it.
12. Changes
We will post any change here with a new version number and effective date. If a change materially affects how we handle personal information, we will notify account holders before it takes effect.
