Privacy policy

The data controller is Livespec AS, Kuluvegen 1, 3570 Ål, Norway (org. no. 934547403). For any privacy question or request, contact contact@livespec.no.

• Account and profile: your email, display name, and any optional details you add (phone, address, photo). You control who can see profile details.
• Content you create: specs and technical riders, events, venues, schedules and run of show, stage plots, equipment and input lists, chat messages, and files you upload.
• Rider-import data: Personnel and guests may contain personal data. The selected PDF uses private temporary storage and is deleted after processing when possible, with a 60-minute LiveSpec temporary-retention ceiling. It is not attached to the spec. We store accepted structured rows; source excerpts are review-only. We retain minimized immutable audit metadata for security, quota, and incident investigation.
• Technical: an authentication cookie that keeps you signed in, and limited security and diagnostic logs. Our error monitoring is configured not to collect IP addresses or other personal data by default.

• To provide and operate the service, including team and event collaboration (legal basis: performance of our contract with you).
• To send the notifications you turn on (legal basis: your consent, or our legitimate interest).
• Optional AI rider import runs only after explicit, versioned consent. The selected PDF is sent to Google Gemini to extract reviewable rows (legal basis: your consent); it is not committed automatically.
• To keep the service secure and to diagnose problems (legal basis: our legitimate interest).

We use a single essential authentication cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

We do not sell your data. We rely on the service providers below. AI rider import remains disabled until we verify the paid Google Gemini account, data-use terms, DPA, retention, region, billing, and incident contacts; this policy makes no DPA or processing-region claim for Gemini before that operational verification is complete.

Your data lives primarily in the EU. Some providers (Vercel, Discord, Stripe) may process data outside the EEA. Where they do, transfers rely on the EU Standard Contractual Clauses.

We keep your data while your account is active. If you delete your account, we remove or anonymize your personal data within 30 days, and it is purged from encrypted backups within a further 30 days.

For AI rider import, the selected PDF is held in private temporary storage, deleted after processing when possible, and subject to a 60-minute LiveSpec temporary-retention ceiling. It is not attached to the spec, and source excerpts remain review-only. Accepted structured rows follow the retention of the spec they were saved into; minimized immutable audit metadata follows our security and incident-retention schedule.

Under the GDPR you can:

You can export a copy now in Settings, under Your data. To exercise any right, contact contact@livespec.no. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

Data is encrypted in transit, access is enforced per row by database security policies, and we follow least-privilege access.

LiveSpec is not intended for anyone under 13 (the age of digital consent in Norway). We do not knowingly collect data from children.

We will post changes here and update the "last updated" date, and we will flag material changes.