Skip to content
Legal

Privacy Policy

Effective October 4, 2026

This policy explains what information Encore collects when you use our website, dashboard and Register app, how we use it, and the choices you have. It applies to account holders, their team members, fans who interact with an Encore register, and people we contact about Encore.

Information we collect

Account information. Your name, email address and password when you create an account, and the artists, teams and roles you set up. Passwords are handled by our authentication provider and are never visible to us.

Business information. What you enter to run your merch operation: products, prices, inventory, tours, shows, venues, deal terms, settlements, cash drawers, registers and devices.

Sales information. Every sale recorded through the Register, including items, tenders, tips and the register and device that took it. Card details are collected directly by Stripe on the card reader or phone; Encore never receives full card numbers.

Payout and billing information. Identity, business and bank details needed to pay you out are collected by Stripe inside Encore and stored by Stripe. We keep the resulting account status. Your Encore subscription card is saved by Stripe; we keep only its brand and last four digits.

Fan information. If a fan chooses to leave an email address at your merch table (for a receipt or your mailing list), it is stored for the artist who collected it. Fans' contact details belong to that artist's audience and are never shared with other artists.

Hardware orders. Shipping names, addresses and phone numbers for hardware you buy or rent from Encore. These are encrypted in transit and at rest.

Usage information. Server logs (IP address, request path, timestamps and errors) used to keep the service secure and reliable, and privacy-friendly, cookie-free page analytics on our marketing site that count visits without identifying you.

Referral information. When you first arrive from a campaign link or another website, a first-party cookie remembers the campaign name, the page you landed on and the referring site's domain for 30 days. If you sign up, we store it with your account so we know which channels work. It contains no personal information.

Business contact information. To tell people in the touring industry about Encore, we may use professional contact details (name, role, company and work email) that are publicly listed, for example on an artist's or management company's website. Every such email identifies us and includes a one-click way to opt out, which we honor permanently.

How we use information

  • To provide Encore: the dashboard, the Register app, settlements, reports, payouts and hardware orders.
  • To bill your subscription, which is charged only in months that contain scheduled shows.
  • To send service emails such as team invitations, receipts, notifications and security messages.
  • To power MerchSense and the copilot. These features send a summary of the relevant artist's business data to our AI provider to generate answers and proposals. Fan contact details are never included, and our provider does not use this data to train its models.
  • To secure the service, prevent fraud, and investigate and fix problems.
  • To understand which marketing channels bring people to Encore, using aggregated, de-identified signup sources.
  • To meet legal, tax and accounting obligations.

How we share information

We do not sell personal information. We share it only with:

  • Your team. People you give access to an artist see that artist's data according to their role.
  • Service providers who process data on our behalf: Stripe (payments, payouts and billing), Supabase (database, authentication and file storage), Railway (hosting), OpenAI (AI features), and our email delivery providers.
  • Venues, for the settlement information you choose to share or have signed at the end of a show.
  • Authorities, when required by law or to protect the rights, property or safety of our users or the public.
  • A successor, if Encore is involved in a merger, acquisition or sale of assets, subject to this policy.

Security

Data is encrypted in transit. Sensitive request bodies are additionally encrypted end to end between your browser and our API, and sensitive fields such as shipping contacts are encrypted at rest. Access to each artist's data is enforced on the server for every request, and our database denies direct client access by default. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as the law requires.

Retention

We keep account, business and sales records for as long as your account is active and afterwards as long as needed for tax, accounting and legal purposes. Business contact information used for outreach is deleted if the person has not engaged with us within 180 days, and opt-outs are kept as a minimal suppression record so we never contact that address again.

Your rights and choices

You can view and update your profile in the dashboard, export reports and audience lists, and ask us to delete your account. Depending on where you live, you may also have the right to access, correct, delete or port your personal information, or to object to certain processing. Email support@atencore.com and we will respond within 30 days.

Every marketing email includes an unsubscribe link. Service emails about your account cannot be turned off while the account is active.

Children

Encore is a business tool and is not directed to children under 16. We do not knowingly collect their personal information.

Changes and contact

If we change this policy materially we will update the effective date and notify account owners by email. Questions go to support@atencore.com. See also our Terms of Service.