Privacy Policy

Last updated: February 18, 2026

This Privacy Policy describes how Alstergee ("we," "us," or "our") collects, uses, and protects information when you use our websites and web applications hosted at alex.alstergee.com and its subpages (collectively, the "Services"), including but not limited to the LSO Compliance Tool, equipment databases, and related tools.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and company name. If you sign in via Google OAuth, we receive your name, email address, and profile identifier from Google.

User-Provided Content: We store data you voluntarily enter into the Services, including but not limited to: show records, equipment inventories, venue information, crew details, uploaded documents, checklist responses, safety calculations, and any other information you choose to input.

Automatically Collected Information: We collect standard server access logs which may include your IP address, browser type, referring page, pages visited, and timestamps. We do not use third-party analytics or tracking services.

Authentication Data: We store hashed passwords (never plaintext) and session tokens. If you authenticate via Google, we store a token for authentication purposes only.

2. How We Use Your Information

To provide, operate, and maintain the Services
To authenticate your identity and manage your account
To send transactional emails (account verification codes, password resets) via our SMTP relay
To store and display your user-provided content back to you
To generate reports, exports, and calculations you request
To enable sharing features you initiate with other users
To monitor and prevent abuse, unauthorized access, and security threats

3. Information We Do NOT Do

We do not sell, rent, lease, or trade your personal information to any third party, ever.
We do not use your data for advertising or marketing purposes.
We do not use third-party analytics, tracking pixels, or advertising networks.
We do not share your data with third parties except as required by law or as described in this policy.
We do not use your content to train machine learning models or for any purpose beyond providing the Services to you.
We do not send unsolicited marketing emails.

4. Data Storage and Security

Your data is stored on servers we operate. We implement reasonable security measures including:

HTTPS/TLS encryption for all data in transit
Bcrypt password hashing
Server-side session validation
Parameterized database queries to prevent injection attacks
Firewall and intrusion prevention systems
Restricted file access and PHP security hardening

However, no method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the Services at your own risk.

5. Data Retention

We retain your account data and user-provided content for as long as your account is active or as needed to provide the Services. If you request account deletion, we will delete your data within 30 days, except where retention is required by law or for legitimate security/audit purposes.

6. Third-Party Services

The Services may integrate with the following third-party services:

Google Identity Services: If you choose to sign in with Google, your authentication is handled by Google's OAuth2 service. Google's privacy policy applies to that interaction.
Google Gmail API: Used solely to relay transactional emails (verification codes) from our server. We do not read, store, or access any Gmail mailbox content.
CDN-hosted libraries: We load open-source JavaScript libraries (Alpine.js, FullCalendar, html2pdf.js) from public CDNs. These CDN providers may collect standard access logs.

7. Your Rights

You have the right to:

Access, update, or correct your account information at any time via Settings
Export your data (shows, hardware, venues, crew) using the export features
Request deletion of your account and all associated data
Withdraw consent for Google authentication (revoke access in your Google Account settings)

To exercise any of these rights, contact us at the email address below.

8. Cookies and Sessions

We use essential session cookies only to maintain your authenticated session. These cookies are:

HTTP-only and Secure-flagged
Strictly necessary for the Services to function
Not used for tracking or advertising

We do not use any non-essential cookies, and therefore do not require a cookie consent banner.

9. Children's Privacy

The Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

10. International Users

The Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Services, you consent to this transfer.

11. Disclosure Requirements

We may disclose your information only if required to do so by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Alstergee, our users, or the public.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or requests, contact:
Alstergee
Email: alex@alstergee.com