The short version
- We run the registration and show-day apps for car shows. The show's promoter runs the show.
- We never sell your information for money, and we never use it for targeted advertising across other sites.
- A sponsor gets your contact details only if you tap to share them with that one sponsor. You can take it back.
- Fans see only what you choose to show about your car. Never your email, your phone number, your plate or your last name.
- The map uses your phone's location on your phone only. We do not receive or store your GPS location.
- Texts go only to people who ticked a box for them. Reply STOP to end them. We never sell or share your mobile number or text opt-in for anyone's marketing.
- You can ask for a copy of your information or ask us to delete it.
1Who we are
ShowMarshal is operated by [Company legal name], a California [entity type] ("ShowMarshal," "we," "us"). Our mailing address is [mailing address].
We provide software. Each car show on ShowMarshal is run by its own promoter (the event organizer), who sells registrations and booths, sets the rules and prices, and runs the show day. Each show has its own address, like showmarshal.com/baysidecove/.
This policy covers showmarshal.com, every show app and page on it, our text messages, emails and phone alerts, and our promo site. It does not cover a promoter's own website, a sponsor's website or offer, or Stripe's checkout page, which have their own policies.
Two roles
- For a show's data (the registrations, cars, check-ins, vendors, volunteers and judges of that show), we process information on behalf of the promoter under our contract with them. The promoter decides how it uses that information, and the promoter's own privacy policy also applies.
- For your account and our own service (your sign-in, your garage of saved cars across shows, our texts and emails, security, and the per-sponsor sharing you choose), we decide how information is used, and this policy is the one that governs.
2What we collect, by kind of user
We collect only what the show needs to run. Here is what each kind of user gives us, and what we collect automatically.
Car owners
- Name, email and password (we store only a scrambled hash of the password).
- Your cars: year, make, model, paint color, class, hometown and state, the story you write, and trailer and cruise choices.
- License plate, if you enter it. Only the show's staff see it, for check-in.
- Your registrations: show, space number, amounts paid, the platform fee, refunds, transfers, waitlist and renewal status, and check-in time.
- Your signed rules and waiver: the name you typed, your signature if you drew one, and the time.
- Your privacy choices for the map, and your text and sponsor choices.
- Mobile number, only if you give it for texts.
- Payment: Stripe collects your card on its own page. We receive the result (paid, amount, last four digits and card brand if Stripe sends them), never your full card number.
Spectators
- No account and no name are needed to use the show app.
- A random device ID made by your phone (see section 3), with your votes and ratings.
- If you turn on phone alerts: the push address your browser gives us, your language, and whether you also said yes to sponsor offers.
- Favorites, your language and display settings stay on your phone.
- If you use the Lost child feature: the wristband case number and what you choose to send (see section 15).
Promoters and show staff
- Name, work email, password hash, role on the show.
- The show's setup: dates, prices, rules, maps, sponsor packages, schedules, permits, budget and message settings.
- Business and bank details go to Stripe when you connect payouts. We see the account status, not your full bank details.
- A record of actions taken in the hub (for example, who approved a blast or issued a refund).
Sponsors
- Sponsors do not need a login. The promoter enters the sponsor's business name, logo, offer text and a contact name and email.
- Counts of views, taps and blast opens for the sponsor's report. These are totals, not people.
Vendors
- Business name, contact name, email and phone, booth choices and what you sell.
- Documents you upload for the promoter, such as a seller's permit, health permit, business license or insurance certificate.
- Booth payments are handled like registrations: the promoter is the seller and Stripe processes the card.
Volunteers and judges
- Volunteers: name, email and phone, shifts, check-in code, your confirmation of the show's age rule, and your text choice.
- Judges: name, the classes you judge, your scores and notes, and any conflict you declare. Your phone number, if the promoter enters it, is not texted unless you opt in yourself.
Collected automatically from everyone
- Technical information our host needs to deliver pages and stop abuse: IP address, browser type, and the time and address of each request. Our rate limits keep only a scrambled hash of an IP address or email, never the raw value.
- Cookies and local storage described in section 11.
We do not use advertising trackers, analytics pixels or social media trackers on showmarshal.com.
3Device IDs and voting
When you open a show app, your phone makes a random ID and keeps it in the app's storage on your phone. It is not your phone number, your advertising ID or your hardware serial number, and it is not linked to your name.
We use it to:
- count People's Choice votes and star ratings fairly (a phone can vote for a set number of cars, and can change a vote until voting closes);
- send a vote made with no signal once the signal is back;
- keep your phone alerts and a Lost child case tied to your phone only.
To keep voting fair we may briefly check how many votes come from one network, using a scrambled hash of the IP address. Clearing the app's storage on your phone makes a new ID. Vote totals are shown to everyone; who voted for which car is not.
4Location
The map uses your phone's location on your phone only. Your GPS location is never sent to us or to the promoter, and we do not store it.
The blue "you are here" dot, walking directions and distances to cars are worked out inside the app on your phone, which is also why they work with no signal. Your phone asks your permission before the app can use location, and you can say no or turn it off in your phone's settings; the map still works without it.
One exception you control. If you tap "My child is lost," the app sends the show's safety desk your approximate spot on the show map (a point on the venue map, like "near space 214"), so staff can come to you. It is sent once, for that case only, and only because you tapped the button.
5How we use information
- To run registration and the show: accounts, space holds, checkout, dash cards, check-in, waitlists, renewals, transfers, refunds the promoter makes, vendor booths, volunteer shifts, judging and awards.
- To show the public map: only the car details and name form you allow (section 6).
- To send messages you chose: receipts and account emails, texts you opted in to, phone alerts you turned on, and emergency messages from the show.
- To share with a sponsor you picked, only after your per-sponsor opt-in (section 7).
- To keep things safe and working: security, fraud and fake-vote prevention, fixing bugs, backups, and keeping records the law requires.
- To improve the product using totals and statistics that do not identify you.
- To follow the law and protect people's rights and safety.
We do not use your information for targeted advertising, we do not build profiles to sell, and we do not make automated decisions about you that have legal or similarly significant effects.
6What promoters see
The promoter of a show you take part in, and the staff they invite, can see what they need to run that show:
- Car owners: your name, email, car details, plate, space, payment and refund status, waiver, check-in, waitlist and renewal status, and your text choices for their show. They can export this for their records.
- Vendors, volunteers and judges: the details you gave that show.
- Spectators: vote and rating totals, alert counts and sponsor totals. Not who you are.
- The consent log for their show (section 8).
A promoter sees only its own show. It does not see your registrations at other shows or your saved cars that you have not entered in its show.
What the public sees
The public map shows only what you choose to share. By default fans see your first name and last initial, your car and its space. In your Privacy settings you can show your first name only, hide your hometown, hide your spot after the show closes, turn off crowd photos of your car, and hide engine and horsepower. Fans never see your email, phone number, license plate or last name.
7Sponsors: only with your per-sponsor opt-in
We never give a sponsor your personal information unless you tap to share it with that specific sponsor. There is no blanket "share with partners" box.
- How it works: where a sponsor makes an offer (for example, an insurance quote), you see the sponsor's name, exactly what will be sent, and a button like "Share my info with [Sponsor name]." Nothing is sent until you tap it. Each sponsor is a separate choice.
- What the sponsor receives: your name, email, city and state, the car you choose (year, make, model) and the show. Never your mobile number or any text opt-in information, never your plate, and never your payment details.
- It is never required. Saying no does not change your registration, price, space or anything else.
- Taking it back: you can withdraw your share for any sponsor at any time (section 17). We stop sending new information to that sponsor right away. Information already sent is held by the sponsor under its own privacy policy; we will pass your request to it.
- Everything else a sponsor gets is totals: how many people saw its logo, tapped its offer or opened its blast. Never names, device IDs or contact details.
We do not receive money for sponsor shares. Sponsor money belongs to the show's promoter. Because a sponsor may still be treated as receiving something of value, we treat each share as a possible "sale" under California law and give you the rights in sections 16 and 17.
Sponsor offers by text or phone alert are a separate opt-in (sections 9 and 10) and never involve giving your number to the sponsor. We send those messages ourselves.
8The consent log
To prove we only message and share with people who agreed, we keep a record of every consent choice. Each entry has:
- what you agreed to (show alerts by text, sponsor offers by text, sponsor offers by phone alert, a share with a named sponsor), for which show;
- the exact wording you saw, the page or screen, and the time;
- your mobile number or account, as it applies, and a scrambled hash of the IP address;
- every later change: STOP, START, HELP, a change in your settings, or a carrier's "unsubscribed" notice.
Entries are added, never edited. The promoter of a show can export the log for that show. We keep it for the period in section 13 so that we can show who agreed to what if a question ever comes up.
9Text messages
Show texts are sent by us for each show through our messaging provider, Twilio. Every text starts with the show's name.
- Show alerts (optional): for car owners who tick "Text me about my registration and show-day updates": confirmations, waitlist space offers, "still coming?" checks, arrival windows and show-day updates such as weather holds and emergencies. Up to 10 messages per show.
- Volunteer texts (optional): for volunteers who tick the text box: your confirmation, check-in code and shift reminders.
- Sponsor offers (optional, separate box): offers from that show's sponsors, sent by us. Up to 4 messages per month. Never required to register.
Message and data rates may apply. Message frequency varies within the limits above. Reply STOP to cancel at any time; HELP for help, or email [email protected]. One number sends for every show, so STOP ends texts from us for every show; reply START to turn them back on. If you stop texts, receipts and important registration notices still come by email.
We do not sell or share mobile numbers or text opt-in data with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party, except the service providers that deliver our texts (such as Twilio and the phone carriers).
We send routine texts only between 8 a.m. and 9 p.m. at the show's location (a promoter can make that window shorter, never longer). Emergency messages from the show can go out at any time. Carriers are not liable for delayed or undelivered messages.
10Email and phone alerts
We send email through our provider, Resend, from [email protected], with the show's name as the sender. Account and transaction emails (sign-in and password reset, receipts, waitlist offers, refund answers, arrival windows, vendor and sponsor page links) are part of the service. Any marketing email includes an unsubscribe link and our mailing address. If an email bounces or is reported as spam, we stop emailing that address. Sponsor offers never fall back to email if you stopped texts.
Phone alerts (web push)
If you tap "Turn on phone alerts," your browser gives us a push address that works only for our site. We use it for show alerts and emergencies from that show, and for sponsor offers only if you also ticked the separate sponsor offers box. The alert passes through your browser's push service (for example Apple, Google or Mozilla), encrypted so that only your phone can read it. Turn alerts off in the app's Notification settings or in your phone's settings.
13How long we keep it
We keep information only as long as we need it for the reasons in this policy, then delete it or remove what identifies you. Backups are overwritten on a rolling [30]-day cycle.
| Information | How long |
|---|---|
| Your account (name, email, password hash) | While your account is open; deleted within [30] days after you ask, except the records below |
| Registrations, booth sales, payments and refunds | [3] years after the show, for taxes, chargebacks and disputes |
| Signed rules and waivers | [3] years after the show, or longer if a claim is open |
| Saved cars and privacy choices | Until you remove them or close your account |
| Consent log and text consent records | [5] years after the last entry |
| STOP list and email do-not-send list | As long as needed to keep honoring them |
| Votes and ratings with device IDs | Device IDs removed [90] days after the show; totals kept |
| Phone alert subscriptions | Until you turn alerts off, the push service says it is gone, or [90] days after the show |
| Lost child cases | [30] days after the show, unless an incident report must be kept longer |
| Photos and comments | Until you or the promoter delete them |
| A promoter's show data | For the promoter's contract; after it ends, a final export and deletion within [30] days, except records the law requires us to keep |
| Security logs and rate-limit hashes | Up to [30] days |
14Export, correction and deletion
- See and fix: sign in to see and edit your name, cars, privacy switches and text choices. Staff can fix a registration detail for you.
- Get a copy: email [email protected] from your account's email and ask for an export. We send a file with your account, cars, registrations, consent history and sponsor shares within 45 days.
- Delete: ask the same way to close your account. We delete your account and saved cars and remove your name from past registrations, except the records the law or a promoter's legitimate need requires us to keep (section 13). Deleting does not cancel or refund a registration; refunds are the promoter's decision under its policy.
- Stop messages: reply STOP to texts, use the unsubscribe link in marketing email, or turn off alerts in Notification settings.
- Spectators with no account can clear the app's storage on their phone to remove the device ID from the phone. To delete votes or an alert subscription tied to your device ID, send us the ID shown in the app's Notification settings.
Where we hold a show's data for its promoter, we may pass your request to the promoter, and we will help it respond.
15Children
- No accounts under 18. You must be 18 or older to create an account, register a car, sell a booth or run a show. We do not knowingly collect personal information from children under 13, and we do not sell or share information of anyone we know is under 16.
- Spectator app: it needs no account and no name. A family can use it on a parent's phone.
- Kid wristbands carry a case number only. No names and no phone numbers are printed on a wristband or stored with it by default. The child's first name and a clothing description you type stay on your phone.
- If you tap "My child is lost," the app sends the show's safety desk the case number, your approximate spot on the show map, and, if you typed them, the child's first name and what they are wearing, so staff can find your child. Only the safety desk, the promoter's staff and responding police or medical teams see it. Only your phone can see or close the case.
- Volunteers aged 16 or 17 may help only with a parent on the same shift, under the promoter's rules. They do not create accounts.
- Photos: we ask people not to post photos in which a child can be recognized without a parent's permission, and we remove them on request.
If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.
16California privacy rights
This section is our notice at collection and privacy notice under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). It applies to California residents.
What we collect and why (the last 12 months)
| Category | Examples | Disclosed for a business purpose to | Sold or shared? |
|---|---|---|---|
| Identifiers | Name, email, mobile number, device ID, IP address, account ID | Promoter of your show, service providers | Sold only to a sponsor you pick (name and email, never mobile number). Never shared for cross-context behavioral advertising. |
| Customer records (Civil Code 1798.80(e)) | Name, email, phone, signature on a waiver | Promoter, service providers | No |
| Commercial information | Registrations, booth purchases, payments, refunds, your cars and hometown | Promoter, Stripe, service providers | Car and city and state only, to a sponsor you pick. Never shared for advertising. |
| Internet or network activity | Pages and requests, votes, alert opens, security logs | Service providers; totals to promoters and sponsors | No |
| Geolocation | None from GPS. A map spot only in a Lost child report you send. | Show safety desk | No |
| Audio or visual information | Photos you post, a drawn signature | Promoter, the public (photos you post) | No |
| Professional or business information | Vendor, sponsor and promoter business details and permits | Promoter, service providers | No |
| Sensitive personal information | Account sign-in with password | Service providers (hosting) | No |
Sources: you; the promoter (for example, last year's owner list it imports, or a judge it adds); your browser and phone; Stripe (payment results); Twilio and Resend (delivery and STOP results). Purposes: those in section 5. Retention: section 13. We do not collect or infer characteristics about you, and we use sensitive personal information only to provide the service and keep it secure, so we do not offer a separate "limit the use" choice.
Your rights
- Know and access: the categories and specific pieces of information we have about you, where it came from, why we use it and who receives it.
- Delete information we collected from you, with legal exceptions.
- Correct inaccurate information.
- Opt out of sale and sharing (section 17).
- No discrimination: we will not charge you a different price, give you a worse space or deny you service for using these rights.
How to make a request
Email [email protected] [or call toll-free number, if required]. We will confirm within 10 business days and answer within 45 days (we may extend once by another 45 days and tell you why). To protect you, we verify your identity by asking you to confirm from the email on your account, or by matching details you give us with what we hold. You may use an authorized agent; we will ask for your signed permission and may ask you to verify your identity directly.
Other California notices
California's "Shine the Light" law (Civil Code 1798.83) lets you ask whether we gave personal information to third parties for their direct marketing in the prior year. The only such disclosures are the per-sponsor shares you chose. Ask at [email protected].
17Do Not Sell or Share My Personal Information
We do not sell personal information and do not share it for cross-context behavioral advertising, with one exception that is always your choice: the per-sponsor share in section 7. Nothing goes to a sponsor unless you tap to share with that sponsor.
To opt out of all sponsor shares, now and in the future, use any of these:
- Turn off each sponsor share in the app under Privacy, Sponsors.
- Email [email protected] with "Do Not Sell or Share" in the subject, from the email on your account. You do not need to verify your identity for this request, only tell us which email or number it covers.
- Turn on Global Privacy Control (GPC) in your browser. We treat a GPC signal as a request to opt out for that browser, and for your account if you are signed in.
After an opt-out we will not offer you a sponsor share again for at least 12 months unless you ask for it.
18Other states
Shows on ShowMarshal are in the United States, and car owners travel from many states. Wherever you live, you may use the rights in sections 14, 16 and 17, and we will answer the same way. Nevada residents: we do not sell covered information as Nevada law defines it; you may still send an opt-out request to [email protected].
19Security
We protect information with encryption in transit (HTTPS everywhere), passwords stored only as salted hashes, session, reset and invitation tokens stored only as hashes, card numbers kept on Stripe's page and never on ours, access limited by role and by show, and a record of who did what in the hub. No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.
20Changes to this policy
When we change this policy we update the "Last updated" date at the top. If a change is significant, such as a new kind of sharing, we will tell you by email or in the app before it takes effect, and we will ask for your consent where the law requires it. We never apply a new kind of sharing to information we collected before without your consent.
21Contact us
Questions or requests: [email protected]
Text help: [email protected], or reply HELP to any text
Mail: [Company legal name], Attn: Privacy, [mailing address]
For questions about a specific show, such as refunds, rules or space assignments, contact that show's promoter. Their contact is on the show's page in the app.