K–12 operational oversight for companies working in educational settings

When a theatre company indicates that it works with K–12 students in educational settings, TheatreOS activates K–12 operational access controls for that company. The company must complete the oversight setup — including an accepted company-wide lead — before new cast and crew can join its shows.

An accepted oversight lead can view every fixed and private show chat for that company, including hidden messages. This access is strictly read-only: the lead cannot post messages, edit groups, hide messages, flag content for moderation, or manage any show. Active oversight leads and scoped reviewers may flag individual messages to queue them for the company's own review.

Scoped reviewers may be invited with access limited to a specific school or show rather than all company chats.

These are operational access controls, not a legal compliance certification. Theatre companies remain solely responsible for obtaining appropriate consent, maintaining safeguarding procedures, and meeting all applicable legal and organisational obligations. TheatreOS does not certify compliance with any law, provide legal advice, or manage parent or guardian consent on behalf of any company.

myupstage TheatreOS ("myupstage", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our theatre communication and ticketing platform, whether through our website or mobile app (together, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

• Account information: your name, email address, password, and profile details such as your role (actor, crew, theatre company, or theatregoer), skills, and location.
• Show and production data: shows you create or join, cast and crew membership, rehearsal schedules, chat messages, and talking points.
• Ticketing and membership data: ticket purchases, digital tickets, membership subscriptions, and attendance records.
• Payment information: payments are processed securely by Stripe. We do not store your full card details on our servers.
• Location data: if you choose to use directions features, we use your browser's geolocation to provide directions to venues and rehearsals.
• Usage data: technical information such as device type, browser, IP address, and how you interact with the Service.

2. How We Use Your Information

• To create and manage your account and authenticate you.
• To provide core features such as messaging, scheduling, talent search, and ticketing.
• To process payments, memberships, and ticket orders.
• To send transactional emails (e.g. password resets, ticket confirmations, notifications).
• To improve, secure, and troubleshoot the Service.
• To communicate important updates about your account or shows you follow.

3. How We Share Information

We do not sell your personal information. We share information only in these circumstances:

• With other users: certain profile and show information is visible to cast, crew, and theatre companies you collaborate with, and published shows are visible to the public.
• With service providers: trusted partners who help us operate the Service, including Stripe (payments), SendGrid (email), Twilio (messaging), and our hosting and database providers.
• For legal reasons: when required by law or to protect the rights, safety, and security of myupstage and our users.

4. Cookies and Sessions

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect functionality.

5. Data Security

We use industry-standard measures to protect your information, including encrypted connections and secure password storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated personal data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing of your information.

To exercise any of these rights, please contact us using the details below.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at support@myupstage.com.