Privacy Policy

TourStak respects your privacy. This policy describes what information we collect, how we use it, and the choices you have. It applies to the TourStak web application and related services.

• Account information: When you create an account, we collect your email address, display name, and profile avatar. If you sign up with Google OAuth, we receive the name and email associated with that account.
• Workspace and campaign data: We store the books, campaigns, workspaces, and reviewer relationships you create. This includes manuscript titles, tour schedules, reviewer applications, and messages sent through the platform.
• Reviewer profile data: Reviewers may provide genre preferences, platform links, reading turnaround preferences, and optional delivery addresses (such as Kindle or NetGalley emails) for ARC distribution.
• Usage and analytics: We collect page views, feature usage, and session activity to understand how the platform is used and to improve it. Anonymous visitors receive a stable browser identifier; authenticated users have activity logged against their account.
• Support and communications: When you contact us or participate in support channels, we retain those communications to help you.

• To provide and maintain the TourStak service.
• To match authors with relevant reviewers and coordinate campaigns.
• To send operational emails (such as campaign deadlines, application updates, and account notifications).
• To detect abuse, fraud, and security threats.
• To improve the product through aggregated usage analysis.

We do not sell your personal data. We share data only:

• Within your workspaces: Authors and agency team members can see reviewer names, profile summaries, and campaign participation within workspaces they manage. Reviewers can see public author and campaign listings they have access to.
• Service providers: We use third-party services for hosting, authentication, email delivery, payment processing, and analytics. These providers process data on our behalf under appropriate agreements.
• Legal obligations: We may disclose data when required by law or to protect our rights and users.

TourStak uses cookies and similar technologies to keep you signed in, remember preferences, and understand platform usage. Anonymous visitor tracking uses a browser-generated identifier stored in localStorage. You can clear this identifier at any time through your browser settings.

We retain your data for as long as your account is active or as needed to provide the service. Workspace and campaign data may be retained according to your agency or publisher retention policies. If you delete your account, we remove personal profile data and anonymize or delete associated workspace data in accordance with our backend retention schedule.

• You can update your profile and reviewer preferences at any time from your account settings.
• You can request deletion of your account and data by contacting us at the email below.
• You can opt out of non-operational marketing emails using the unsubscribe link in any such message.

We protect sensitive data with access controls at the database level. Sensitive fields (such as billing status, delivery addresses, and contact details) are restricted so they can only be accessed through authorized backend functions, not queried directly from the client. Authentication is handled through industry-standard providers with encrypted sessions.

If you have questions about this policy or your data, email us at admin@tourstak.com.