Venue Online Services ("VOS", "we", "us") runs the VOS website and venue dashboard at venueonlineservices.app. VOS is operated by Onto It Media Pty Ltd ABN 31133498067, Address: 104/1 Pearl St Erskineville NSW 2043. This policy explains what personal information we collect, why, and what you can do about it.

Who this applies to

• Venue staff who sign in to a VOS dashboard to manage a venue's events, menus, specials and social media posts.
• Artists and performers whose details a venue adds to an event.
• Visitors to a venue's VOS-powered website.

What we collect

Account details. Your name, email address and the venue you work for, so you can sign in and so we know which venue's content you can change.

Venue content. The events, line-ups, menus, specials, posters, images and captions you or your venue enter. For artists this can include a stage name, photo, short description, genres and links to your public social media and music profiles.

Facebook and Instagram connection. When a venue connects its Facebook Page and Instagram account through our Meta app, "VOS Dashboard Scheduler", we store:

• the Page ID, Page name, Instagram account ID and Instagram username, so you can confirm the right accounts are connected;
• access tokens issued by Meta, which let VOS publish and schedule posts to that Page and Instagram account on the venue's behalf. Tokens are kept on our servers only and are never sent to anyone's browser;
• a log of each post we publish, schedule, reschedule or cancel: the caption, the images and videos used, the time, the post IDs Meta returns, and whether it succeeded.

To show a venue how its recent posts are doing, we read back from Meta the venue's recent posts with their captions, images, links and like, comment and share counts. Where a post on the Page was made by someone else, such as a visitor's check-in, Meta tells us that person's public name. We show this in the dashboard when you look; we do not keep a separate copy of it.

When a caption mentions an @handle, we check with Meta whether that public account can be tagged. We do not store anything about that account.

Technical information. Like most websites, our servers record basic request information such as IP address, browser type and the pages requested, for security and to fix faults.

How we use it

• To run the dashboard and the venue's website.
• To publish and schedule the venue's Facebook and Instagram posts when the venue asks us to, and to show what happened to them.
• To keep VOS secure and to diagnose problems.

We do not sell personal information, use it for advertising, or use Facebook or Instagram data for any purpose other than the venue's own posting and the post results shown back to that venue.

Who we share it with

• Meta Platforms (Facebook and Instagram), when we publish a post the venue has asked us to publish.
• Service providers who host our servers, database and file storage, under agreements that require them to protect it.
• The public, for content a venue chooses to publish on its website or social media.
• Authorities, where the law requires it.

Some of these providers may store data outside Australia, including in the United States.

How long we keep it

• Facebook and Instagram tokens and account IDs: until the venue disconnects in the VOS dashboard, or asks us to delete them.
• Post logs: 36 months, then deleted.
• Account details and venue content: while the venue uses VOS, and for 12 Months after it stops, unless you ask us to delete them sooner.

How we protect it

Data is sent over encrypted connections. Meta access tokens are kept apart from the rest of the venue's settings and are never shown to a browser. Only people with a VOS account for that venue can see its dashboard.

Your choices and rights

You can ask to see, correct or delete the personal information we hold about you. A venue can disconnect Facebook and Instagram at any time from Dashboard → Settings → Meta connection, which deletes the stored tokens and account details straight away. You can also remove VOS's access from your own Facebook settings. See our Data Deletion Instructions.

If you have a privacy complaint, contact us first. If you are not satisfied with our answer you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact

support@ontoitmedia.com Postal Address 104/1 Pearl St Erskineville NSW 2043

Changes

We will update the date at the top when this policy changes, and tell venues by email about significant changes.