Privacy Notice
Effective Date: May 23, 2026 · Last Updated: May 23, 2026
CultureHub respects your privacy and is committed to protecting the personal information you provide through our platform. This notice covers how we handle information for visitors browsing tenant sites and for administrators using the platform.
1. Who we are
CultureHub is operated by GroupPPS. We provide an arts and culture platform for cities, regional arts organizations, and cultural institutions (“tenants”). Tenants use CultureHub to publish information about events, public art, venues, artists, education programs, callboard listings, and heritage sites.
GroupPPS
Los Angeles, California
Privacy contact: hello@culturehub.pro
2. Information we collect
- Account information — name, email, optional display name, password hash, role (for tenant administrators)
- User-submitted content — event details, public art submissions, artist profiles, callboard postings, and any images or descriptions you submit
- Visitor analytics — aggregated, anonymous data including pages visited, referring URL, approximate location (city-level, derived from IP), device type, and outbound link clicks
- Email subscriptions— your email and the tenant you subscribed to, if you opt into a tenant’s weekly digest
- Geolocation— only when you tap a “near me” control. Coordinates are used in memory to filter results and are never persisted to our servers.
- Cookies and tracking data — see Section 9
We do not collect Social Security numbers, government IDs, financial account numbers, or other highly sensitive information through the platform.
3. Sources of personal information
We collect information directly from you when you create an account, submit content, subscribe to a digest, or contact us; from your employer or tenant organization when they provision your administrator account; and automatically as you use the platform.
4. How we use your information
We use your information to:
- Operate the platform and deliver tenant sites
- Authenticate users and secure accounts
- Process submissions and editorial workflows
- Send transactional communications and tenant digests you have opted into
- Provide aggregate visitor analytics to tenants in their admin dashboards
- Improve platform functionality and security
- Comply with legal obligations
5. Who we share information with
We do not sell or rent your personal information. We do not run ad networks, third-party advertising trackers, or build advertising profiles. The data we collect serves the tenant whose site you’re on and the operation of the platform — nothing else.
We share information with:
- Subprocessors that help us operate the platform. Amazon Web Services (hosting, storage), Vercel (frontend hosting), Google Maps and Google Places (map and venue data), Anthropic (AI features for itinerary generation, audio narration scripts, and image identification), OpenAI (text-to-speech), and Resend (transactional email). These providers process data on our behalf under their own privacy terms.
- The tenant operating the site you’re using. Tenant administrators can see content submitted to their site and aggregate analytics about visitors to it.
- Law enforcement when required by law, valid legal process, or to protect rights and safety.
6. Data retention
We retain information for the periods listed below:
| Data category | Retention period |
|---|---|
| Account information | Duration of account + 90 days |
| User-submitted content (published) | Duration of tenant contract; attribution anonymized to “Former member” if you close your account |
| Visitor analytics | 13 months, then aggregated |
| Email subscription records | Until you unsubscribe |
| Backup data | 30 days from primary deletion |
| Billing records | 7 years (tax compliance) |
Some retention periods may be extended to meet applicable state records retention schedules for government tenant clients.
7. Security
We protect your data using:
- TLS 1.2 or higher encryption in transit
- AES-256 encryption at rest
- Role-based access controls and audit logging
- Routine security testing and monitoring
We will notify affected customers within 72 hours of confirming a data breach involving customer data.
No internet-based system is completely secure. By using the platform you acknowledge this risk.
8. Your rights
You have the right to:
- Access— download a complete copy of your account data from Profile → Privacy. The export is a JSON file containing your profile, all submissions across every module, saved items, notifications, tenant memberships, and email subscriptions.
- Correct— update profile information at any time from Profile → Account.
- Delete— permanently delete your account from the Privacy tab. Saved items, notifications, login tokens, and email subscriptions are erased. Content you submitted to tenant sites is retained because tenants and visitors rely on it being public, but your attribution is anonymized to “Former member.”
- Port— receive your data in a machine-readable format (the JSON export described above).
- Opt out— of email subscriptions (one-click unsubscribe in every digest) and non-essential cookies.
- Withdraw consent— for any processing based on consent.
To exercise these rights, email hello@culturehub.pro. We will respond within 45 days.
California residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act, as amended:
- Right to know what categories of personal information we have collected, the sources, the purposes, and the categories of third parties we share it with
- Right to delete personal information, subject to exceptions
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing— we do not sell or share personal information, but you may submit a request
- Right to limit use of sensitive personal information — we do not collect sensitive personal information beyond what is needed to operate the platform
- Right to non-discrimination— we will not discriminate against you for exercising your rights
To submit a California rights request, email hello@culturehub.pro with “California Privacy Request” in the subject line. You may also designate an authorized agent to submit a request on your behalf.
Other US state residents
If you are a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Kentucky, or another state with a comprehensive privacy law, you have similar rights under your state’s law. Email hello@culturehub.pro to exercise them.
9. Cookies and tracking
We use cookies and similar technologies in three categories:
- Strictly necessary— required for the platform to function (session cookie for logged-in administrators, preference cookie for gated previews, idle timeout tracking). Cannot be disabled.
- Performance and analytics— help us and our tenants understand how the platform is used (aggregate, IP-anonymized). Used only with your consent, where applicable.
- Functional— remember your preferences. Used only with your consent.
You can manage your cookie preferences through your browser settings. We do not use third-party advertising or tracking cookies. Where Google Analytics is enabled by a tenant, it is configured with IP anonymization.
10. Children’s privacy
CultureHub is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email hello@culturehub.pro and we will delete it.
11. Third-party links
Tenant sites may include links to third-party websites (artist websites, ticket vendors, venue websites, social profiles). We are not responsible for their privacy practices. Review their privacy notices before providing personal information.
12. Artificial intelligence features
Some platform features use AI services from Anthropic (Claude) and OpenAI (text-to-speech). When you use these features:
- No model training— your data is never used to train AI models.
- Scoped access— AI features can only read the tenant content needed to deliver the feature (landmark descriptions for narration, public art catalogs for identification). They cannot access user accounts, authentication credentials, or private documents.
- No PII transmitted— personally identifiable information, credentials, and sensitive data are never sent to AI providers.
- No retention by providers— Anthropic and OpenAI do not retain inputs after delivering responses under our agreements.
13. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be posted on the platform with a revised “Last Updated” date. Continued use of the platform after changes take effect constitutes acceptance.
14. Contact us
Privacy questions: hello@culturehub.pro
GroupPPS · Los Angeles, California
By using CultureHub, you acknowledge that you have read and understood this Privacy Notice.