THE COMEDY.
← All policies

Privacy Policy

Effective date: 4 November 2026
Who this is from: GigPigs Pty Ltd (ABN 69 700 276 660, ACN 700 276 660), trading as iD Comedy, Stand Up Sydney and GigPigs, and operator of The Comedy (thecomedy.com.au) and Live Stand Up Comedy (livestandupcomedy.com) ("we", "us", "our").

This policy explains how we handle your personal information when you use our platform, apps and websites — including GigPigs, Stand Up Sydney, iD Comedy, The Comedy (thecomedy.com.au) and Live Stand Up Comedy (livestandupcomedy.com) (together, the "Services"). We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are in the EU/UK, additional rights under the GDPR/UK GDPR are described in section 14.

If you don't agree with this policy, please don't use the Services.

1. Who this applies to

The Services connect the live-comedy industry — comedians, photographers, videographers, managers, organisations ("organisers") and venues — with audiences and ticket buyers. We collect different information depending on who you are:

  • Audience / ticket buyers — people who buy tickets or attend events.
  • Industry users — comedians and other performers, organisers, venues and their staff who hold accounts.
  • Visitors — anyone browsing our websites or apps.

2. The personal information we collect

Account & profile information
Name, email, phone, password (stored hashed), profile/stage name, bio, photos and headshots, social links, role(s) on the platform, and — for performers — your electronic press kit (EPK), reviews and highlights.

Ticketing & event information
Tickets purchased, events attended, order history, seat/session details, and attendee details you provide (including for group bookings where a buyer enters other guests' details).

Payment information
When you buy tickets or pay through the Services, payment card details are collected and processed by our payment providers (Stripe and CyberSource). We do not store full card numbers on our systems; we retain limited transaction records (amount, date, last 4 digits, status) for accounting and support.

Marketing & communications
Your marketing preferences, email/SMS opt-ins, and records of messages we send you and how you interact with them.

Images, video & performance footage
If you perform at, or attend, an event we or an organiser records, we may collect photos and video that include you. For performers, our clip engine processes recorded footage to create clips and reels (including automated framing that follows the performer on stage). See section 8 and the separate Performer Image & Content Release.

Device & usage information
IP address, device and browser type, app version, pages/screens viewed, and interactions — collected via cookies and similar technologies (see our Cookie & Tracking Policy) and standard server logs.

Information from third parties
We may receive information from ticketing platforms (Humanitix, Eventbrite), organisers who invite you or add you to a lineup, social/advertising platforms (e.g. Meta), and public sources when building or enriching directory profiles.

Sensitive information. We don't seek sensitive information (such as health or biometric data) as a rule. Photos and video that identify you are personal information; where automated image processing could be considered biometric, we only do it for the clip/reel purpose described in section 8 and the Performer Release, and you can ask us to stop (section 13).

3. How we collect it

We collect information directly from you (when you create an account, buy a ticket, fill in a profile, or contact us), automatically (via cookies, the app, and server logs), and from third parties (ticketing platforms, organisers, and advertising/analytics providers). Where it's reasonable and practical, we'll collect personal information about you directly from you.

4. Why we use your information

We use personal information to:

  • create and manage your account and profile;
  • sell and fulfil tickets, manage events, lineups, bookings and settlements;
  • process payments and keep accounting records;
  • send you service messages (order confirmations, reminders, changes to events);
  • send you marketing about shows, offers and news where you've opted in or it's otherwise permitted — you can opt out at any time (section 5);
  • measure and improve the Services, and measure advertising (including via the Meta pixel and Conversions API — see section 7 and the Cookie & Tracking Policy);
  • create and publish performance clips and promotional content (section 8);
  • provide directory/EPK profiles and connect industry users with each other;
  • protect the Services, prevent fraud and abuse, and meet legal obligations.

Legal bases (EU/UK users): we rely on performance of a contract (providing the Services), your consent (marketing, non-essential cookies, image use), our legitimate interests (improving and securing the Services, measuring advertising), and legal obligation (tax/accounting).

5. Marketing and how to opt out

We send marketing by email and SMS. Every marketing email has an unsubscribe link and SMS includes an opt-out; you can also email hello@gigpigs.app. Opting out of marketing won't stop essential service messages (like an order confirmation or an event cancellation). We handle electronic marketing in line with the Spam Act 2003 (Cth).

6. Who we share it with

We share personal information only as needed to run the Services:

  • Payment providers — Stripe, CyberSource (to process payments).
  • Ticketing platforms — Humanitix, Eventbrite (where tickets are sold or synced through them).
  • Organisers, venues and performers — an organiser of an event you buy from, or are booked for, receives the information needed to run that event (e.g. attendee lists, lineup details). Organisers are responsible for their own handling of that information.
  • Advertising & analytics — Meta and analytics providers (see section 7 and the Cookie & Tracking Policy).
  • Social media platforms — Meta, Google (YouTube), TikTok and Metricool, when you publish through Social Studio (see section 10).
  • Accounting — Xero (for invoicing and reconciliation).
  • Communications — our email and SMS delivery providers.
  • Hosting & infrastructure — Supabase and Vercel (which host our databases and applications), and other IT service providers.
  • Professional advisers, and authorities — where required by law, or to protect our rights and safety.

We do not sell your personal information.

7. Advertising, the Meta pixel and Conversions API

We use the Meta pixel (in your browser) and Meta's Conversions API (server-to-server) to measure the performance of our advertising and to help show relevant ads. This can involve sharing limited event data with Meta, such as the pages and shows you view, tickets you add to your cart, starting a checkout, a ticket purchase and its value, and hashed identifiers like your email.

Show partners. Where an organiser or show partner (such as the performer, promoter or venue) has connected their own Meta pixel and been given permission for that show, events for that show may also be shared with that partner's pixel so they can measure and advertise the show. This covers:

  • browsing events on that show's pages and checkout (viewing a page or the show, adding tickets to your cart). These carry your IP address, browser type, the page address and Meta's browser identifiers (see below), not your name or email;
  • checkout and purchase events for that show. These also carry the hashed identifiers described above and the amount you paid;
  • free tickets (complimentary tickets, or orders paid entirely with credit or points). These are reported as a separate "free ticket" event with no value, never as a purchase.

Partners may only use this for their own advertising and measurement under Meta's terms. Opting out of marketing emails or SMS is separate from advertising pixels: checkout, purchase and free-ticket events may still be measured by pixels, including those of a show's partner or headlining artist. You can limit this through your browser or device settings and our consent tools.

First-party identifiers. To keep this measurement accurate, our own websites (thecomedy.com.au, gigpigs.app and standupsydney.com) may set Meta's browser identifiers as first-party cookies: Meta's fbp cookie, and its fbc cookie when you arrive from a Meta ad. They last up to 90 days. Events are sent from our servers to Meta, so they can reach Meta even where browser-based tracking is blocked. You can control tracking through your browser/device settings and our consent tools — see the Cookie & Tracking Policy.

8. Performance footage, clips and images

We (and organisers) record live shows. For performers, we process footage to create clips and reels for promotion, directory profiles and the performer's own use, including automated video framing that follows the performer. We handle this under the separate Performer Image & Content Release, which explains the scope of use and how a performer can decline or withdraw. Audience members who appear incidentally in footage can contact us to request removal where reasonable.

9. Google user data

If you connect a Google account to GigPigs — with Connect Google Calendar on your profile's Calendar page or your organisation's Integrations page, or with Sign in with Google — we receive data from Google only with your permission, and only what the features below need. Connecting a YouTube channel in Social Studio is covered in section 10.2.

What we access
- Sign in with Google: your name, email address and profile picture, to create your account and sign you in.
- Google Calendar: the calendars GigPigs creates in your Google account (a "GigPigs gigs" calendar, and any calendars your organisation sets up) and the events on them; and your free/busy times. We never see the titles, details or attendees of the other events in your Google Calendar — only when you're busy.

How we use it
- To add the gigs you're booked on, and the shows your organisation runs, to the calendars GigPigs creates for you, and keep them up to date.
- To show when you're busy on your GigPigs calendar, so you can avoid clashes.
- We use Google user data only to provide these features to you. We do not use it for advertising, we do not sell it, and we do not use it to build profiles or to train AI models.

How we store and protect it
- Google's access tokens are stored on our servers (Supabase, Sydney region) and are never sent to your browser.
- Busy times are fetched when you view your calendar and are not stored.

Who we share it with
- We don't share Google user data with anyone, except our hosting providers (Supabase and Vercel), who store it for us, or where the law requires it.
- Our staff don't read your Google data unless you ask us to (for example, for support), it's needed for security, or the law requires it.

Disconnecting and deleting
- Click Disconnect on your Calendar page at any time. We then delete our copy of your Google access tokens and ask Google to revoke them. Calendars GigPigs created stay in your Google account; you can delete them in Google Calendar.
- You can also remove GigPigs from your Google account at any time at https://myaccount.google.com/permissions, or through Google's security settings page at https://security.google.com/settings/security/permissions.
- To delete your whole account, see Data & Account Deletion.

Limited Use
GigPigs' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Social Studio – connected social accounts

Social Studio lets an organisation schedule posts to its own social media accounts and see how they perform. These rules apply to every platform below; each platform's section says exactly what we access.

  • Only accounts you connect. We act only on accounts someone in your organisation has connected and authorised, and only for that organisation.
  • Only what you schedule. We publish only posts your organisation creates or approves in Social Studio, at the time and with the settings you choose.
  • Performance figures. For Insights, we read counts such as views, likes, comments and shares for posts you published through GigPigs, and the account totals noted below. We store these with your organisation's posts.
  • Storage. Access tokens are stored encrypted on our servers (Supabase, Sydney region) and are never sent to your browser.
  • No other use. We don't use this data for advertising, sell it, build profiles from it or use it to train AI models. We don't share it except with our hosting providers (Supabase and Vercel) or where the law requires.
  • Disconnecting. Use the unlink button next to the account in Social Studio → Channels. We stop using it straight away and, where the platform allows, ask it to revoke our access. Posts already published stay on the platform. To delete your whole account, see Data & Account Deletion.

10.1 Facebook and Instagram

When your organisation connects Facebook, you choose which Facebook Pages, and the Instagram accounts linked to them, to add. For those we:
- see their names, usernames and pictures;
- publish the posts, photos and videos you schedule;
- read insights for the Page, the Instagram account and the posts you published through GigPigs (such as reach, views, likes, comments, shares and saves);
- if you allow ad access, read the ad accounts you manage, with their spend and results, so you can link ads to a show and see what they sold. We pause ads or change budgets only when you do it in GigPigs.

We use Meta's business permission only to find Pages you manage through a business portfolio. We don't read your personal profile, friends or messages. You can also remove GigPigs in your Facebook settings at any time.

10.2 YouTube

When your organisation connects a YouTube channel in Social Studio, we see the channel's name, handle and picture, and we upload the videos you schedule there, with the title, description, visibility and audience setting you choose. To show how your posts are doing in Insights, we also read view, like, comment and share counts and YouTube Analytics reports (such as watch time and subscribers gained) for that channel and the videos you posted through GigPigs. We don't read the content of comments, your subscribers' details or your messages.

  • To disconnect a YouTube channel, use the unlink button next to it in Social Studio → Channels. We then stop using it and ask Google to revoke our access. Videos already uploaded stay on YouTube.
  • You can also remove GigPigs from your Google account at any time at https://myaccount.google.com/permissions, or through Google's security settings page at https://security.google.com/settings/security/permissions.
  • The Limited Use commitment in section 9 also applies to YouTube data.

YouTube API Services
GigPigs uses YouTube API Services to upload videos to YouTube channels you connect and to read their performance figures for Insights. YouTube is a Google service, and Google's use of your information is covered by the Google Privacy Policy: http://www.google.com/policies/privacy. For how we use cookies and similar technology on GigPigs, see our Cookie & Tracking Policy; GigPigs does not show third-party ads. Questions or complaints about how we handle your YouTube data go to the contacts in Contact us & complaints below.

10.3 TikTok

When your organisation connects a TikTok account in Social Studio, we see the account's name, username and picture, post the videos you schedule there with the settings you choose, and read that account's follower, like and video totals and the view, like, comment and share counts of the public videos you posted through GigPigs, to show in Insights. We don't read your other videos, messages or followers' details. To disconnect, use the unlink button next to the account in Social Studio → Channels.

10.4 LinkedIn

When your organisation connects LinkedIn in Social Studio, the person connecting signs in with their LinkedIn account and we see which LinkedIn Company Pages they are an admin or content admin of. Each of those Pages is connected to your organisation. For those Pages we:
- see the Page's name and LinkedIn address, and the connecting person's role on it;
- publish the posts, images and videos you schedule, as the Page;
- read statistics for the posts you published through GigPigs (such as impressions, clicks, likes, comments and shares) and for the Page (such as follower numbers and Page views).

We don't read the connecting person's profile, connections or messages, or the content of comments. To disconnect a Page, use the unlink button next to it in Social Studio → Channels; we stop using it straight away. LinkedIn doesn't offer a way for us to revoke the permission on your behalf, so to withdraw it on LinkedIn's side as well, remove GigPigs from your LinkedIn account settings.

If your organisation hasn't connected a LinkedIn Page, posts to LinkedIn are delivered through Metricool, a social media scheduling service: we send Metricool the post text, media and scheduled time so it can publish to the account linked for your organisation, and Metricool's privacy policy covers its handling of that content.

11. Storage, security and overseas handling

We take reasonable steps to protect personal information from misuse, loss and unauthorised access — including access controls, encryption in transit, and restricted internal access. No system is perfectly secure, so we can't guarantee absolute security.

Some of our providers (including hosting, payments, advertising and communications) store or process data outside Australia (for example in the United States and the EU). By using the Services you acknowledge this cross-border disclosure (APP 8). We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs.

12. How long we keep it

We keep personal information only as long as needed for the purposes above or as required by law (for example, tax and transaction records for the period required under Australian law). When it's no longer needed, we delete or de-identify it. See Data & Account Deletion for how to request deletion.

13. Your choices and rights (Australia)

Under the Privacy Act you can ask to access the personal information we hold about you and to correct it. Email hello@gigpigs.app. We'll respond within a reasonable time and may need to verify your identity. If we refuse access or correction, we'll tell you why. You can also opt out of marketing (section 5) and manage cookies (Cookie & Tracking Policy).

14. Additional rights (EU / UK)

If the GDPR/UK GDPR applies to you, you also have rights to erasure, restriction, portability, and objection, and the right to withdraw consent at any time. To exercise these, contact hello@gigpigs.app. You may also complain to your local data protection authority.

15. Children

The Services are not directed at children under 16, and we don't knowingly collect their personal information without a parent/guardian's involvement. If you believe a child has given us personal information, contact us and we'll remove it.

16. Data breaches

If a data breach is likely to result in serious harm, we'll act in accordance with the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the OAIC where required.

17. Changes to this policy

We may update this policy from time to time. We'll post the updated version with a new effective date and, for material changes, take reasonable steps to notify you.

18. Contact us & complaints

Questions, requests or complaints: hello@gigpigs.app.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.