Privacy Policy

Effective July 21, 2026

1. Who we are

FireballKaraoke.com is operated by OIS Technologies, a Maryland company. This policy explains what we collect, how we use it, and the choices you have. Questions go to [email protected].

2. What we collect

What you give us. Your email address, your display name, your singer or host profile, and anything you choose to add to a public host page: a photo or logo, a bio, links, venues, and show dates.

What a connected rig sends up. Your karaoke catalogue as ids, titles, artists, and albums. Your singer roster: names, whether you have verified them, your own notes, and per song the key, how many times, and when last. While a show is running, a live picture of it: the rotation, singer first names, what is playing, rough waits, and the venue name. A check-in once a minute carrying the rig name, platform, and plugin version.

What happens at a show. Song requests, approvals, and singing history. A singer’s phone stores a small token in its own browser so the request page knows which requests are theirs; we store that token to match them across a night and to block a device that is being abused.

What we do not collect. No file paths, ever: the catalogue we hold has no field for them. No music or video files. No location. No advertising or analytics trackers.

Payments are processed by Square. We never see or store full card numbers.

3. What stays on your rig

Your song files, your video, and every file path stay on your machine. Per-rig cloud backups are the one artifact that contains paths and singer details: they are encrypted on your rig before upload with a key your rig holds, only your rig can fetch them back, and the dashboard shows nothing but a label, a size, and a date. We hold a file we cannot read, and there is no way for anyone, including us, to browse its contents from a website.

4. How we use information

To run the Service: request pages and rotations, roster and history sync, billing, support, security, and improving how it works. We use your email to send you things the Service produces, such as receipts, billing notices, show reports you have asked for, and the notifications you have turned on.

If you join a waitlist for a build that is not out yet, we use that address for one thing: to tell you when it ships.

5. How information is shared

We do not sell your personal information and we do not share it for advertising. We share it only with the providers that run the Service for us (payment processing, cloud hosting and storage, and email delivery), and when the law requires it.

A singer’s performance history is visible only to that singer and the host it happened with. Rosters and history never cross between hosts. A host page and its upcoming dates are public, because that is what they are for. A live request page is reachable by its address while a show is open and asks search engines not to index it.

6. Notifications and email choices

Singers choose what reaches their inbox: each host you follow has its own switches for live notices and reminders, and there are account-wide switches on your profile page. Notifications still appear inside your account when email is off. Show reports sent to a venue carry an unsubscribe link that offers both leaving that series and stopping everything from us.

7. Support access

To investigate a problem you have reported, an administrator may need to view the Service as your account. Every such session is recorded, is visible on screen while it is happening, and is limited to what support requires.

8. Data retention

We keep your information while your account is active or as needed to run the Service, then delete or anonymise it within a reasonable period, subject to legal and accounting requirements. Cloud backups keep the most recent thirty snapshots per rig; older ones are removed automatically.

9. Your choices and your rights

You can view and update your profile at any time. From your profile page you can export everything we hold about your singer account as a file, generated on the spot rather than stored somewhere, and you can delete the account, which removes your history, saved keys, favourites, follows, and notifications, and frees your email address.

Deleting your account does not rewrite a host’s own records of shows that happened. Your account is unlinked from them, and the host keeps their own list exactly as they would for a walk-in who never had an account.

Depending on where you live you may have further rights over your information. Write to us and we will help you exercise them.

10. Security

We use encrypted connections, hashed passwords, scoped access tokens for rigs, and access controls on everything else. No system is perfectly secure, but we take reasonable steps and we design so that the most sensitive material, your file paths and your library, never reaches us at all.

11. Children

The Service is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, write to us and we will remove it.

12. Changes and contact

We may update this policy as the Service evolves; material changes will be communicated through the Service, and the effective date above tells you which version you are reading. Questions? Email [email protected].