Privacy Policy

1. Introduction

StageBook ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the StageBook mobile application and related services (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Data We Collect

2.1 Account Information

When you create an account, we collect your email address, display name, and profile photo (if provided). If you sign in using a third-party provider such as Google or Apple, we receive your name, email address, and profile image from that provider.

2.2 Band and Music Content

We store the content you create and upload, including:

• Band names, descriptions, and band profile images
• Songs (lyrics, chords, arrangements, metadata)
• Setlists and setlist configurations
• Imported materials (images, PDFs, text) submitted for AI processing
• Invitation codes generated for band collaboration

2.3 Usage Data

We automatically collect certain technical information, including:

• Device type, operating system, and app version
• Feature usage patterns
• Crash reports and error logs
• AI import usage counts (for quota tracking)

2.4 Information We Do Not Collect

We do not collect your precise location, contacts, call logs, microphone recordings, or any data from other apps on your device.

3. How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process song imports using AI (chord detection, lyric extraction, structure analysis)
• Sync your data across devices and with band members
• Manage subscription plans and enforce usage limits
• Send essential service notifications (account security, billing, band invitations)
• Diagnose technical issues and improve the Service
• Respond to support requests

We do not use your data for advertising, sell your data to third parties, or use your song content to train AI models.

4. Third-Party Services

We use the following third-party services to operate StageBook. Each processes data in accordance with their own privacy policies:

4.1 Supabase

We use Supabase as our backend infrastructure for authentication, database hosting, file storage, and serverless functions. Your account data, song content, and uploaded files are stored on Supabase-managed infrastructure in secure, SOC 2 compliant data centers.

4.2 Google and Apple Authentication

If you choose to sign in with Google or Apple, we use OAuth to authenticate your identity. We receive your name, email address, and profile photo. We do not access any other data from your Google or Apple account.

4.3 Google Gemini AI

When you use the AI import feature, your uploaded content (text, images, PDFs) is sent to Google Gemini for processing. This data is used solely to generate chord charts and is handled under Google's API Terms of Service. We do not opt in to any data sharing or model training programs for this content.

4.4 App Store Providers

Apple App Store and Google Play Store handle subscription billing and payment processing. We do not store your payment card details. Payment data is managed entirely by Apple and Google respectively.

4.5 Firebase

We use Firebase Cloud Messaging for push notifications and Firebase Crashlytics for crash reporting. These services process device identifiers and crash diagnostics under Google's privacy terms.

4.6 Resend

We use Resend to send transactional emails such as band invitations, account security notifications, and password resets. Resend processes only the email address and message content needed to deliver these messages.

5. AI Data Processing

When you import a song using the AI feature, the following occurs:

• Your uploaded content (photo, PDF, or text) is temporarily sent to our edge function server
• The content is forwarded to Google Gemini AI for chord and lyric extraction
• The AI-generated ChordPro result is returned to your device and stored in your band's workspace
• The original uploaded file is stored in a secure, access-controlled storage bucket for your reference
• We do not retain copies of your uploaded content on third-party AI servers beyond the processing request

6. Data Storage and Security

Your data is stored on Supabase-managed infrastructure with the following security measures:

• All data is encrypted in transit using TLS 1.2 or higher
• Database data is encrypted at rest
• Row-Level Security (RLS) policies ensure that you can only access data belonging to bands you are a member of
• File storage uses access-controlled buckets with authenticated-only access for private content
• API access requires valid authentication tokens

While we implement industry-standard security measures, no system is 100% secure. We encourage you to use a strong, unique password and keep your authentication credentials private.

7. Data Sharing

We share your data only in the following circumstances:

• Band members: Songs, setlists, and band information are shared with members of your band workspace. Your profile name and photo are visible to bandmates.
• Service providers: We share data with the third-party services listed in Section 4 solely for the purpose of operating the Service.
• Legal requirements: We may disclose data if required by law, court order, or governmental request.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any such change.

We never sell your personal data to third parties.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal data through the app settings.
• Deletion: Delete your account and all associated data through the app's Settings screen, or by contacting us.
• Export: Request an export of your song data. Contact us to initiate a data export.
• Restriction: Request that we limit how we process your data in certain circumstances.

To exercise any of these rights, contact us at support@getstagebook.com. We will respond within 30 days.

9. Children's Privacy

StageBook is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@getstagebook.com and we will promptly delete the data.

Users between 13 and 18 may use the Service with the consent of a parent or legal guardian.

10. Data Retention

We retain your data as follows:

• Active accounts: Data is retained for as long as your account is active and you use the Service.
• Deleted accounts: When you delete your account, we remove your personal data and content within 30 days. Some anonymized data may be retained for analytics purposes.
• Backups: Database backups that may contain your data are automatically purged within 90 days.
• Legal obligations: We may retain certain data longer if required by law.

11. Cookies and Tracking

The StageBook mobile app does not use cookies or advertising trackers. We do not use analytics SDKs that track users across apps or websites. Our website may use only essential cookies for functionality.

12. International Data Transfers

Your data may be processed and stored in locations outside your country of residence. By using the Service, you consent to the transfer of your data to other jurisdictions, where data protection laws may differ from those in your country. We ensure that appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email at least 30 days before the changes take effect. The "Last updated" date at the top of this page indicates when this policy was most recently revised.

14. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: support@getstagebook.com