1. Scope & Commitment
At BandsAgent (operating at bandsagent.com), we take privacy, transparency, and data sovereignty seriously. This Privacy Policy details how we collect, process, store, and safeguard personal information obtained through our music discovery platform, booking marketplace, and internal social feed.
2. Information We Collect
We collect information strictly necessary to provide B2B agency matching and B2C music curation services:
- Identity & Account Details: Name, professional email address, avatar, role (FAN, ARTIST, MANAGER, ADMIN, AGENT), and verification credentials.
- B2B Agent Verification Data: Agency website URL, company name, corporate domain credentials, and professional LinkedIn verification links submitted to the manual admin queue.
- B2C Artist & Band Metadata: Band name, biography, genres, high-resolution artwork, and cross-referenced public IDs (Spotify URIs, MusicBrainz Artist IDs, Apple Music IDs, Discogs IDs).
- Billing & Payment Information: Payment processing is handled exclusively through Stripe. BandsAgent stores only customer reference tokens (
stripe_customer_id), subscription status, and transaction receipts; no raw payment card numbers or CVVs ever touch our servers. - Technical Telemetry: Aggregated Core Web Vitals (LCP, FID, CLS), error logs captured via our observability engine, and anonymized checkout funnel drop-off statistics.
3. How We Use Collected Data
Collected information is utilized exclusively for:
- Authenticating users via magic link email verification to prevent spam on the social feed.
- Validating band identity against MusicBrainz and Spotify databases to assign the red "Verified" badge.
- Facilitating secure, platform-mediated gig contracts between verified booking agents and artists.
- Transmitting automated weekly tour date alerts and merchandise dispatches from
alerts@bandsagent.com. - Complying with legal, tax, and anti-fraud regulations for commercial transactions.
4. Third-Party Integrations & Service Providers
BandsAgent coordinates with a limited number of vetted infrastructure partners:
- Stripe, Inc.: End-to-end payment processing, subscription management, and webhook reconciliation.
- MusicBrainz & Spotify Web APIs: Public metadata retrieval and automated identity cross-referencing.
- Transactional Email Services: Automated magic links and weekly digest delivery.
We do not sell, rent, or monetize personal user information or client booking contracts to third-party data brokers or advertising networks.
5. Your Rights & Data Sovereignty (GDPR & CCPA)
Depending on your jurisdiction, you possess the right to:
- Request a machine-readable export of all stored data, collection items, and booking contracts.
- Request the permanent rectification or erasure of your account, posts, and profile metadata.
- Opt out of marketing dispatches and automated tour alert digests at any time.
To exercise any data rights, submit a verified request to privacy@bandsagent.com.
6. Security & Encryption Standards
All communication with BandsAgent is encrypted in transit using TLS 1.3. Stored database records are maintained behind network firewalls with role-based access controls and immediate observability alerting for suspicious authentication attempts.