Privacy Policy
Version 1 · Effective 2026-08-10
GigFloSys ("we," "our," or "us") operates the GigFloSys mobile and web application (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service. By creating an account or using the Service, you agree to the practices described in this policy.
1. Information We Collect
We collect information you provide directly when creating an account and using the Service:
- Account Information: Name, email, password, user type, and role.
- Profile Information: Artist name, bio, genres, hometown, social links, website, press kit URL, and performance requirements.
- Business Data: Bookings, venues, contracts, payments, tour budgets, expenses, gear, band members, setlists, marketing tasks, and messages.
- Usage Data: App preferences, device information, and interaction analytics.
2. How We Use Your Information
- Provide and maintain the Service, including booking, tour planning, and financial management.
- Process subscription payments through Stripe.
- Generate AI-powered recommendations, route plans, and marketing content.
- Display public community posts and artist profiles (only when you opt in).
- Send notifications about your bookings, payments, and account activity.
3. Data Sharing & Third-Party Services
We do not sell your personal data. We use Stripe (payments), OpenStreetMap (maps), AI/LLM providers (recommendations), and cloud storage (file uploads). Your business data is private to your account. Community posts are public. Artist profiles are visible only when you choose to make them public.
4. Data Visibility & Privacy Controls
- Private Data: Your bookings, venues, contracts, payments, and related records are visible only to you and platform administrators.
- Community Posts: Public to all users and visitors.
- Artist Profile: You control whether your profile is public and choose which fields are visible. You can change these settings anytime.
5. Data Security
All data is encrypted in transit (TLS) and at rest. Access is restricted using Row-Level Security so each user can only read, modify, and delete their own records. Authentication is managed through secure token-based sessions.
6. Data Retention
Your data is retained while your account is active. You may request deletion of your account and data at any time; data is permanently removed within 30 days.
7. Your Rights
You may access, export, correct, or delete your personal data, control profile visibility, and withdraw consent for public visibility at any time.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes in the app. Continued use after changes constitutes acceptance.
10. Contact
For questions about this Privacy Policy or your data, contact GigSys support through official support channels.
