Privacy Policy

1. Information we collect

We collect the minimum information needed to operate the Service.

From musicians (account holders):

• Account identifiers: email address; name (provided by you or supplied by Google when you sign in with Google).
• Profile information: artist name, website URL, and any other fields you choose to add to your profile.
• Content you create: songs, setlists, session metadata (name, venue), and any text you submit.
• Tip handles: if you choose to accept tips, the Venmo username and/or Cash App cashtag you enter in your profile. These are stored as plain text so we can show them to listeners as tap-through links. We do not connect to Venmo or Cash App on your behalf and do not see the underlying account, its balance, or any transactions.
• Subscription information: subscription billing is handled by Stripe, Inc. (“Stripe”). Stripe collects and stores your card and billing details directly. We receive only a non-sensitive customer identifier and subscription status; we never see or store your card number.
• Usage data: session records, request history, and activity tied to your account.

From listeners (fans who scan a QR):

• No account required. Listeners do not create accounts and are not asked to identify themselves.
• Optional submissions: a name or note you choose to include with a request, which is shown to the musician and stored with the request record.
• Self-reported tip information: if you choose to tip the musician through Venmo or Cash App, those payments happen entirely inside Venmo or Cash App and we never see them. You may optionally tell us the amount you sent and which app you used so we can pass that note along to the musician; we store only what you type into our form. We do not collect your Venmo or Cash App username, your card number, your bank information, or any data from those apps.

2. How we use information

• To provide, maintain, and improve the Service.
• To authenticate you, keep you signed in, and protect against unauthorized access.
• To display a musician’s Venmo or Cash App handle to listeners so they can send tips directly through those apps, and to record any self-reported tip amounts alongside the corresponding request.
• To bill the musician’s subscription through Stripe.
• To send transactional communications (security alerts, billing notices, and essential service notices).
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms.
• To comply with legal obligations, including tax, accounting, and regulatory requirements.

We do not sell your personal information to third parties. We do not use your information for advertising or profiling.

3. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to preserve the state of your session while you use the app. We do not use advertising cookies, cross-site tracking, or third-party analytics tools.

4. How we share information

We share information only with the third-party processors who power the Service, and only to the extent needed for each processor to perform its function on our behalf.

• Supabase — authentication and account management. Stores your email and authentication tokens.
• Stripe — subscription billing for musicians. Handles card and billing data directly; see stripe.com/privacy. Stripe is not used for tips.
• Amazon Web Services (AWS) — infrastructure hosting in the United States. Stores application data (account, songs, sessions, ledger).
• Google — if you sign in with Google, Google provides your email and basic profile information. See policies.google.com/privacy.
• ImprovMX — forwards email sent to our support address; see improvmx.com/privacy.

We may also disclose information if required by law, subpoena, or other valid legal process, or to protect the rights, safety, or property of us, our users, or the public.

5. Data retention

• Account data (email, profile, songs, setlists) is retained while your account is active.
• Live session records (listener requests and any self-reported tip notes) automatically expire 24 hours after the session begins. The session itself is preserved as a historical record after it ends.
• Subscription billing records (invoices and billing history held by Stripe, plus our own record of subscription status) are retained for as long as required for accounting, tax, and fraud-prevention purposes under applicable law.
• Deleted accounts — when you delete your account, we remove your profile and content within 30 days, except for financial records we are required to retain.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information, and to object to certain processing. These include, without limitation, rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar laws.

To exercise any of these rights, email support@scantorequestasong.com. We will respond within the timeframe required by applicable law (typically 30–45 days).

7. Security

We use industry-standard safeguards to protect your information, including HTTPS for all traffic, scoped authentication tokens, and tenant-isolated storage. Subscription billing is handled by Stripe, which stores card data on its own PCI-compliant systems; we do not receive or store card numbers. No online service can be 100% secure; you are responsible for keeping your sign-in credentials confidential.

8. Children

The Service is not directed to children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International transfers

We operate in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service you consent to such transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page with a new “Last updated” date. Your continued use of the Service after an update constitutes acceptance of the revised policy.

11. Contact

Questions or concerns? Email support@scantorequestasong.com.