Privacy Policy
Last updated: October 08, 2026 • Applicable to the BandLink (Setlist Band Manager) mobile app and website.
1 Introduction & Data Controller
BandLink (formerly referenced as Setlist Band Manager) is an ecosystem developed for musicians, live bands, and performers, combining repertoire organization, smart chords with autoscroll, live show schedules, and a musical community network.
This Privacy Policy explains clearly and transparently how we collect, use, store, and protect your information, adhering to strict international privacy standards, including the General Data Protection Regulation (GDPR), the Brazilian LGPD (Law 13,709/2018), and the Google Play Developer & API Services User Data Policies.
2 Information We Collect
We collect only the information strictly necessary to provide the platform's features:
Account & Profile Data
Username, email address, and encrypted password credentials. Optionally, date of birth (for age range calculation in the musicians network), instruments played, city/state, and social media handles (Instagram, YouTube, etc.).
Google Sign-In Data
When using Google Authentication, we only receive your public profile identifier, verified email address, full name, and avatar picture provided by Google OAuth. We never access passwords, contacts, or drive files.
Musical Content & Setlists
Song titles, artists, custom chords, lyrics, tags, setlist sequences, and rehearsal/show notes. Stored locally on your device by default, and synchronized to the cloud when you choose to connect.
Community & Classifieds
Audition postings, open gig announcements, candidate applications, and public band agenda schedules you explicitly publish to the musicians network.
3 How We Use Your Data
- Authentication & Account Recovery: Enable secure login, account activation, and password resets via time-limited verification codes.
- Syncing Across Devices: Synchronize your repertoire, setlists, and band data between the mobile application and PC Web Editor.
- Musicians Network: Display public musician profiles, connect players with open band vacancies, and match candidates in your area.
- Service Security: Detect fraudulent activities, protect against brute-force attacks, and maintain platform stability.
4 Data Storage & Security Standards
We implement comprehensive technical and organizational safeguards to protect your personal information against unauthorized access, loss, or misuse:
- Encrypted Communications: 100% of network traffic between the app, web editor, and servers is protected with modern Transport Layer Security (HTTPS/TLS).
- Password Protection: Passwords are never stored in plain text. They are hashed using industry-standard adaptive cryptographic hashing algorithms.
- Enterprise Cloud Infrastructure: Cloud databases and API services are hosted in enterprise data centers complying with rigorous international security certifications (ISO/IEC 27001, SOC 2).
- Offline-First Privacy: Your primary repertoire and custom chords remain on your device's local secure storage and function offline without transmitting unnecessary telemetry.
5 Google API Services User Data Compliance
BandLink's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
- We request only basic profile and email scopes (
openid,email,profile) to authenticate your identity. - We do not sell, rent, or transfer Google user data to third parties for advertising or profiling.
- We do not use Google user data to train generalized artificial intelligence or machine learning models.
6 Third-Party Sharing
We do not sell your personal information. Information is only shared with certified infrastructure providers strictly necessary to deliver essential services (such as transactional email delivery for password resets and secure hosting), or when required by competent judicial authorities in compliance with applicable law.
7 Your Rights & Account Deletion (GDPR / LGPD)
You have full control over your personal data under global privacy regulations:
- Access & Rectification: View and update your profile, instruments, and music repertoire directly in the app.
- Complete Account Deletion: You may permanently delete your account and all associated cloud data directly within the app or by emailing allisonrps@gmail.com.
- Revocation of Consent: Disconnect Google Sign-In or turn off network visibility for your bands at any time.
8 Children's Privacy
BandLink is not directed to children under 13 years of age. We do not knowingly collect personal data from minors without parental consent. If we become aware that a minor under 13 has registered without authorization, we take immediate steps to delete the account and associated records.
9 Contact & Data Protection Officer (DPO)
For privacy inquiries, questions regarding your data, or deletion requests, please contact the developer and data controller:
BandLink • Data Protection & Support
Lead Developer: Allison Rodrigues
Official Email: allisonrps@gmail.com
Official Website: https://www.bandlink.pro