Privacy Policy
SetToGig is a scheduling and coordination tool for working bands, currently in a small private pilot. This policy explains what information SetToGig collects, why, and who it's shared with. It's written to be accurate for the pilot as it actually works today — not a template, and not a promise of features that don't exist yet.
What we collect
- Account information: your email address. If you sign up with email/password rather than Google Sign-In, your password is handled directly by our authentication provider, Supabase Auth — SetToGig never sees or has access to your plaintext password, only Supabase's secure authentication result.
- Profile information: your display name, and a profile photo if you choose to add one.
- Instrument/role information: what you play (your "Main" and "Backup" instruments), visible to bands you're a member of.
- Band and event information: the bands you belong to, gigs and rehearsals for those bands, your RSVP responses, and your lineup assignments (what you're playing at a specific event).
- Availability: dates you mark yourself unavailable ("blackout periods"). Any private note you attach to a blackout is visible only to you — your band admin sees only Available/Unavailable, never the note itself.
- Push notification tokens: a device identifier used to deliver notifications (new gigs, schedule changes, assignment changes), if you allow notifications.
- Feedback you submit: if you use the in-app feedback form, we receive the message you write, along with the app version and platform (Android/iOS/web).
What we don't collect
- No advertising or tracking cookies.
- No sale of your data to third parties, ever.
- No public directory of musicians — your information is visible only within the bands you're actually a member of.
Who we share it with
SetToGig is built on a small number of service providers, each used only for what it does:
- Supabase — hosts our database, authentication, and file storage (profile photos). All app data lives here.
- Resend — sends transactional email only: account confirmation, password reset, and band invites. No marketing email.
- Google Sign-In — an optional way to sign in; if you use it, Google shares your name and email with us the same as a normal sign-up.
- Sentry — used only to catch app crashes and errors so we can fix them. Session Replay is explicitly disabled — Sentry never records your screen. Diagnostic events sent to Sentry may contain technical information such as app version, operating system, device type, timestamps, stack traces, and other diagnostics. SetToGig does not intentionally attach names, emails, band notes, feedback text, or other user-entered free text to these events.
- Expo — delivers push notifications to your device via Expo's push notification service.
These providers process information to deliver their respective services to us, subject to their own terms and privacy obligations. We do not authorize any of them to use your information for advertising on our behalf.
Where information is processed
Our service providers may process and store information in Canada, the United States, or other countries where they operate.
Band admin visibility
A band admin can see: members' names, profile photos, instruments, RSVPs, lineup assignments, and Available/Unavailable status for events in their band. A band admin cannot see: your private blackout notes, your login credentials, or any band's data you're not a member of.
Data retention and deletion
During this pilot, there is no self-service "delete my account" option yet. If you'd like your account and data removed, email us (below) and we'll take care of it directly. Some information may remain for a limited time after deletion — for example in backups, or where reasonably necessary for security, fraud prevention, legal obligations, or the integrity of shared band/event records (like another member's own gig history) — before it's fully removed.
Changes to this policy
As SetToGig moves from pilot to a public release, this policy will be revisited and updated to match. We'll note the date at the top when that happens.
Contact
Questions about this policy or your data: privacy@settogig.com