Privacy Policy

1. Who we are

This Privacy Policy explains how AI TECH AV LLC(“SongBash,” “we,” “us”) collects, uses, and shares information when you use the SongBash service at songbash.app(the “Service”). By using the Service you agree to this Policy.

2. Information we collect

A. Information you provide

• Guests: the song you request, an optional nickname, an optional note to the DJ, and — only if you choose to provide it — your email address (used to notify you about your request and, if you opt in, upcoming events). You are never required to create an account or provide an email to send a request.
• Guest accounts (optional): if you create a lightweight account, your email address and basic profile.
• DJs: account details (name, email), the sessions you create (including an optional venue/location), and the information needed to connect your payout account through our payment processor.

B. Payment information

• Payments are processed by Stripe, Inc. Card numbers and financial account details are collected and stored by Stripe, not by SongBash. We receive limited, non-sensitive transaction metadata (e.g., amounts, status, identifiers) needed to operate the Service.

C. Information collected automatically

• A device identifier stored in your browser (a cookie) so the Service can recognize your device and show your own requests without requiring a login.
• Standard technical and usage data (e.g., IP address, browser/user-agent, actions taken in the Service such as scans, requests, and outcomes). We use this to operate, secure, and improve the Service, and to power features and future analytics.

We do not use third-party advertising trackers, and we do not sell your personal information.

3. How we use information

We use information to: (a) provide and operate the Service (route requests to DJs, process tips through the payment processor, show you your activity); (b) send you notifications about your requests and, where you opt in, upcoming events from DJs you’ve interacted with; (c) prevent fraud and abuse and enforce our Terms; (d) analyze and improve the Service; and (e) comply with legal obligations.

Consent for emails. We only email you about your requests/events if you provided an email and opted in. You can withdraw consent at any time (see Section 7).

4. How we share information

• DJs. When you send a request, the DJ for that session sees your song, nickname (if given), note (if given), and tip amount. DJs do not see your card details.
• Service providers (processors). We share information with vendors who operate the Service on our behalf, including: Stripe (payments/payouts), Supabase (database, authentication, hosting of application data), Vercel (application hosting), and Brevo (transactional email). They may process information only to provide services to us.
• Legal & safety. We may disclose information if required by law or to protect the rights, safety, or property of SongBash, our users, or others.
• Business transfers. If SongBash is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

5. Cookies & device recognition

We use a small number of first-party cookies/identifiers that are essential to the Service — for example, to remember your device so we can show your own requests, keep you signed in if you create an account, and maintain security. We do not use advertising cookies.

6. Data retention

We keep information for as long as needed to provide the Service and for legitimate business, legal, or compliance purposes, after which we delete or anonymize it. Event/usage records may be retained in aggregated or de-identified form to improve the Service. Payment records are retained by Stripe under its own policies.

By way of example and subject to legal requirements: song-request and session records are retained in identifiable form for up to 24 months and thereafter deleted or de-identified; a Guest email address is retained until you unsubscribe or request deletion and then for up to 12 months in backups; optional Guest account data is deleted within 30 days of your deletion request, subject to routine backup-purge cycles; and DJ account records are retained for the life of the account plus the period required for tax, accounting, and legal purposes.

7. Your choices and rights

• Email opt-out. You can stop event/notification emails at any time by not opting in, by using an unsubscribe option where provided, or by contacting us.
• Guest account deletion.If you created a guest account, you can delete it and its associated profile from within the Service; your prior requests are retained as the DJ’s records but are unlinked from your account.
• Access/correction/deletion. Subject to applicable law, you may request access to, correction of, or deletion of your personal information by contacting support@songbash.app. Depending on your region (e.g., EU/UK/California), you may have additional rights, including to object to or restrict certain processing and to lodge a complaint with a regulator.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to: (a) know the categories and specific pieces of personal information we collect, use, and disclose; (b) request deletion of your personal information; (c) request correction of inaccurate personal information; and (d) not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use personal information for cross-context behavioral advertising. To exercise a right, contact support@songbash.app; we will verify your request and respond as required by law. You may use an authorized agent to submit a request on your behalf.

9. Children’s privacy

The Service is intended only for users who are 18 years of age or older, and its payment features require users to be 18+. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will delete it.

10. Security

We use reasonable technical and organizational measures to protect information (including reliance on established providers such as Stripe, Supabase, and Vercel). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International users

The Service is operated from California, USA, is intended for users located in the United States, and is not directed to residents of the European Economic Area or the United Kingdom. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law. Information may be processed in the United States and other countries where our providers operate, which may have different data-protection laws than your own.

12. Changes to this Policy

We may update this Policy from time to time. We will change the “Last updated” date and, for material changes, provide additional notice where appropriate. Your continued use after changes take effect constitutes acceptance.

13. Contact

Privacy questions or requests: support@songbash.app · AI TECH AV LLC.