Privacy Policy

Last updated: [DATE] · Data controller: [LEGAL ENTITY NAME], [ADDRESS], [COUNTRY].

⚠ This is a starting template, not legal advice. Since cue-play serves the EU and handles personal data, have a lawyer/DPO confirm it meets GDPR and your local law before relying on it.

1. Who we are

cue-play ("we") is the controller of personal data processed through the Platform. Contact: support@cue-play.com.

2. Data we collect

Account: name, email, password (stored hashed), and your role (DJ or Hiree).
Profile: alias, bio, location, genres, photos, links, rate, and set/track links you add.
Activity: gigs posted, applications, bookings, messages you send, follows, ratings, and saved DJs.
Payments: processed by Stripe. We receive booking amounts and status; we do not see or store your card details — Stripe does.
Technical: basic logs and a session cookie to keep you signed in.

3. How we use it

To run the Platform: create your account, show profiles, enable bookings and messaging, process payments and payouts, keep the service secure, and contact you about your account or bookings.

4. Legal bases (GDPR)

Contract: to provide the service you signed up for.
Legitimate interests: security, fraud prevention, and improving the Platform.
Consent: where required (e.g. optional communications).
Legal obligation: e.g. tax/accounting records.

5. Who we share it with (processors)

We don't sell your data. We share it only with service providers that help us run cue-play:

Supabase — database, authentication, and storage.
Vercel — website hosting and cookieless, aggregated traffic analytics (no individual tracking profiles).
Stripe — payments and payouts.
Sentry — error monitoring/diagnostics so we can fix crashes (may capture limited technical context when an error occurs).

Profile information you add is shown publicly on the Platform (that's the point of a directory) — don't put anything there you don't want visible.

6. International transfers

Some providers may process data outside your country (e.g. the US). Where they do, appropriate safeguards (such as Standard Contractual Clauses) apply.

7. Retention

We keep your data while your account is active and as needed to comply with legal obligations or resolve disputes. You can ask us to delete your account.

8. Your rights

Under the GDPR you can request: access, correction, deletion, restriction, portability, and to object to certain processing. To exercise these, email support@cue-play.com. You may also complain to your local data protection authority ([e.g. the Slovak Office for Personal Data Protection]).

9. Cookies

We use a small number of strictly-necessary cookies/local storage to keep you signed in and remember your theme preference. We don't use advertising cookies. [Add a cookie banner here if you later add analytics or non-essential cookies.]

10. Security

We use reputable providers and access controls (row-level security on the database) to protect your data. No system is perfectly secure, but we take reasonable measures.

11. Children

cue-play is not intended for anyone under 18.

12. Changes

We'll post updates here with a new "last updated" date.