Effective November 8, 2026

Privacy Policy: Small Venue Music LLC

1. Information We Collect

To facilitate bookings between Performers and Venues, Small Venue Music LLC ("the Company") collects information that identifies you and describes your professional offerings or physical space.

Authentication & Legal Compliance: We use social sign-in via Apple and Google to collect your name and verified email address. If you provide an alternate email address, we store it and track its verification status. For legal accountability, we also record the timestamp and the version of the Terms & Conditions you agreed to at registration, together with the version of the Privacy Policy that was in effect and provided to you at that time. The Terms & Conditions are accepted; the Privacy Policy is provided to you as notice (see "Changes to This Privacy Policy" in Section 8). During registration, we transiently process your date of birth solely to confirm you are at least 18 years of age; we do not store this information. Email-change security notice. You can change your email address from the verification screen before that address has been verified, and, once it is verified, from Account Settings after signing in again with your provider. In either case a fresh verification link is sent to the new address and your account returns to pending verification until it is verified, normally by your use of that link, or by our staff on your behalf. When you change a verified address from Account Settings, we also send a security notice to your previous address once the change is applied, alerting you that the change was made. A change made from the verification screen, before your address has been verified, sends only the new verification link; nothing is sent to your previous address. That use of your previous address is a security measure to protect your account; it is not marketing and is not put to any other non-transactional use. Sign-in recovery notice. If our staff carry out a sign-in recovery on your account (moving it to a new Apple or Google sign-in when you have lost access to the one you registered with; see Account Administration Records in Section 5), we then send a security notice to both your previous sign-in address and your new one (once, if the two are the same), telling you that your sign-in method was changed, when it was changed, the new provider, and the new sign-in email address (the notice to your previous address shows only the first character and the domain of the new one). The notice is sent after the change is made; if it cannot be delivered, the change is not undone. As with the email-change notice, that use of your previous address is a security measure to protect your account; it is not marketing and is not put to any other non-transactional use.
Performer Profile Information: We collect your Act Name, Performer Type, primary contact name, phone number, profile image, and description. We store any social media or streaming URLs you provide (e.g., Spotify, Instagram, YouTube). We also collect your Home Zip Code, which we use to derive and store a city/state label (e.g., "Based in Richmond, VA"), a geographic centroid (latitude/longitude), and a timestamp of when the zip was last updated. The derived city/state label is displayed publicly on your Performer profile; the raw zip code and centroid coordinates are private and used only server-side for proximity and ranking calculations. We collect your self-declared Travel Range (Local, Regional, or Touring), stored as an enumerated value, which is used in the performer ranking and proximity system and is visible on your profile. Both Home Zip Code and Travel Range can be corrected after registration by request, as described in Section 4. The Platform supports only United States zip codes within the fifty (50) states and the District of Columbia; APO/FPO/DPO addresses and zip codes associated with US territories outside this geographic scope are not accepted at registration.
Venue Profile Information: We collect your Venue Name, physical address, primary contact name, phone number, profile image, and description. We require your maximum audience capacity to facilitate accurate marketplace reporting. We also derive and store a geographic centroid (latitude/longitude) from the ZIP code in your registered address at the time of venue registration; correcting the ZIP code in your registered address also updates this centroid. The venue geographic centroid is treated as public business-location information and, unlike the Performer centroid, is not subject to private-data access restrictions.
Profile Image Uploads and Storage: When you add or replace your profile image, your browser sends the image file to our servers, and our servers — not your browser — write it to our image storage. Before anything is stored, our server confirms that you are signed in, determines from your own session which Performer or Venue record the image belongs to rather than accepting that from your browser, inspects the file's own contents to confirm it is a JPEG, PNG, or WebP image rather than trusting the file type your browser reports, and refuses any file larger than 4 MiB. Only that privileged server-side process writes to our image storage; no browser — signed in or not — can write to that storage directly. Each accepted image is stored under a newly generated random file name, created fresh for that upload rather than overwriting the previous file. Stored images are served from a public web address, and anyone who has that address can open the image — signed in or not, and whether or not they hold an account — so that your profile image can be displayed on your profile and in marketplace listings. Because every upload creates a new stored file instead of overwriting the previous one, replacing your image writes the new file and then deletes the old one, and removing your image deletes the stored file; where either deletion does not succeed, the earlier file remains in storage. A weekly automated reconciliation reads the files held in our image storage against the image references recorded on Performer and Venue records, and permanently deletes stored files that no such record refers to and that are more than twenty-four (24) hours old. Each pass is carried out on a best-effort basis and takes the oldest files first: where a file is not reclaimed in a given pass — because its deletion did not succeed, or because more files were awaiting reclamation than a single pass covers — it is reclaimed in a later one. Until a file is reclaimed, a file left behind by an interrupted upload or an unsuccessful deletion stays in storage. Deletion of the image stored for your account is also part of the account-deletion handling described in Section 5.
Marketplace & Booking Activity: We record interest requests, pricing "asks," formal booking offers, multi-date offer bundles, and "Tips Only" confirmation requests. (For a definition of "Tips Only," see the applicable Terms & Conditions.) We maintain a history of confirmed, completed, and cancelled shows, retained for the periods described in Section 5. A booking's move from confirmed to completed is made automatically and by us rather than by either party: a periodic background process operated by the Platform is the sole writer of that status, and it applies the change once the booking's effective end has passed — the booking's date combined with its end time, carried into the next calendar day where the show crosses midnight, resolved in the Venue's own timezone rather than the Performer's or our servers'. Completion does not wait on any confirmation from either party: neither is asked to confirm that a show took place in order for the booking to complete, no action by either party sets the status, and it is never derived at the moment a screen is read. Only a confirmed booking is eligible; a cancelled booking is never marked completed. Like the automatic dismissal described below, this is an automated status change made without notification to either party, and the completed status is what our Audience Draw calculations count as a show that went ahead. When a booking is cancelled, we record the account the cancellation is attributed to — the Venue account or the Performer account — together with the reason given and the time of the cancellation. The party cancelling names the account the cancellation is attributed to, and may attribute it to the other party. Where it is attributed to the other party, we also record the account that submitted it, together with an attribution status. A cancellation attributed to the other party seven (7) or fewer days before the show's date, counted in the Venue's own timezone, is recorded as pending: the party it is attributed to may dispute it within seventy-two (72) hours of the cancellation, and we record the time of that dispute. A pending attribution that is not disputed within that period is recorded as accepted by a periodic background process operated by the Platform, without notification to either party. A cancellation attributed to the other party more than seven (7) days before the show's date is recorded as accepted when it is made. While an attribution is pending or disputed, the cancellation is withheld from both parties' Show Reliability counts. Staff rulings and exemptions. Our staff rule on disputed attributions, and may also revisit an accepted attribution of a cancellation made seven (7) or fewer days before the show once the period to dispute it has closed. A ruling keeps the attribution, moves it to the account that submitted the cancellation, or treats the cancellation as mutual, and we record the outcome, the staff member who made it, when it was made, and a note the staff member writes explaining it. A ruling is final: the attribution is not ruled on again. Our staff may also exempt a cancellation that counts toward a party's Show Reliability from that count, and may reverse an exemption. We record the exemption, the staff member who granted it, when, and a note the staff member writes explaining it; a reversal clears those details from the booking. Exemptions and their reversals are made without notification to either party. Each of these actions, and each staff ruling on whether a show took place (described under Trust, Reliability & Audience Draw below), is also kept in the Account Administration Records described in Section 5. Cancel Inquiries. Either party may instead raise a Cancel Inquiry, asking the other party to agree to cancel the booking. We record which account raised it and when, the message it carries, the other party's response message, its outcome — pending, agreed, declined, withdrawn or expired — and when it was resolved. An inquiry expires twenty-four (24) hours after it is raised or when the show starts, whichever is earlier. When a Venue raises a Cancel Inquiry, it is asked whether the date is still happening, and its yes-or-no answer is stored on the booking. When a Venue cancels a booking or agrees to a Performer's Cancel Inquiry, it is asked the same question; that answer decides whether the Venue's booking slot for the date is deleted, with the effects of slot deletion described below, and is not itself stored. An agreed inquiry cancels the booking by mutual agreement: the inquiry's message is recorded as the cancellation reason and the response as the agreement message, the cancellation is recorded against the account that raised the inquiry, and it carries no attribution status and is not counted in either party's Show Reliability counts. If a Performer's pending interest request is not acted on by the Venue and the slot's date passes (or the slot is otherwise filled), our systems automatically mark the request as dismissed. This is an automated status change made without notification to either party, and the dismissed request is retained in our database — no longer displayed as pending — for record-keeping purposes, unless and until the Performer who submitted it deletes their account, in which case the request is permanently deleted, as described in Section 5. Additionally, when a Venue deletes a booking slot, the historical records that reference that slot — interest requests, "Tips Only" confirmation requests, booking offers, and booking records — are not deleted; each record's reference to the deleted slot is instead detached (cleared), so this booking and interest history persists without a link to the originating slot. Retention of these detached records is described in Section 5. If any of these records is still pending when the slot is deleted, its status is also updated automatically as part of the deletion: pending booking offers and pending "Tips Only" confirmation requests are marked as withdrawn, and pending interest requests are marked as dismissed; the affected Performer is notified of the change in the Platform and by email. Deleting an account closes out the same categories — pending offers, bundles, "Tips Only" confirmation requests, and interest requests — and differs from slot deletion in what notice is sent. Both the handling and the notices are described in Section 5, under Account Deletion and Pending Requests and Offers Withdrawn on Account Deletion. Where this Policy refers to a party's upcoming confirmed bookings, a confirmed booking is upcoming while its show has not yet started — that is, while the show's date and start time, resolved in the Venue's own timezone rather than the Performer's or our servers', are still ahead of the current moment. A show that is already under way, and a show that has finished, are not upcoming: a show that began earlier the same day is not upcoming even though its date is today, and tonight's show remains upcoming until the moment it starts. This is a single definition, applied the same way when a Venue changes its address and when an account is deleted. This definition is narrower than the "effective end" test described above, which governs only the move from confirmed to completed.
Trust, Reliability & Audience Draw: We collect "Thumbs Up/Down" ratings and feedback comments. We collect venue-reported turnout data and snapshots of venue capacity to calculate public Audience Draw metrics. The capacity snapshot is read from the Venue's record at the moment a turnout report is submitted and is stored on that report; the tier a turnout report is filed under reads that stored snapshot rather than the Venue's current capacity, so a Venue's later change to its recorded capacity does not re-tier reports already submitted. A Venue viewing a Performer's profile is separately matched to a tier by its own current capacity, as described in Section 3. Submitted ratings, comments, and turnout reports are held in a pending (unpublished) state when first collected: we store a publication status and publication timestamp with each rating, which control when it becomes visible on public profiles and is included in public metrics. A rating remains pending — excluded from public aggregates and from the rated party's view — until both parties to the booking have submitted their ratings or the 7-day rating window expires. Each rating we hold carries the moment its booking's seven-day rating window opened and the moment that window closes. The window opens when the booking's in-app rating request described in Section 2 is sent, and we store the time that request was sent on the booking record. Whether the show took place. Each party is asked whether the show took place, and we store each party's yes-or-no answer on the booking together with the moment it was given; submitting a rating records that party's answer as yes, and a party who answers no cannot then rate the booking. Where both parties answer no, or one answers no and the other gives no answer before the rating window closes, the booking is reclassified as not having taken place, and we record the moment of reclassification on it. Where the parties' answers conflict, we open a dispute record for the booking holding the moment the conflicting answer arrived and, once our staff resolve the dispute, its outcome — the show took place, or it did not — the staff member who resolved it, the note recorded with the resolution, and the time it was resolved. We also track cancellation timestamps, together with the identifier of the account the cancellation is attributed to (Venue or Performer), for use in Show Reliability counts.
Safety & Moderation Data: We collect and store lists of blocked performers created by Venues to restrict specific users from interacting with their booking slots. Setting a block also closes out what is already pending between the two accounts: that Venue’s pending booking offers, multi-date offer bundles and “Tips Only” confirmation requests to that Performer are marked withdrawn, and a notification record is created for the Performer for each one withdrawn — each booking offer, each multi-date offer bundle and each “Tips Only” confirmation request — saying that the Venue withdrew it. None of those notices says a block caused it — the Platform does not disclose the block to the Performer, as described in the Terms — and the records of the withdrawals themselves are retained under the rules in Section 5 rather than deleted. Account suspension. If our staff suspend your account, we record when it was suspended and the reason our staff give for suspending it. That reason is not shown to you on the Platform. The time and the reason are both cleared when your account is reinstated or deleted. The suspension, and the note recorded with it, are also kept in the Account Administration Records described in Section 5. Reports of comments. If you report a comment, we record the reason you choose, the description you write where that reason is “other” (up to 250 characters), when you made the report, and your account as the one that made it, and the comment goes to our staff for review. Hidden comments. When a comment is hidden, whether automatically as described below or by our staff, the whole rating it belongs to is hidden with it, its thumbs rating included, and is no longer shown to others on the Platform. A hidden rating still counts toward the rated party’s Approval Rating and, for a Performer, Audience Draw. Reports of personal information in a comment. If you report a comment as disclosing someone's personal information while it is showing, the Platform hides it at once while our staff review it. If our staff, in deciding on your report, show the comment again, we record on your report that it was made in bad faith and add one to a count of such reports that we keep on your account. That record and that count are not shown to you on the Platform, and nothing on the Platform acts on them automatically; our staff see the count when they review reports, and see it, and the reports still on record as made in bad faith, on your account's page in our administration tools. The count is not cleared when your account is deleted: it stays with your anonymized account, as described under Records Retained After Account Deletion in Section 5.
Technical Integration Data: If you connect a Google Calendar — Performers and Venues can each connect one of their own — we store encrypted OAuth tokens together with a connection flag, the expiry of the current token, and the identifier and display name of the calendar you selected, held against your performer or venue record, so that bookings can be synced to it. Your confirmed bookings are written to that calendar as events. Each event is titled with the other party's name, is placed at the venue's address, and carries the agreed pricing, any special terms, a link to the booking, and the other party's primary contact name, telephone number and email address — the Venue's details on a Performer's calendar, and the Performer's on a Venue's. We record the identifier of each event we create on the booking, separately for each calendar, so that a later change to the booking can find the event it made. A party who has connected no calendar of their own still has their own contact details written into the other party's Google account in this way, and once an event sits on that calendar it is held under Google's terms and that account holder's own settings rather than under this Policy. What happens to those events and tokens when an account is deleted is described in Section 5.
Limited Use of Google Calendar Data: We use the access you grant to your Google Calendar only to write each of your confirmed bookings to the calendar you chose as an event, and to update, move or remove that event when the booking changes or is cancelled or when you choose a different calendar. We read your list of calendars only so you can choose one, to confirm that the connection works, and to check that the calendar you chose is still available. We do not read the other events on your calendar. We do not sell this data or use it for advertising, and no one other than you reads it, except with your agreement, where that is needed for security, or to comply with the law. Small Venue Music's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Protect Google Calendar Data: We treat the access you grant to your Google Calendar as sensitive and protect it as follows:
- Encrypted at rest. Your Google access and refresh tokens are encrypted with AES-256-GCM before they are stored, using a key kept in our server-side configuration and never sent to your browser. Each encrypted token is bound to your own performer or venue record, so it cannot be decrypted if it is copied onto any other record.
- Server-side only. Your tokens are decrypted and used only by our servers, for the uses described above. No other user can read them, and they are never included in a copy of your data that we provide under Section 4.
- Encrypted in transit. Data moving between your browser, our servers, our database and Google is sent over encrypted (HTTPS/TLS) connections.
- Restricted staff access. Access to the systems that hold this data is limited to staff who need it to run the service, and their sign-ins to the dashboards of those systems, and to our administration tools, require two-step sign-in.
- Easy to withdraw. You can disconnect your calendar from Account Settings. Disconnecting deletes your stored tokens and asks Google to revoke our access. Deleting your account also asks Google to revoke our access.
In-App Usage & Analytics Data: We log certain product usage events tied to your account. When we show you a prompt (a "nudge") to complete your profile, we record an analytics event noting which profile fields were missing at that time (for example, an image, description, or video). For Performers, we also record a search event each time you run a search in Find Gigs, capturing the filters that were active (including any city you searched) and the number of results returned. We also record an event when the Platform shows you an empty state or an onboarding prompt — for example, when a Venue has no open booking slots, or when a Performer's search returns no gigs in a searched city; where the empty state relates to a search, the city you searched may be included in that event. Search-event records are deleted once they are more than 90 days old, by an automated process that runs daily, as described under Usage Analytics Retention in Section 5. A search that returns no gigs is recorded as a search event like any other, and the city searched is deleted with it.
Pre-Launch Waitlist Data: Prior to platform launch, individuals who join our waitlist via the Small Venue Music website provide the following: role (Venue or Performer); name (the venue name for Venue signups, the performer name for Performer signups); and email address. We also collect limited technical and attribution metadata at the time of submission: the page on which the form was submitted, the referring URL, any UTM parameters (utm_source, utm_medium, utm_campaign) present in the visit URL, and an indicator of whether the submission passed the automated bot and spam checks described under "Security & Abuse Prevention Data" below, which we may update if a submission is later flagged. Waitlist data is used to send launch notifications and waitlist communications, and to measure the aggregate effectiveness of our pre-launch outreach. Waitlist signups may request deletion of their data at any time by contacting us using the information in Section 7, whether or not they have also created a Platform account. A waitlist record is a pre-account record kept in our marketing systems: if you later create a Platform account with the same email address, your waitlist record is not linked to that account or transferred into it, and it remains subject to the deletion right described above and to the retention rule in Section 5. When you make a waitlist submission on our website, we also store it in your browser's local storage so you can see and manage it when you return; that browser storage, and how to clear it, is described under "Website Analytics Data" below.
"Vote for Your City" Data: Separately from the waitlist, we operate two "Vote for Your City" capture flows. Submissions made through either flow are stored separately from our waitlist and are not waitlist signups. On our website, a "Vote for Your City" form invites you to name a city we have not yet launched in; through that form we collect an email address and a city and state that you type yourself, together with the same submission-page, referring-URL, UTM and bot-check metadata described above. A submission naming a city we have already launched in is not accepted, and no record of it is kept in our systems; we instead offer you a link to our waitlist, and so that you do not have to retype it your email address is carried forward in your own browser — held in the page while you remain on it, or, where the waitlist form is on another page, saved in your browser's session storage when you submit — whether or not you then follow the link — until it is used or your browser session ends (see "Website Analytics Data" below). Separately, applicants who attempt to register for the Platform but whose ZIP-derived geographic centroid falls outside all currently active market areas are not permitted to complete registration; these individuals are offered an in-app "Vote for Your City" capture flow, through which we collect an email address and a city label derived from the submitted ZIP code — rather than a city you type. We use the information collected through either flow to gauge geographic demand for future market expansion, to let you know if and when we open in the city you named, and to send you announcements about the Platform's launch and market expansion, including announcements about markets other than the one you named. As with waitlist data, individuals who submit a "Vote for Your City" entry through either flow may request deletion of this data at any time by contacting us using the information in Section 7, whether or not they have also created a Platform account. When you make a "Vote for Your City" submission on our website, we also store it in your browser's local storage so you can see and manage it when you return; that browser storage, and how to clear it, is described under "Website Analytics Data" below.
Security & Abuse Prevention Data: We protect our website forms against automated abuse, and part of that protection operates whenever a form is displayed to you rather than only when you submit one. Our forms use an automated bot check provided on our behalf by Cloudflare (Turnstile): it loads and runs in your browser whenever one of our forms is displayed to you — including on visits where you never submit anything — and transmits information about your interaction with the page to Cloudflare, which returns a token our servers verify before a submission is accepted. Of that check we retain only whether the submission passed, as described under "Pre-Launch Waitlist Data" above. Our forms also include a hidden field that ordinary visitors do not see and are not asked to fill in. When you submit a form on our website, we transiently process your IP address to detect and prevent spam and abuse, including to limit how many submissions we accept from one network address over a period of time. Our website analytics also transiently process your IP address together with your browser (user-agent) to derive a rotating daily visitor hash, as described under "Website Analytics Data" below. In both cases your raw IP address is used transiently and is not retained in connection with our marketing website: it is not stored in our waitlist database, associated with your waitlist record, or stored as part of our website analytics data. Inside the Platform, when you register, request a verification email, change your email address, or vote for your city during registration, we likewise use your IP address transiently to limit how many attempts we accept from one network address over a period of time; it is held by our infrastructure provider only for that purpose, in counters that expire within about two hours, and is not stored with your account for that purpose (registering also records it, as described under "Legal and Security Records" below). Where you take certain actions inside the Platform, we do record your IP address and browser (user-agent) — see "Legal and Security Records" below.
Legal and Security Records: When you accept our Terms & Conditions and Community Guidelines, or grant or withdraw a Marketing Permission, we record your IP address and browser (user-agent) string together with a timestamp. These records exist to evidence that a particular person took a particular action at a particular time — they support legal non-repudiation of your acceptances and consents. They are not used for advertising, profiling, or tracking you across sites. Retention of these records is described in Section 5. When an account is deleted, the IP address and user-agent are removed from the entries in your marketing-permission history, and your user identifier on each entry is replaced with a placeholder, as described there; the records of your acceptances of the Terms & Conditions and Community Guidelines are kept, because they exist to evidence that the acceptance took place. On both kinds of record, the IP address and user-agent are removed after the record is six years old, by the scheduled process described in Section 5.
Website Analytics Data: We use a self-hosted, first-party, privacy-preserving analytics tool to measure aggregate usage of our website — including page views, sessions, referrers and traffic sources, general traffic patterns, and funnel-entry activity. We also collect Core Web Vitals (page-performance and loading metrics) from real visitor sessions to monitor and improve site performance. To count visitors without identifying them, the tool transiently processes your IP address together with your browser (user-agent) to compute a visitor hash that is rotated daily; the raw IP address and user-agent are not stored, and because the hash changes every day it cannot be used to recognize you across days or to track you over time. This tool does not set cookies and does not track you across other websites, and it does not identify you individually. Our marketing website does not use cookies; however, it does use storage in your own browser — both local storage (localStorage), which persists until you clear it — except for the submission receipt described below, which we also expire ourselves 180 days after it is saved — and session storage (sessionStorage), which your browser discards when the session ends — including for the following purposes: (1) our analytics tool stores clickstream data — a record of the pages you view and the order in which you navigate them during your visit — for the analytics purposes described above; (2) if you join our waitlist or submit a "Vote for Your City" entry, we store that submission on your device, including the email address and the role or cities you provided, so you can see and manage it when you return, and you can remove it at any time using the "start over" control on the confirmation card or by clearing your browser's storage for our site; (3) if you name a city we have already launched in on the "Vote for Your City" form and we offer you our waitlist instead, the email address you typed is carried forward as described under "Vote for Your City" Data above, so that you do not have to retype it; and (4) if you dismiss a prompt shown on smaller screens, we record that you dismissed it so it is not shown to you again during that browser session. Nothing in this browser storage is used to advertise to you or to track you across other websites, and clearing your browser's storage for our site removes all of it. The analytics data we collect is pseudonymous; individual clickstream events are stored at the session level and are analyzed only in aggregate to understand and improve our website.
Form Drafts Kept in Your Browser: When you use the Platform, some of what you type into a form is saved in your own browser's local storage (localStorage) so that it is not lost: your registration form while you fill it in, and, if we ask you to accept updated Terms & Conditions just as you submit an interest request or a "Tips Only" confirmation request, what you had entered in that form. A saved copy can include anything you typed into the form, such as your name and contact details on a registration form, or an amount, a percentage, a description or special terms on a request; your date of birth and your profile image are never saved this way. A saved copy stays in your browser and is not sent to us unless you submit the form. It is offered back only to the account that saved it, and only for a limited time: up to seven days for a registration form, and up to twenty-four hours for a request interrupted by updated terms. We remove a saved copy when you successfully submit the form, when you choose to discard it or start over, and when we find it has expired the next time that form is opened; until then it remains in your browser. Signing out or deleting your account does not remove it, so if you share a device you may wish to clear your browser's storage for our site, which removes all of it. Nothing in this browser storage is used to advertise to you or to track you across other websites.
Age Requirement: The platform is intended for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a user under 18, we will delete that information promptly. If you believe an individual under 18 has created an account on the Platform, please notify us at privacy@smallvenuemusic.com so we can investigate and, if confirmed, remove the account and associated data.

2. How We Use Your Information

We use the data we collect to facilitate live event bookings and maintain the professional integrity of the marketplace.

Marketplace Connectivity: Profile information is used to allow Performers to discover slots and Venues to discover acts.
Booking Workflow: Data is used to process the formal offer system, including multi-date bundles and individual offers.
Trust Metric Generation: Show history and rating data are used to display Approval Ratings and Audience Draw scores, and are the basis for Show Reliability (18-month rolling window). Only published ratings feed these public displays: a submitted rating (including its comment and any turnout report) is held in a pending state and is published — becoming visible on profiles and counting toward Approval Rating and Audience Draw — when both parties to the booking have submitted their ratings or the 7-day rating window expires, whichever occurs first. Publication occurs silently, without a notification to either party. Where the parties disagree about whether the show took place, publication of any rating on that booking is withheld until the dispute described in Section 1 is resolved. A disputed booking holds at most one rating, because a party who answers that the show did not take place cannot rate it. Resolved as having taken place, any held rating is published once the rating window has also closed; resolved as not having taken place, the booking is reclassified. When a booking is reclassified as not having taken place, every rating, comment and turnout report on it is deleted rather than published, and the booking counts toward neither party's Show Reliability, either as a completed show or as a cancellation. The booking's Booking Detail screen shows each party that it was reclassified, when, and on which basis: both parties reported that it did not take place, one party reported it and the other did not answer before the rating window closed, or a dispute was resolved that way. Neither party is shown the other's answer. Show Reliability is derived from cancellation events rather than submitted ratings, and is not subject to this pending/published mechanic. The same published Approval Rating, Show Reliability and Audience Draw shown on a Performer's profile are also shown to a Venue in its Interest Requests inbox, against the Performer who sent the request: on each row when the inbox is grouped by slot, and once on that Performer's header when it is grouped by performer. Published comments are shown to the other side of the marketplace, not only to the person rated: a Venue viewing a Performer's profile, and a Performer viewing a Venue's profile or one of that Venue's booking slots, are each shown a preview of that profile's three most recently published, non-hidden comments, and — where more than three exist — a link to a paginated screen carrying that profile's full published comment history. Comments are anonymous and unattributed on every one of those surfaces. We also display your own published rating data back to you: your own view of your public profile shows your public metrics and three anonymized comments about you and — where more than three exist — a link to a paginated screen carrying the full published comment history about you, in the same anonymized form in which other users see them; pending ratings are not shown there or anywhere else, and rater identities are never revealed, including to you. Show Reliability calculations use the account-level cancellation attribution described in Section 1: where a cancellation counts toward Show Reliability, it is counted against the Venue or Performer account it is attributed to. Not every cancellation counts — a cancellation agreed through a Cancel Inquiry or treated as mutual by a staff ruling, one made more than seven (7) days before the show, and one our staff have exempted, counts toward neither party's Show Reliability, and a cancellation is withheld from both parties' counts while its attribution is pending or disputed, as described in Section 1. Where a staff ruling, exemption or reversal changes what counts, the affected Show Reliability is updated when it is made. When our staff rule on a dispute about whether a show took place, or on a cancellation's attribution, both parties to the booking are told the outcome: each receives an in-app notice, and we queue an email of the outcome to each that has an email address on file, as described under Email Delivery Records in Section 5. The notice of an attribution ruling names the party the cancellation now counts toward, or says that it counts toward neither. A party whose account has been deleted is sent neither.
Transactional Communications: Contact info is used to send automated in-app and email notifications and account security notices, including reminders to complete email verification. For certain emails we keep a record of the send to audit delivery and prevent duplicate sends; which emails, and what the record holds, is described in Section 5. Email-change security notice. When a change to your verified email address made from Account Settings is applied, we send a security notice to your previous address alerting you that the change was made, alongside the fresh verification link that goes to the new address. A change made from the verification screen before your address has been verified sends only the new verification link. Section 1 describes both change paths. Rating notifications. A rating request is sent to both parties twelve (12) hours after a booking’s effective end, as an in-app notification. In the last twenty-four (24) hours before a rating window closes, an in-app closing warning is sent to whichever party has not yet submitted a rating; no warning is sent on a booking where either party has reported that the show did not take place, no warning goes to a party who has already submitted, and each party receives at most one warning for a given booking however often the sending job runs. A party who reports that the show did not take place has their own outstanding rating request and closing warning withdrawn at that moment, since they can no longer rate the booking. Where that report is the first that the show did not take place and the other party has not yet rated, the other party's outstanding rating request, and any closing warning already sent to them, are replaced by an in-app prompt to confirm or contest the report, which names the reporting party and the show's date.
Website Analytics: We use first-party, cookieless website analytics to understand aggregate site traffic, referral and traffic sources, funnel-entry activity, and site performance (Core Web Vitals), in order to measure and improve our marketing website.
Product Analytics & Marketplace Health: We use profile-completeness nudge events to understand which profile fields users most often leave incomplete and to improve our prompts. We use Find Gigs search events — the active filters (including any city searched) and the result count — to analyze coverage gaps and overall marketplace health, for example to identify cities or dates where performer demand exceeds the available slots. Search-event records used for this analysis are deleted once they are more than 90 days old, as described in Section 1 and Section 5.
Marketplace Intelligence: We use profile information, marketplace activity (interest requests, offers, confirmed bookings, cancellations, ratings), trust metrics, location data, and other Platform data to operate, train, evaluate, and continually improve automated systems and machine-learning models that power core marketplace features — including search ranking, discovery, performer–venue matching and recommendations, fraud and abuse detection, content moderation, anomaly detection, personalization, customer support, audience-draw and reliability scoring, and product research and development. Location data used for these purposes includes zip-derived geographic centroid coordinates (latitude/longitude) collected at Performer registration and used server-side for proximity calculations and performer ranking; the raw centroid is never displayed publicly. As the Platform evolves, we may also use such data to develop and operate generative features (for example, suggested descriptions, intelligent search, or matching assistants) that run within the Platform. Use of Platform data for AI/ML purposes is further described in Section 6.

As a two-sided marketplace, we share your data between Performers and Venues to enable successful bookings.

Public Profiles: Public profile information — including act or venue names, profile images, photographs, descriptions, logos, social media URLs, trust metrics, the primary contact name, phone number, and email address associated with the profile, and for Performers, a "Based in [City, State]" location label derived from the Performer's registered Home Zip Code — is visible to other registered users of the Platform for marketplace purposes such as discovery and evaluation. A Performer's contact details are visible to any registered Venue that views the Performer's profile, whether or not that Venue has a booking with the Performer. A Venue's contact details reach a Performer in the following ways. A Booking Offer or multi-date offer bundle shows the Performer it is sent to the Venue's full address, phone number and email address; a "Tips Only" confirmation request shows the Venue's city and state and no contact details. While a booking is confirmed or completed, its Booking Detail screen shows each party the other's primary contact name, phone number and email address, and shows the Performer the Venue's full address; once the booking is cancelled or reclassified as not having taken place, the screen no longer shows them. Where a Venue changes its address, each Performer with an upcoming confirmed booking at that Venue is sent the new address, as described under Venue Address Changes below. Where the Performer has connected a Google Calendar, the Venue's primary contact name, phone number and email address are also written into each confirmed booking's calendar event, as described in Section 1 (Technical Integration Data). The raw Home Zip Code and geographic centroid coordinates underlying this label are not displayed publicly. Blocking limits this. Where a Venue has blocked a Performer, that Performer's profile and trust metrics are no longer visible to the blocking Venue at all: the Performer is excluded from that Venue's directory results, and the Performer's profile information, Approval Rating, Show Reliability, and Audience Draw are not returned to that Venue. This limitation is applied where the data is retrieved rather than in what is displayed, so the withheld information is not sent to the blocking Venue and then hidden — it does not reach that Venue's device. If the blocking Venue navigates to where the Performer's profile would be, it is shown a standalone blocked-state page; the only information about the Performer that page carries is the act name and the date the block was set. The limitation runs to the blocking Venue alone; the Performer's profile remains visible to every other registered user as described above. Within the Platform, viewing a profile does not by itself grant the viewer the right to download, save, or reuse profile content outside the Platform; such rights, where they exist, are described below and are bounded by the applicable Terms & Conditions.
Audience Draw turnout data is narrowed by who is asking. Not every viewer of a Performer's profile receives the same turnout data. Audience Draw is organized into venue-capacity tiers, and which tiers are returned to a viewer depends on that viewer's own account: a member of the Performer's own account receives every tier of that Performer's data; a Venue receives the tier matching its own current recorded capacity, and only while that Venue's account is active and its capacity is recorded as a positive number; and a visitor who is not signed in, or a signed-in user whose account is not a Venue, receives no tier data at all. This narrowing is applied when the data is retrieved rather than only in what is displayed, so a viewer who is not entitled to a tier is not sent that tier's data. Another user's Audience Draw is retrieved on a Performer's profile and on each row of a Venue's Interest Requests inbox, and the narrowing applies in the same way, at the same point, on each, so a Venue receives on an inbox row only the tier matching its own current recorded capacity for the Performer who sent that request. Your own public metrics are also shown back to you on your own profile view, as described in Section 2.
Contact Details Between the Parties: A Performer's primary contact name, email address and phone number are available to any registered Venue, as described under Public Profiles above. That access is not created by a booking and does not wait for one: it does not depend on the Venue having made an offer to, or confirmed a booking with, that Performer. In the other direction, a Venue's contact details reach a Performer through a priced offer the Venue sends them, a booking's Booking Detail screen while the booking is confirmed or completed, a notice of the Venue's change of address, or a connected Google Calendar, as described under Public Profiles above.
Venue Address Changes: A Venue can change its address from its profile. If it does so while it has upcoming confirmed bookings — upcoming meaning, as defined in Section 1, that the show has not yet started, resolved in the Venue's own timezone — it chooses, through a checkbox that is checked by default, whether the Platform sends its new address to each Performer booked for those upcoming shows. If it leaves the box checked, each such Performer receives one in-app notification naming the Venue, the dates of their affected shows and the new address, and we also send each of them an email carrying the same information. The email is sent on a best-effort basis: a send that fails may be retried, but its delivery is not guaranteed, and the in-app notification does not depend on it. If you are a Venue, your new address is transmitted to your booked Performers unless you uncheck this option before saving the change. If you are a Performer, you may receive a Venue's updated address in this way so that you can arrive at the correct location for your confirmed shows. A change that only moves the map position derived from the ZIP code, without changing the address itself, sends no notice.
Venue Use of Performer Content for Show Promotion: When a Venue confirms a booking with a Performer, we extend a sublicense to the Venue to use that Performer's profile image, photographs, biographical description, logo, name, stage name, likeness, and social media URLs (collectively, "Performer Content") solely to promote the confirmed engagement. The scope, duration, and limitations of this sublicense — including a thirty (30) day post-show window for active promotion, an indefinite passive historical archive permitting the Performer's name and a single profile photograph subject to a Performer's right to request removal, prohibitions on AI/ML training and on use to promote unrelated events, and a seven (7) day takedown obligation upon request — are set forth in the Venue Terms & Conditions.
Pre-Account and Out-of-Area Data: Pre-launch waitlist data and "Vote for Your City" submissions (as described in Section 1), whether collected through our website form or through the in-app capture flow offered to out-of-area applicants, are not shared with other registered users of the Platform, with Performers or Venues, or with third parties for any commercial purpose. This data is processed only by the Company and its service providers acting strictly on the Company's behalf, and is used only for the purposes described in Section 1.
Service Providers: We may share your information with third-party service providers who perform services on our behalf, including cloud hosting, database infrastructure, and email delivery. These providers are contractually obligated to use your data only as necessary to perform their services and to maintain appropriate security measures.
Third-Party AI and Machine-Learning Providers: Some Platform features rely on third-party AI service providers (such as large language model APIs, computer vision APIs, or speech-to-text services). When we use these services, your User Content or activity data may be transmitted to the provider solely to deliver the requested feature. We contractually require these providers not to use your data to train their general-purpose models and to retain it only as needed to deliver the service. We do not sell, license, or otherwise make Platform data available to third parties for the purpose of training their AI or machine-learning models.
Legal Requirements: We may disclose your information if required by law or to protect the integrity of the marketplace, in accordance with the laws of the Commonwealth of Virginia.
International Data Transfers: The Platform and our service providers process personal data in the United States. If you access the Platform from outside the United States, your data will be transferred to, stored, and processed in the United States.

4. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

Right to Access: You may request confirmation of whether we are processing your personal data and obtain a copy of the specific information we hold about you.
Right to Correct: You may request that we correct inaccuracies in your personal data, including, for Performers, your Home Zip Code and Travel Range. Correcting a Home Zip Code also updates the derived city/state label and centroid coordinates.
Right to Delete: You may request the deletion of your personal data, including deletion of your account, by contacting us using the information in Section 7. You can also delete your account yourself, from Account Settings, whether you hold a Venue account or a Performer account. Both routes are described under Account Deletion in Section 5. Whichever route is used, your personal profile information and contact details are removed; for a Performer that includes your Home Zip Code and the timestamp recording when it was last updated, your derived city/state label, and your centroid coordinates; for a Venue that includes your venue's street address, city, state and ZIP code, and the geographic centroid derived from that ZIP code; certain non-identifying profile settings — your Travel Range and your performer type, though not the free-text description of an "other" type — are not removed and remain on the anonymized record. The limits on that removal — records addressed to the other party that carry your name, the acceptance records described in Section 1, a profile-image removal that fails, and a form draft kept in your own browser (Section 1, Form Drafts Kept in Your Browser) — are stated where they arise in Sections 1 and 5.
Right to Request Removal from Third Parties (Performers): In addition to the Platform-side deletion rights described above, if you are a Performer you may request that a Venue cease use of your Performer Content (such as your profile image, photographs, biographical description, logo, name, likeness, or social media URLs) where the Venue obtained that content through a confirmed booking on the Platform. Venues are contractually obligated to comply with such requests as soon as commercially reasonable, and in any event within seven (7) days of receipt, subject to a limited carve-out for materials already physically printed or distributed at the time of the request. To submit a takedown request, contact us using the information in Section 7 or use any in-Platform takedown function we make available.
Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format. The copy we provide covers the information associated with your account across the Platform — your profile and account details; the records of your acceptance of our Terms & Conditions and Community Guidelines and of your Marketing Permissions described in Section 1, each with the IP address and browser (user-agent) string recorded with it; your booking and marketplace activity; the ratings you have submitted; the published ratings and comments others have submitted about you, other than any comment that is hidden, and without the turnout reports made with them (and without identifying who submitted them); your trust metrics; your notifications; whether you have connected a Google Calendar, and the calendar's name; records of any accounts you have blocked; the comment reports filed from your account and the reports made about comments your account wrote, with their outcomes (without naming who made a report or who decided it); the moderation actions our staff have taken on you or on your account as a whole, and when (without naming who took them); and your search activity. We prepare this copy manually and send it by email to the email address you sign in with, whichever way you made the request; there is no automated download.
Right to Opt-Out of Sale or Sharing: The Company does not sell or share your personal information for cross-context behavioral advertising, and we do not engage in targeted advertising that would require an opt-out right under California's CPRA, Virginia's VCDPA, or Colorado's CPA. If this practice ever changes, we will update this policy and provide a clear opt-out mechanism before any such processing begins.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights, including by denying services, charging different prices, or providing a different level of service.
Right to Appeal: If we decline a privacy request, you may appeal our decision by contacting us at the address listed in Section 7. We will respond to your appeal within 60 days.
Automated Decision-Making: We use automated systems and machine-learning models to operate marketplace features such as search ranking, recommendations, fraud and abuse detection, content moderation, and trust scoring. These systems do not produce decisions that have legal or similarly significant effects on you. If an automated process restricts or suspends your access to the Platform, you may request human review by contacting us using the information in Section 7.
Analytics Data and These Rights: The website analytics data described in Section 1 is pseudonymous and is not linked to your account or to any identifier we can resolve to you. Because we cannot identify this data to an individual, it is not subject to the access, correction, deletion, or portability rights described above.
How to Submit a Request: To exercise any of these rights, please contact us using the information in Section 7. We will verify your identity and respond to your request within 45 days. If additional time is needed, we will notify you of the extension and the reason for it.

5. Data Retention and Deletion

Account Deletion: You can delete your account yourself from Account Settings, whether you hold a Venue account or a Performer account. You are shown what the deletion affects — including how many upcoming confirmed bookings you hold, because deleting cancels them — you type the word DELETE to confirm, and you are then asked to sign in again with the same provider you signed in with, Apple or Google, to prove it is you. Only after that second sign-in does anything happen; if you cancel at that step, nothing is changed. You may also request deletion by contacting us instead, at the address in Section 7. Deletion is permanent and cannot be undone. When a deletion runs, an automated routine removes your personal profile information and contact details — replacing the identifying fields on your venue or performer record with a placeholder — and carries out the record-handling steps described in the bullets below. Deletion does not proceed while a short-term transfer protection lock (lasting up to 24 hours) is active — that is, if your account has been designated to receive an incoming account-ownership transfer; you are told the deletion could not be carried out, and nothing is changed. When your deletion cancels a confirmed booking, we notify the other party to that booking in the Platform, with a notice that tells them your account is no longer active and that the show no longer appears as an upcoming booking. That notice carries your name — it is composed from your venue name or act name as it stood before the deletion — and it is created as part of the deletion itself rather than afterwards; if it cannot be written, your deletion still completes and the other party receives no notice in the Platform. Because it is addressed to the other party, it is among the records that, as the In-App Notification Records bullet below explains, can still carry your name after your account is gone. We also email the other party about each booking your deletion cancels, after the deletion has completed and on a best-effort basis: the email names you the same way, gives the show's date and time, and tells them your account is no longer active; it is recorded in the email-delivery record described below; and if it cannot be sent, your deletion is not reversed and the email is not retried; where we hold no usable email address for the other party, they receive the notice in the Platform only. Whether the other party is told about the offers, bundles, "Tips Only" confirmation requests, and interest requests your deletion closes out is stated once, under Pending Requests and Offers Withdrawn on Account Deletion below. Removal of your profile image from storage is carried out as part of the deletion, on a best-effort basis, after the account record itself is closed; if that removal fails, the deletion of your account is not reversed. Because the deletion clears your record's reference to that image, a file left behind in this way is reclaimed by the weekly reconciliation described in Section 1; you may also ask us to remove it under Section 4. Where you had connected a Google Calendar, we ask Google to revoke the stored OAuth tokens, and delete them once the revocation succeeds, after which the Platform retains no further access to it. Events the Platform has already written to your own calendar are not removed: they stay there, carrying the other party's contact details, until you delete them. For each booking your deletion cancels, the event the Platform wrote to the other party's connected calendar is deleted from it, on a best-effort basis. The contact details carried in any event already copied, exported or synced onward by the account holder are outside our reach. Propagation of deletions through backups and content delivery network caches will be performed on a best-effort basis and may take additional time to complete after the account record itself is removed.
Records Retained After Account Deletion: These are the record-handling steps referred to under Account Deletion above, and they are carried out by the deletion routine described there. When your account is deleted, booking records for your completed and cancelled shows are retained in anonymized form: the fields identifying you are removed or replaced with a placeholder, and the anonymization is timestamped. These anonymized records are kept for analytics, fraud prevention, and the other party's show history, for the periods described under Metric Retention and Financial and Contractual Records below, and they include the account-level record of which side (Venue or Performer) each cancellation is attributed to, until that attribution is cleared as described under Metric Retention below. One limit on this is worth stating: free-text entries written by you, the other party or our staff — such as the written reason required when a booking is cancelled, a note our staff record on your account (see Account Administration Records below) or with an exemption or a ruling on the booking or dispute it concerns, or special terms agreed for a show — are retained as written and are not rewritten, except that they are cleared or deleted with the records that hold them, as described under Metric Retention and Financial and Contractual Records below, and that an exemption's note is cleared from the booking when the exemption is reversed (the record of the exemption described under Account Administration Records keeps the note). If such an entry happens to contain personal information because of what someone typed into it, that information stays in the record. Any report you filed about another user's comment survives deletion with the reference identifying you removed: it keeps the reason you chose, the description you wrote, as written, when you made it, the outcome of our staff's review and any record, described in Section 1, that it was made in bad faith, and it is deleted when the rating it concerns is deleted, including with its booking as described under Financial and Contractual Records below. The exception is a report you filed about a comment made about you: it is deleted when your account is deleted, together with the rating the comment belongs to. Records that survive deletion still linked to your anonymized account include: the count of your reports recorded as made in bad faith, described in Section 1, which is kept as it stood when your account was deleted, even where the reports it counts have since been deleted; a Venue's list of blocked Performers, after either party's deletion; the records of your acceptances of the Terms & Conditions and Community Guidelines described in Section 1; the email-delivery records described below, which keep their reference to your account while the identifying details on them are redacted; the records of actions our staff take on your account, described under Account Administration Records below, which keep a coded reference we can match to your anonymized account in place of your user and account identifiers, as does the copy of each such record that we keep outside our database (where such a record concerns a booking, it and its copy also keep that booking's identifier, which is not replaced, even after the booking record itself is deleted); a record that your account was deleted — your user and account identifiers, when it happened, whether you or our staff started it and which staff member, counts of the records the deletion changed, and whether it completed — kept indefinitely, with no contact details; and your marketing-permission history, which keeps its reference to your anonymized account but no longer carries your user identifier, as described under Marketing-Permission Records below.

Offers are retained too, and are treated differently depending on whether they were accepted. An offer you accepted is part of the booking it created and is retained with it, as described above. An offer that expired, was declined, or was withdrawn before acceptance is retained as a record of marketplace activity, but it is not anonymized and no retention period applies to it: the fields identifying you are removed from your profile and account records, so your name and contact details are no longer reachable through the offer — but the offer record itself — its dates, pricing terms, amount, status, and any free text written into it — is kept indefinitely and is not timestamped for deletion. Interest requests are treated differently again. If you are a Performer and your account is deleted, every interest request you sent — whether pending, dismissed, or otherwise closed — is permanently deleted from our systems rather than anonymized, and cannot be recovered. Dismissed interest requests, including those automatically dismissed because a slot's date passed or the slot was filled, are otherwise retained for record-keeping for as long as the sending Performer's account remains active. Interest requests submitted to a Venue's booking slots are not deleted when that Venue deletes its account; they remain subject to the slot-deletion rules described below.

Account Administration Records: When our staff suspend, reinstate, manually verify or delete your account, carry out a sign-in recovery (moving your account to a new sign-in identity when you have lost access to the one you registered with), exempt a cancellation from Show Reliability or reverse that exemption, or rule on a dispute about whether a show took place or on a cancellation's attribution (each described in Section 1), we record the action, when it was taken, the staff member who took it, the change it made, and a note the staff member writes explaining it; for a sign-in recovery, the note also records the kinds of identity proof we relied on. A record of an exemption or its reversal names the account the cancellation is attributed to, unless that account has already been deleted, in which case it names no one; a ruling is recorded once for each party to the booking whose account is still open, naming that party, or, where neither party's account is still open, once, naming no one. A record of an exemption, a reversal or a ruling also carries the booking's identifier. When our staff decide on a comment you wrote that has been reported, by approving it so that it shows, hiding it, or hiding it and referring it for action on your account, or reopen a hidden comment for another review, we record the same kind of entry, naming your account: the action, when it was taken, the staff member, whether the comment was hidden before and after the decision (for a reopen, that the comment was returned for review), and the staff member's note where one is written. Our staff may also record a note on your account without taking any other action — for example, to record a moderation decision. We record the note, when it was written and the staff member who wrote it, naming your account, and it is kept in these records on the same terms. A note of this kind is limited to 2,000 characters and cannot be added once your account has been deleted. We keep these records, including the staff member's note, as the accountability record for our enforcement and account-administration decisions. They are kept indefinitely, including after your account is deleted. Deletion replaces your user and account identifiers on them with a coded reference we can match to your anonymized account. Changed values that can hold personal information, such as the sign-in email address and provider identifier changed by a sign-in recovery, are redacted on deletion; the change of account status recorded for a suspension, reinstatement or deletion is kept, as is the change recorded for an exemption, a reversal or a ruling (whether the cancellation is exempt, the attribution's status and the ruling's outcome), and so are the hidden and review values recorded for a decision on a comment or a reopen. The booking's identifier on a record is not replaced on deletion. The staff member's note is kept as written and is not redacted: if it describes you or your conduct, that description stays in the record. A copy of each record — carrying the coded reference, the booking's identifier where the record has one, the action, the staff member and the time, but not the note or the changed values — is sent on a best-effort basis to a mailbox we keep outside our database, where it is kept indefinitely; its delivery is not guaranteed, and the record itself does not depend on it. When a staff member opens your account's page in our administration tools, we also send, on the same best-effort basis, a one-line record of that access — which staff member, the coded reference for your account, and the time — to the same mailbox, where it is likewise kept indefinitely. Legal reports. Our staff also run reports to answer privacy requests and to meet our legal obligations: the copy of your data described under Right to Data Portability in Section 4; a report of the acceptances of our Terms & Conditions and Community Guidelines and the Marketing Permissions on record for your account; a report of the record of your account's deletion; and, once your account has been deleted, a check of whether any of your personal information remains. When one of these reports is produced, we record which report it was, when it was run and the staff member who ran it, recorded against you or your account. The record holds nothing from the report itself and no note, and it is kept in these records on the same terms. The report itself is saved as an encrypted file outside our database. Our staff delete it once the request or obligation it answers has been met (for the copy of your data, once it has been delivered to you), and in any case within 30 days of making it. Comment moderation decisions. Separately from these records, we keep a record of each staff decision on a reported comment: the comment it concerns, the decision, the staff member, their note where one is written, when it was made, whether it reversed an automatic hiding, and, if it was reopened, when. It does not name your account, but it stays linked to your comment, and through it to your account, until the comment or your account is deleted. It is not sent to the mailbox described above. It is kept indefinitely, including after your account is deleted; if the comment is later deleted, the record is kept without its link to the comment. When a comment is referred for action on your account, our staff see it beside your account's controls, and it is not copied into the note automatically; if a note does describe your comment or your conduct, that description stays in the record, as with the other staff notes described above.
Pending Requests and Offers Withdrawn on Account Deletion: The deletion routine described above closes out whatever is still pending on the account before it ends it. Your upcoming confirmed bookings are cancelled — a show that is already under way when you delete is not; it completes on its own and is retained in anonymized form as described above — pending booking offers and multi-date offer bundles are withdrawn, pending interest requests involving you are dismissed, and pending "Tips Only" confirmation requests involving you are marked as withdrawn. A withdrawn "Tips Only" confirmation request can no longer be accepted. None of these records is deleted by the change of status: each is retained and handled under the rules in this Section — a "Tips Only" confirmation request that was never confirmed is retained as marketplace history rather than as a financial or contractual record, as described below, and interest requests you sent are the one exception, being deleted outright as described above. The other party to each cancelled booking is notified in the Platform, as described under Account Deletion above. Where a Venue deletes its account, the Performer on each booking offer, multi-date offer bundle and "Tips Only" confirmation request the deletion withdraws receives an in-app notice, one per withdrawal, that it was withdrawn by the Venue; the notice does not give the reason. For each withdrawn booking offer, multi-date offer bundle and "Tips Only" confirmation request we also email the Performer, where we hold an email address for them; if an email fails, the deletion is not reversed and the Performer has the in-app notice only. Where a Performer deletes their account, each Venue whose pending offers, bundles or "Tips Only" confirmation requests to that Performer are withdrawn receives one in-app notice for the whole deletion, naming the Performer and stating that their account is no longer active and the pending items were withdrawn; no email is sent for these. No notice is sent to a party whose own account has already been deleted. For a pending interest request that the deletion dismisses, no notice is sent. A pending Cancel Inquiry on a booking the deletion cancels is closed at the same time — recorded as withdrawn where it was still live, or as expired where its own clock had already run out. No notice is sent for this either.
Records Retained After Slot Deletion: Venues may delete booking slots they have created. When a booking slot is deleted, the historical records that reference it — interest requests, "Tips Only" confirmation requests, booking offers, and booking records (including completed and cancelled bookings) — are not deleted. Instead, each record's reference to the deleted slot is detached (cleared), and the record is retained without a link to the originating slot, subject to the retention rules that otherwise apply to that record under this Section (including the metric retention and the six-year financial and contractual records retention described below). Information stored only on the deleted slot record itself is removed together with the slot.
Waitlist Data Retention: Waitlist signup data is retained for as long as we operate our pre-launch and launch marketing program, so that we can send the launch notifications and announcements described in Section 1. You may request deletion of your waitlist record at any time, as described in Section 1, and we will honor that request. As described in Section 1, a waitlist record is a pre-account record: creating a Platform account with the same email address does not link it to that account or transfer it into it, so this retention rule — and not the Account Deletion rules above — continues to govern the waitlist record, and deleting a Platform account does not by itself delete it.
"Vote for Your City" Data Retention: "Vote for Your City" submissions described in Section 1 are stored separately from waitlist data and are retained until the submitter requests deletion or until they are no longer needed for the purposes described in Section 1. As with a waitlist record, a "Vote for Your City" record is a pre-account record: it is not linked to or transferred into a Platform account if the submitter later registers, and it remains stored separately, subject to this retention rule and to the deletion right described in Section 1.
Metric Retention: To maintain marketplace integrity, data regarding confirmed bookings and cancellation timestamps — including the Venue or Performer account each cancellation is attributed to — is retained to support rolling reliability counts. Where the Venue and Performer accounts on a booking are both still open, these records are kept for as long as both accounts remain open, and nothing deletes them before then. Where an account is deleted, the booking's Show Reliability record — the cancellation's type and date, the account that submitted it and the account it is attributed to, the status of that attribution and of any dispute of it, how and by whom that attribution was resolved, and any exemption from it — remains on the anonymized booking record described above and is cleared eighteen (18) months after the deletion, by a scheduled process that runs daily. A record is not cleared while its booking still falls within the rolling Show Reliability window, so it never stops counting early toward the other party's Show Reliability, nor while its attribution is still pending or disputed; it is cleared once that ends, which can be later than eighteen (18) months after the deletion. Each run is carried out on a best-effort basis: where a run fails or does not finish, a later run clears the records it would have cleared. Once a record is cleared, the booking appears in the other party's Booked Shows simply as "Cancelled", with no cancellation type, date or attributed side. The written reason for a cancellation is not part of this record and stays with the booking. The booking record itself is not deleted when its Show Reliability record is cleared: it is retained, and later deleted, as described under Financial and Contractual Records below. Audience Draw and turnout data is handled differently depending on which kind of account is deleted. If you are a Performer, the turnout reports Venues made about your shows are reduced, as part of the deletion itself, to an anonymized aggregate that is no longer associated with your identity: the underlying rating rows carrying them are deleted with the profile they described, and only counts of turnout by venue-capacity tier and show month survive them. That aggregate refers to no booking, so it is not deleted when the bookings are. If you are a Venue, the turnout reports you made about Performers are ratings you submitted, and they are retained as described under Permanence of Ratings below — with the reference identifying you removed but the per-show turnout intact — so they continue to count toward those Performers' Audience Draw until the booking they concern is deleted, as described under Financial and Contractual Records below.
Financial and Contractual Records: Anonymized financial and contractual records — such as the pricing model, offer amounts, and accepted terms associated with your bookings — are retained for six (6) years, as required by Virginia law and the Small Venue Music LLC Operating Agreement, and are then permanently deleted. This applies to bookings anonymized because an account on them was deleted. The six years run from the later of the show's scheduled start and that deletion. Where both accounts on a booking are deleted, this period, and the eighteen (18) months described under Metric Retention above, run from the first deletion. When they have run, the booking is deleted by a scheduled process that runs daily, together with the offer accepted to form it; the ratings and comments submitted about that show, including a rating submitted by a deleted account and retained as described under Permanence of Ratings below; any reports filed about those comments; any dispute about whether the show took place; and the in-app notification records relating to the booking or that offer. Each run is carried out on a best-effort basis: where a run fails or does not finish, a later run deletes the records it would have deleted. The anonymized Audience Draw aggregate described under Metric Retention above is not deleted. A booking that has not been anonymized is not subject to this deletion and is kept for as long as both accounts on it remain open. This class is defined by acceptance. It covers your bookings and the offers you accepted to form them, because acceptance is what creates a binding commitment. It does not include: an offer that expired, was declined, or was withdrawn before acceptance; a "Tips Only" confirmation request that was never confirmed; or an interest request and the pricing "ask" carried in one. None of those formed a contract, so none is a financial or contractual record. Unaccepted offers and unconfirmed requests are retained as marketplace history under the Account Deletion rules above — not anonymized, and with no retention period — rather than under this six-year period; interest requests you sent are deleted outright when your account is deleted, as described under Account Deletion above. Where the booking slot underlying such a record has been deleted, the record is retained in detached form — without a reference to the deleted slot — as described under "Records Retained After Slot Deletion" above.
Marketing-Permission Records: The deletion records in our marketing-permission audit history that your marketing permissions were terminated, and removes the IP address and browser (user-agent) details from your entries in that history, including those termination entries; your user identifier on each entry is replaced with a placeholder, so the entry no longer carries your user identifier. The entries keep their reference to your anonymized account, as described under Records Retained After Account Deletion above.
Acceptance and Consent Records: The records of your acceptances of the Terms & Conditions and Community Guidelines, and your marketing-permission history, are retained indefinitely. The IP address and browser (user-agent) details on each of these records are removed after the record is six years old, by a scheduled process that runs daily; the record of what you accepted or chose, and when, is kept. Because the process runs once a day, and six years are counted back from the day it runs, a record can keep these details for up to two days after it turns six years old (a record made on 29 February turns six on 1 March). Each run is carried out on a best-effort basis and takes the oldest records of each kind first: where a run fails, does not finish, or passes over a record that is in use at the time, a later run removes those details, so they can be kept longer than six years by the time those runs take.
Usage Analytics Retention: Find Gigs search-event records described in Section 1 are deleted once they are more than 90 days old, by an automated process that runs daily. The 90 days are counted from the time of the search, as 90 periods of twenty-four (24) hours back from the time the process runs. Because the process runs once a day, a search-event record can be kept for up to one day after it turns 90 days old. Each run is carried out on a best-effort basis and deletes the oldest records first: where a run fails, does not finish, or passes over a record that is in use at the time, a later run deletes it, so a record can be kept longer than 90 days by the time those runs take. Website analytics data described in Section 1 — including page views, sessions, the session-level clickstream (the sequence of pages viewed, described in Section 1), traffic sources, funnel-entry activity, Core Web Vitals, and the daily-rotated visitor hash — is retained for 14 months and then purged on a defined, automated schedule.
In-App Notification Records: When the Platform notifies you of marketplace activity — a booking offer, an acceptance, an offer that has expired — we create a notification record associated with your account, holding the notice text, its type, whether you have read it, the time it was created, and links to the related performer, venue, booking slot, offer, bundle, or booking. Each record is deleted once it is six months old, whether or not you have read it, by a scheduled process that runs daily; a record created at the end of a month can be kept up to three days longer, because the six months are counted back from the day the process runs. Each run is carried out on a best-effort basis and takes the oldest records first: where a run fails or does not finish, the records it would have deleted are deleted by a later run, so a record can be kept longer than six months by the time those runs take. When your account is deleted, the notification records addressed to it are deleted with it. One limit on that is worth stating: a notification addressed to the other party may repeat your name in the text of the notice itself, and those records are not rewritten, so a counterparty's own notification history can still carry your name after your account is gone. You may request deletion of your notification records under Section 4.
Email Delivery Records: We keep a record of the following transactional and notification emails that we send you, try to send you, or queue to be sent to you. Booking emails: a booking offer received, accepted, declined, expired, or withdrawn by the Venue that made it, and a pending offer withdrawn because its slot was filled; a pending offer withdrawn, or a pending interest request dismissed, because the Venue deleted its slot; a multi-date offer bundle received, claimed, declined, expired, or withdrawn; a "Tips Only" confirmation request received, accepted, declined, or withdrawn by the Venue; and a booking confirmed. Cancellation emails: a booking cancelled by the other party; a cancellation attributed to you, with the deadline to dispute it where one applies; a dispute of a cancellation you attributed to the other party; and a Cancel Inquiry received, agreed to, declined, or, where you raised it, expired unanswered. Staff ruling emails: the outcome of our staff's ruling on a dispute about whether a show took place, and of a ruling on a cancellation's attribution — the attribution kept, moved to the other party, or treated as mutual. A record of each is created, with the status queued, when the ruling is made, for each party whose account is still open and has an email address on file. Other emails: a Venue's change of the address of a show you are booked for; a booking cancelled because the other party's account was deleted; and each Privacy Policy change notice sent under Section 8. Each record holds the template sent, the related event, the recipient email address as captured at send time, the delivery status (queued, sent, or failed, with the reason for a failure), the time of sending, and the identifier our email provider returns for the message. We keep these records to audit delivery and to prevent duplicate sends: a record is claimed before each email goes out, and an email whose record already shows it as sent is not sent again. These records are retained indefinitely. If you delete your account, the recipient address on every such record addressed to you is replaced with a redaction marker as part of the deletion routine described under Account Deletion above — across all of your records, not only the most recent — and the rest of each record is kept so that it completes its retention as an audit record. One limit on that is worth stating: an email already sent to the other party about a booking your deletion cancelled carries your name in its text and cannot be recalled, and the record of that send is addressed to the other party — it holds their address, not yours — so your deletion does not change it. Separately from that record, while your email address is awaiting verification we hold one row for that address alone — the address, a hashed form of the one-time verification link and the time that link expires, the delivery status of the verification message, the identifier used to match delivery reports to it, the time the row was created, and the time at which each reminder to complete verification was sent. A resend, or a change to the address while it is still awaiting verification, replaces the address, the link and its expiry on that same row rather than starting a new one: the record of which reminders we have already sent you, and of when the row was first created, deliberately survives, so that resending does not restart the reminder schedule. The row itself is deleted when verification succeeds and, if verification is never completed, after ninety (90) days. If you delete your account, that row is deleted with it.
Permanence of Ratings: Ratings and comments are generally permanent once published, to maintain marketplace integrity. Before publication, a submitted rating is held in a pending state under the double-blind reveal described in Sections 1 and 2: it is not publicly visible and does not feed public metrics until it publishes. A pending rating, with its comment and any turnout report, is deleted rather than published if its booking is reclassified as not having taken place, as described in Section 2. Once published, ratings and comments cannot be edited or deleted by the submitter; however, the Company reserves the right to remove content that violates our Terms & Conditions or Community Guidelines & Code of Conduct. Where an account is deleted, the ratings and comments that account submitted about others are retained with the reference identifying the submitter removed, so they remain on the other party's history but are no longer linked to you; they are deleted with the booking they rate, as described under Financial and Contractual Records above; ratings and comments others submitted about the deleted account are deleted along with the profile they described.

6. User Content

When you upload content to the Platform — including profile images, photographs, biographical or venue descriptions, logos, and social media URLs (collectively, "User Content") — we process and display that content to operate the marketplace, including showing your profile to other users and including it in marketplace listings, search results, and notifications. The license you grant the Company to use your User Content, the duration of that license, your representations and warranties regarding User Content, and the post-deletion handling of User Content are governed by Section 6 of the Performer Terms & Conditions or Section 7 of the Venue Terms & Conditions, as applicable. Use of your User Content in external marketing of the Platform and other Company Services is separately governed by the Marketing Permissions described below.

How uploaded images are received and stored. Profile images you upload reach our image storage only through the privileged server-side process described under "Profile Image Uploads and Storage" in Section 1: your browser transmits the file to our servers, our servers validate it and write it, and no browser — signed in or not — writes to that storage directly. The stored image itself is served from a public web address, and anyone who has that address can open it — signed in or not, and whether or not they hold an account — so that it can be shown on your profile and in marketplace listings. Each upload is stored under a newly generated random file name rather than overwriting a fixed one, so replacing an image writes a new file and deletes the previous one. The size limit applied at upload, the handling of files left behind when a deletion does not succeed, and the weekly reconciliation that removes them are described in Section 1; deletion of your stored image when your account is deleted is described in Section 5.

Use of Platform Data for AI/ML. As described in Section 2, we may use User Content, profile data, and marketplace activity to develop, train, evaluate, and improve internal AI and machine-learning systems that power Platform features.

Marketing Permissions. Separately from the AI/ML use above, this Policy provides for two optional, opt-in marketing permissions. Both are off by default, are not required to use the Platform, and neither applies unless you have granted it to us.

Promotional Content Permission. If you turn this on, you authorize the Company to use your User Content — for Performers, including your stage name, band name, logo, photographs, and biographical description; for Venues, including your venue name, logo, photographs, and venue description — in the Company's external marketing of the Platform and other Company Services (for example, our website, social media, paid advertising, press materials, sales and pitch materials, case studies, and partner co-marketing). This permission is royalty-free and worldwide while it is on, and does not by itself authorize use of (i) audio or video recordings of you, your performances, or events at your venue, (ii) AI-generated or materially altered images of you or your venue, or (iii) quotes or testimonials attributed to you or your venue, each of which requires a separate written consent.
Marketing Email Permission. If you turn this on, you agree to receive marketing emails from the Company about new features, tips, events, partner offers, and similar non-transactional content. Granting this email permission does not grant permission to send you SMS messages.

Revocation and retention. You may withdraw either permission at any time by contacting us using the information in Section 7. We do not send Platform marketing email: all Platform email is transactional and is sent regardless of your Marketing Email Permission state. Revocation applies prospectively: new uses stop promptly, but materials already printed, distributed, or scheduled for delivery prior to revocation may complete their natural lifecycle. On deletion of your account, both permissions terminate for new uses when the deletion routine described in Section 5 runs — at once when you delete your account from Account Settings, and when we carry out a deletion request you send us — and that routine records the termination in our marketing-permission audit history. We retain a record of your permission choices, including version, timestamp, and method of consent, for audit and compliance purposes.

Relationship to other rules. These permissions are separate from, and do not override, the AI/ML use described elsewhere in this Section 6 or your underlying license to the Company under the applicable Terms & Conditions. We will continue to send transactional and legal communications regardless of the Marketing Email Permission.

7. Contact Information

For questions regarding this policy or to exercise your data rights, please contact us using either of the following:

Email: privacy@smallvenuemusic.com

Postal mail: Small Venue Music LLC 440 Monticello Ave Ste 1802 PMB 445566 Norfolk, Virginia 23510-2670

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will provide notice to each registered user at least fourteen (14) days before the changes take effect, sent to the email address associated with that user's login (and, where practical, also shown as a prominent notice within the Platform). Where a change to this Policy accompanies a change to the Terms & Conditions, we will also tell you that the Terms are changing and the date they take effect. If you are not an active user at the time notice is sent (for example, your account is pending verification or suspended), we will provide the notice when your account next becomes active. Non-material changes (such as clarifications, formatting corrections, or updates to contact details) may take effect upon posting. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision, and the revised Policy governs our handling of your information on and after its stated effective date. We provide Privacy Policy changes to you as notice: we do not ask you to re-accept the Privacy Policy, and we do not rely on your continued use as acceptance of it. The revised Policy simply governs as of its effective date. If you do not agree with the revised Policy, you may stop using the Platform and request account deletion in accordance with Section 5.

9. Governing Law and Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of the Commonwealth of Virginia, without regard to conflict of law principles.

Any dispute arising out of or relating to this Privacy Policy or the Company's data practices — including claims of unauthorized collection, use, or disclosure of personal information — is subject to the dispute resolution provisions set forth in the applicable Terms & Conditions (Venue or Performer), including the mandatory informal resolution step, binding arbitration agreement, class action waiver, and jurisdiction clause contained in Section 9 of those Terms. The data rights appeal process described in Section 4 of this Privacy Policy applies exclusively to requests to exercise specific statutory privacy rights (access, deletion, correction, portability, and opt-out); it does not replace or limit the dispute resolution process in the Terms & Conditions for broader privacy-related claims.