Privacy Notice

Kamil Myszka, who operates BooktheStage, is the data controller for the personal data described in this notice. That means we decide what data is collected and why. You can reach us about anything in this notice at support@gigpilot.app.

Account data — your name, artist or band name, email address, and login credentials (passwords are stored only as salted hashes; if you sign in with Google we receive your name, email, and profile picture instead). Used to create and secure your account. Legal basis: performance of our contract with you.

Profile and press-kit data — your phone number, city and state, biography, genres, performance details, pricing, photos, videos, and social links. Used to build your profile, your public booking page, and to personalise venue matching. Some of this is published on your public page at your choice. Legal basis: contract performance.

Business records you create — venues, leads, notes, outreach drafts and sent messages, bookings, availability, contracts, invoices, setlists, and reviews, including contact details for venue staff that you add or that we find from publicly available business sources. Used to provide the CRM, outreach, and booking features. Legal basis: contract performance.

Connected email account data — if you connect Gmail, we store an encrypted connection key and your connected account’s email address, and we access the messages and threads needed to send your outreach and detect replies. We do not read unrelated mail and we do not use it for advertising. Legal basis: your consent, which you can withdraw by disconnecting the account.

Usage, device and log data — IP address, browser and device information, pages viewed, actions taken, error reports, and email open events recorded through tracking pixels in outreach you choose to send. Used for security, fraud prevention, debugging, and improving the product. Legal basis: our legitimate interests in operating and securing the Service.

Support communications — the content of emails and messages you send us. Used to answer you and keep a record. Legal basis: legitimate interests and contract performance.

Subscription records — plan, status, renewal dates, and the identifiers our payment provider returns. Card numbers and full billing details are collected and held by Stripe, our payment provider, not by us. Legal basis: contract performance and our legal obligations.

Marketing — where you opt in, we may email you about product updates. Legal basis: consent; you can unsubscribe at any time.

When you ask BooktheStage to score venues, draft outreach, generate a call script, coach a reply, plan follow-ups, build a setlist, or draft a contract, the relevant text from your account is sent to our AI provider to generate that output. We do not use your content to train public models. Do not paste sensitive personal data into AI prompts if you do not want it processed this way.

• Service providers and subprocessors that host and run BooktheStage — cloud hosting, database and file storage, authentication, error monitoring, and our AI provider.
• Stripe, our payment provider, for checkout, subscription management, payments, tax calculation where applicable, receipts, and refund processing.
• Google, where you connect Gmail (to send your messages and read reply status) or use Google sign-in, and Google Maps Platform for venue search data.
• Recipients you choose — venues and clients receive the outreach, contracts, invoices, and public page content you send or publish.
• Professional advisers such as legal and accounting, where needed.
• Authorities, regulators, or courts where we are required to disclose by law, and any acquirer in connection with a merger, acquisition, or sale of assets.

We do not sell your personal data and we do not share it with data brokers.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision covering the recipient.

We keep your account and business records for as long as your account is active. If you close your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer to meet legal, tax, accounting, or dispute-resolution obligations. Security and access logs are kept for a shorter period, typically up to 12 months. Disconnecting Gmail deletes the stored connection key immediately.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encryption at rest for stored credentials and connection keys, row-level database rules so each account can only reach its own records, and restricted administrative access. No system is completely secure, so please use a strong, unique password.

We use strictly necessary cookies and local browser storage to keep you signed in, remember your preferences, and protect the Service. We do not use advertising cookies. You can clear or block cookies in your browser settings, but doing so will sign you out and may break parts of the Service. Email open tracking applies only to outreach you choose to send from your own account.

Subject to the law that applies to you, you may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability of the data you provided, and you may object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time. You can also complain to your local data protection authority — in the UK, the Information Commissioner’s Office.

To exercise a right, email support@gigpilot.app. We respond within one month and will tell you if we need longer. Many changes and deletions can also be made directly in your profile and account settings.

When you add venue contacts, clients, or reviewers, you are responsible for having a lawful basis to hold that information and for handling requests those people make to you about it. We act as a processor for that data on your behalf.

BooktheStage is not intended for children under 16. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

We may update this notice as the Service changes. We will update the date at the top of this page and, for material changes, notify you by email or in the app.