1. Introduction

Welcome to BandMaster. This Privacy Policy outlines how we collect, use, and protect your information. By using BandMaster, you agree to the terms described in this policy.

2. Social Login (Google SSO) & Data Collection

To provide a seamless authentication experience, BandMaster utilizes Google Single Sign-On (SSO). When you register or log in using your Google account, we request and securely store the following information provided by Google:

Name: Used to personalize your profile and display your identity within your associated Bands.
Email Address: Used as your primary account identifier and for essential service notifications.
Profile Picture: Used solely to help you and your bandmates visually identify each other in the application.

Our Guarantee Regarding Your Profile Picture

We highly respect your privacy. The profile picture retrieved from your Google account is copied to our own secure storage solely to display it within BandMaster — this ensures reliable, fast delivery without depending on Google's servers. Under no circumstances will your profile picture be resold, indexed, processed by external tools, or repurposed for any other internal or external use.

3. Audio and Rehearsal Data

When you upload or interact with audio stems, lyrics, and recordings on BandMaster, that data is stored securely. Audio processing (such as stem separation or playback) is strictly maintained for the functional utility of your respective Band and its members. It is not utilized for generative AI training without explicit consent.

4. Use and Sharing of Information

We do not sell, rent, or trade your personal information. We only share information when:

You consent to share it.
It is necessary to provide our services (e.g., using secure cloud providers for audio hosting).
Required by law or to protect our legal rights.

5. Security

We implement industry-standard security measures, including database encryption via Supabase and strict Row Level Security (RLS) policies, to protect your data. However, please be aware that no transmission over the internet or electronic storage method is 100% secure.

6. Data Retention and Deletion

We retain your data only for as long as your account is active or as necessary to provide our services. You may request the deletion of your account and associated data (including SSO inputs like your profile picture) at any time by contacting our support team or deleting your account from the dashboard.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact the developer via GitHub or email linked on the application repository.