Privacy Policy (v1.0)

Effective Date: December 19, 2025
Last Updated: December 19, 2025

This Privacy Policy explains how Artist Manager OS (“Artist Manager OS”, “we”, “our”, “us”) collects, uses, shares, and protects information when you use our website and application (the “Service”).

1. Summary (Plain English)

We collect the information you provide so the app can work (account info + the career-management data you enter).
We use service providers to run the product (for example: Supabase for database/storage, Stripe for billing, and OpenAI for optional AI features).
We do not sell your personal information.
You can request access, export, or deletion of your data.

2. Information We Collect

2.1 Information You Provide

Depending on what you use in the Service, we may collect:

Account information: email address, password (stored in encrypted/hashed form by our auth provider), and profile details you add.
Career management data: gigs, contacts, notes, drafts, links, and other information you enter.
Uploads: files and media you upload (for example press photos or PDFs).
Communications: messages you send to support.

2.2 Information Collected Automatically

We may collect:

Device and log data: IP address, browser type, device/OS, timestamps, and pages/actions in the app.
Security data: information used to prevent fraud/abuse and keep accounts secure.

2.3 Payment Information

Payments are processed by Stripe. We do not store full credit card numbers. We may receive limited billing details (for example: subscription status, last 4 digits, and billing period dates) needed to manage your subscription.

2.4 AI Feature Data (If You Use It)

If you use AI features, we may send portions of Your Content and your prompts to our AI providers to generate outputs. You control what you submit.

3. How We Use Information

We use information to:

provide, operate, and maintain the Service;
authenticate users and secure accounts;
process subscriptions and manage billing;
enable public sharing features when you choose to publish;
provide customer support;
monitor, prevent, and investigate abuse, fraud, and security incidents;
improve reliability and performance.

4. How We Share Information

We share information only as needed to operate the Service:

4.1 Service Providers (Sub‑processors)

We use the following categories of service providers:

Supabase (database, authentication, storage)
Stripe (payments and subscription billing)
OpenAI (AI features, if enabled/used)

These providers process information on our behalf under agreements that restrict their use of the data.

4.2 Legal and Safety

We may disclose information if we believe in good faith that it’s necessary to:

comply with law or legal process;
protect rights, safety, and security of users, the public, or Artist Manager OS;
prevent fraud, abuse, or security incidents.

4.3 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

5. Cookies and Similar Technologies

We use cookies and similar technologies for:

Essential cookies (required for login/auth and core functionality)
Preferences (for example, remembering settings)

If we use analytics cookies, we will provide choices where required by law.

6. Data Retention

We keep information for as long as needed to provide the Service and for legitimate business purposes (for example: security, dispute resolution, and enforcing agreements). You can request deletion at any time; some information may be retained where required by law.

7. Security

We use reasonable administrative, technical, and organizational measures to protect information. No system is 100% secure, and you use the Service at your own risk.

8. Your Rights and Choices

Depending on where you live, you may have rights to:

access your information;
correct inaccurate information;
delete your information;
export your information;
object to or restrict certain processing;
withdraw consent (where processing is based on consent).

To exercise rights, contact: legal@artistmanageros.com

9. US State Privacy Disclosures (Including California)

We do not sell personal information.
We do not share personal information for cross-context behavioral advertising in a way that would be considered a “sale” under certain state laws.
You may request access or deletion as described above.

10. International Transfers

If you access the Service from outside the country where our servers or providers operate, your information may be transferred and processed in those locations.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this policy from time to time. If changes are material, we will take reasonable steps to notify you.

13. Contact

Privacy questions or requests: legal@artistmanageros.com

We use your information to:

Provide the Service:

Create and maintain your account
Process payments and subscriptions
Store and organize your content
Enable collaboration features
Send service notifications (e.g., trial expiration)

Improve the Service:

Analyze usage patterns to enhance features
Fix bugs and technical issues
Develop new functionality
Conduct A/B testing

Communicate with You:

Respond to support requests
Send important service updates
Notify you of pricing changes
Marketing emails (you can opt out)

Legal and Security:

Prevent fraud and abuse
Comply with legal obligations
Enforce our Terms of Service
Protect our rights and property

3. How We Share Your Information

3.1 We DO NOT Sell Your Information

We never sell your personal information to third parties.

3.2 Service Providers

We share information with trusted service providers who help operate the Service:

Supabase (Data Storage):

Stores your account and content data
EU/US data centers with encryption
Supabase Privacy Policy

Stripe (Payment Processing):

Processes subscription payments
Handles billing and invoices
Stripe Privacy Policy

Analytics Services:

Usage statistics and error tracking
Anonymous, aggregated data only

3.3 Legal Requirements

We may disclose information if required by:

Court orders or subpoenas
Legal process or law enforcement
Protection of our rights or safety
Prevention of fraud or abuse

3.4 Business Transfers

If we are acquired or merged, your information may be transferred to the new entity. We'll notify you beforehand.

4. Data Security

4.1 Security Measures

We implement industry-standard security:

Encryption: HTTPS/TLS for data in transit
Encrypted Storage: Data at rest encryption via Supabase
Password Security: Bcrypt hashing for passwords
Access Controls: Role-based access limitations
Regular Audits: Security reviews and updates

4.2 Your Responsibility

Please:

Use a strong, unique password
Keep your login credentials confidential
Log out on shared devices
Report suspected security breaches

4.3 No Absolute Security

No system is 100% secure. We cannot guarantee absolute security despite our best efforts.

5. Your Rights and Choices

5.1 Access and Update

You can:

Access your information via Account Settings
Update your profile and preferences
Export your data (contact support)

5.2 Delete Your Account

You can delete your account at any time:

Account Settings → Billing Information → Manage Subscription → Delete Account
We delete your data within 30 days
Some information may be retained for legal/security purposes

5.3 Marketing Communications

You can opt out of marketing emails:

Click "Unsubscribe" in any marketing email
Update preferences in Account Settings
You'll still receive essential service emails

5.4 Cookies

You can control cookies via:

Browser settings (block or delete cookies)
Our cookie preferences (if implemented)
Note: Disabling essential cookies may affect functionality

5.5 Do Not Track

We do not currently respond to Do Not Track signals, but you can disable tracking via browser settings.

6. Data Retention

We retain your information:

Active Accounts: As long as your account is active
Deleted Accounts: 30 days after deletion request
Legal Requirements: Longer if required by law
Backups: Up to 90 days in encrypted backups

7. Children's Privacy

7.1 Age Requirement

The Service is not intended for children under 13. We do not knowingly collect information from children under 13.

7.2 Parental Consent

Users aged 13-17 must have parental consent to use the Service.

7.3 Reporting

If you believe a child under 13 has provided information, contact us immediately.

8. International Users

8.1 Data Location

Our Service is operated from [Your Country]. Your information may be transferred to and stored in countries outside your own.

8.2 EU/UK Users (GDPR)

If you're in the EU/UK, you have additional rights:

Right to Access: Request a copy of your data
Right to Rectification: Correct inaccurate data
Right to Erasure: Delete your data ("right to be forgotten")
Right to Restriction: Limit how we use your data
Right to Portability: Receive your data in a standard format
Right to Object: Object to certain data processing
Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact: privacy@artistmanagementos.com

8.3 Data Protection Officer

EU/UK users can contact our Data Protection Officer:
Email: dpo@artistmanagementos.com

9. California Privacy Rights (CCPA)

If you're a California resident, you have rights under the California Consumer Privacy Act:

Right to Know: What personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of sale of personal information (we don't sell)
Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, email: privacy@artistmanagementos.com

10. Changes to This Policy

10.1 Updates

We may update this Privacy Policy periodically. We'll notify you of material changes via:

Email notification
In-app banner
Updated "Last Updated" date

10.2 Continued Use

Your continued use after changes indicates acceptance of the updated policy.

11. Third-Party Links

The Service may contain links to external websites. We're not responsible for their privacy practices. Review their privacy policies independently.

12. Contact Us

For privacy questions or concerns:

Email: privacy@artistmanagementos.com
Support: support@artistmanagementos.com
Website: https://artistmanagementos.com/legal/privacy

Mailing Address:
Artist Management OS
[Your Address]
[City, State, ZIP]

13. Summary (Plain Language)

What we collect:

Your account info (name, email)
Content you create in the app
Usage data (what features you use)

How we use it:

To provide the Service
To improve features
To send important updates

What we DON'T do:

We don't sell your data
We don't spam you with ads
We don't share unless required by law

Your control:

You can export your data
You can delete your account anytime
You can opt out of marketing emails

Last Updated: December 14, 2025
Version: 1.0.0

By using Artist Management OS, you acknowledge that you have read and understood this Privacy Policy.