Setlist HQ is built to help bands manage songs, gigs, rehearsals, set lists, and related collaboration. We use your information to operate that service. We do not sell your personal information, and we do not share your personal information or band data except as described in this policy or when required by law.
Information we collect
We collect and store information you provide or create, including:
- Account information, such as your name, email address, password hash, email verification status, profile settings, and account preferences.
- Band and membership information, such as band names, owners, invited members, roles, invitation status, billing account associations, and band settings.
- Song library data, such as artist, title, length, key, played key, BPM, notes, printed notes, status, tags, decade, Stage Traxx IDs, and links you save for YouTube, Spotify, or Apple Music.
- Gig, venue, rehearsal, and set list data, such as dates, times, time zones, venue details, contact fields, payout details, rehearsal locations, set list structure, song order, segue notes, and lock status.
- Support, mailing list, and email preference information, including messages you send to us and whether you opt in to product updates.
- Payment and subscription status data from our payment provider. We do not store full payment card numbers.
- Usage and technical data, such as session records, IP address, device and browser information, request logs, security events, rate-limit data, and product analytics events.
Streaming and third-party API data
Setlist HQ may use third-party music services to help you search for and save song links or preview content. These services may include YouTube API Services, Spotify, and Apple Music.
- When you search YouTube from Setlist HQ, we send the artist and song title you entered to YouTube API Services and receive public video search results, including video IDs, titles, channel names, thumbnail URLs, and YouTube links. If you choose a result, we store the YouTube link with the song record.
- Setlist HQ uses YouTube API Services. Google's own processing of information is described in the Google Privacy Policy. Your use of YouTube is also subject to the YouTube Terms of Service.
- When you search Spotify from Setlist HQ, we send the artist and song title you entered to Spotify and receive track metadata, such as track name, artist, album, cover art, duration, and Spotify URLs. If you choose a result, we store the Spotify track URL with the song record.
- When you use Apple Music-related lookup features, we may send song search terms to Apple Music and receive public music metadata. If you choose a result, we store the Apple Music link with the song record.
- Some features may require you to authenticate with another service, such as Spotify, Apple Music, YouTube, or Google, so Setlist HQ can perform an action you request, such as saving a set list as a playlist. We do not store your login credentials for those services. Authentication is used only to provide functionality directly to you, and data from your account with that service is not used unless the feature explicitly explains what data is needed and why.
How we use information
We use the information we collect to:
- Provide, maintain, secure, and improve Setlist HQ.
- Authenticate users, manage sessions, verify email addresses, reset passwords, and protect accounts.
- Store and organize your band's songs, gigs, rehearsals, set lists, venues, tags, invitations, votes, and settings.
- Send transactional emails, such as invitations, verification emails, password reset emails, billing notices, and activity notifications you request or configure.
- Process subscriptions, enforce plan limits, provide billing support, and maintain account records.
- Search third-party music services when you ask us to do so and save the links or metadata you choose to keep.
- Detect abuse, troubleshoot errors, analyze aggregate product usage, and maintain service reliability.
How we share information
Examples of limited sharing include:
- Service providers that host the application, database, cache, email delivery, payments, analytics, monitoring, security, and similar operational systems.
- Other users in your band workspace, based on their role and permissions.
- Public song list visitors, but only when a band owner enables public song list sharing.
- Third-party music APIs when you use a feature that searches or displays content from that service.
- Law enforcement, regulators, courts, or other parties when we believe disclosure is legally required or necessary to protect Setlist HQ, users, or others.
Cookies and similar technologies
Setlist HQ stores, accesses, or collects information on or from your device through cookies and similar technologies. We use them for login sessions, security, preferences, product analytics, diagnostics, and other functional uses. We may also allow service providers to use similar technologies when they help us provide the service, such as analytics, support, payment, or security tooling.
We do not use cookies to sell your data or to track your activity across unrelated sites for advertising. You can manage cookies through your browser settings, but blocking some cookies may prevent Setlist HQ from working correctly.
Data retention and deletion
We keep information for as long as needed to provide Setlist HQ, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and preserve backups. You may update or delete many records in the product. You may also request account or data deletion by contacting us.
If a future feature lets you connect a Google, YouTube, Spotify, or similar account, you will be able to disconnect that account. For Google-authorized access, you can also revoke access through the Google security settings page.
Security
We use reasonable technical and organizational safeguards to protect your information, including password hashing, access controls, session protections, rate limiting, and operational monitoring. No online service can guarantee perfect security.
Your choices
You can access and update much of your account, band, song, gig, rehearsal, and set list data inside Setlist HQ. You can opt out of non-transactional product updates in your profile. Transactional emails, such as security, account, invitation, and billing emails, may still be sent when needed to operate the service.
Children
Setlist HQ is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will provide notice through the service, by email, or by another reasonable method.
Contact us
If you have questions or complaints about this privacy policy or your data, please contact us at privacy@setlisthq.com.