Blue Couch Performances ("we", "us", "BCP", "the platform") respects your privacy. This policy explains what information we collect, how we use it, and the choices you have. It applies to bluecouchperformances.com and the Blue Couch Performances iOS and Android apps.
Information we collect
Information you give us directly
- Account info — name, email, password (hashed), and optional artist profile (display name, bio, city, profile photo, social handles).
- Booking info — the time slot you select, optional artist socials, optional song / track info you choose to share, any notes, and a phone number if you choose to provide one for SMS reminders.
- Uploads — videos and images you upload, plus their metadata (title, description, tags).
- Communications — messages you send through chat rooms, direct messages, and audio rooms.
Information collected automatically
- Usage data — pages viewed, videos watched, votes, and other engagement events. We use this to rank content and improve the platform.
- Device data — device type, operating system, IP address (hashed for analytics), and browser/app version.
- Push notification tokens — when you enable notifications, the device token issued by Apple Push Notification service or Firebase Cloud Messaging.
Information from third parties
- Payment data — when you book a session, payment is handled entirely by Stripe. We never see or store your full card number; we receive only a transaction reference, last 4 digits, and the amount.
- Sign-in providers — if you sign in with Google, we receive your name, email, and profile picture from Google.
How we use your information
- To provide the platform: account access, bookings, payments, uploads, content discovery, ranking, and community features.
- To send transactional messages about your bookings (confirmation, reminders, status updates) by email and optionally SMS.
- To send push notifications you've opted into (e.g., new follower, booking approved, audio room invite).
- To moderate content and enforce our Terms — including identifying fraud, abuse, and spam.
- To comply with legal obligations (tax records, law-enforcement requests, etc.).
- To improve the platform: fix bugs, measure feature usage, build leaderboards and trending lists.
We do not sell your personal information. We do not use your data to train third-party ad networks or advertising profiles.
Service providers we share data with
We share the minimum data necessary with these providers to operate the platform:
- Stripe — payment processing
- Cloudinary — image and video hosting
- Resend — transactional email delivery
- Twilio — SMS reminders (only if you opt in)
- Vercel — web hosting and edge infrastructure
- Supabase / our database host — secure data storage
- OpenAI — AI banner generation for events (no personal data sent; only event title, description, and partner name)
- Apple Push Notification service and Firebase Cloud Messaging — push notification delivery
- Sentry — error monitoring (may include IP and user-agent for crash reports; no payment or password data)
Each provider is contractually bound to handle your data only on our behalf and to keep it confidential.
Data retention
- Account data is retained while your account is active.
- Booking and payment records are retained for 7 years to comply with US tax and accounting law.
- Uploaded videos and chat messages remain until you delete them or your account.
- Server logs and analytics events are retained for up to 90 days.
Your rights
You can:
- Access, edit, or delete your profile and uploads from inside the app or web settings.
- Disable push notifications, SMS, or email at any time from your settings.
- Request a copy of all data we hold about you, or full account deletion, by emailing privacy@bluecouchperformances.com. We respond within 30 days.
- If you're in the EU/UK: object to processing, request portability, or lodge a complaint with your local data-protection authority.
- If you're in California (CCPA/CPRA): request access, deletion, or to opt out of "sale" — though we don't sell personal information.
Children
Blue Couch Performances is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, please email us at privacy@bluecouchperformances.com and we will delete it.
Security
We use industry-standard safeguards: passwords are hashed with bcrypt, traffic is encrypted in transit (TLS 1.2+), payment data never touches our servers (handled by Stripe), and access to production data is restricted to authorized engineers.
No system is perfectly secure. If you suspect your account has been compromised, email security@bluecouchperformances.com immediately.
International transfers
Our servers are located in the United States. If you access the platform from outside the US, your data is transferred to and processed in the US. We rely on Standard Contractual Clauses for transfers from the EU/UK.
Changes to this policy
We may update this policy from time to time. If we make material changes we'll notify you by email or in the app at least 14 days before they take effect.
Contact
Questions about this policy or how we handle data?