Privacy Policy

StageLink is the booking software at stagelink.dev for independent artists. Questions or requests about your data can be sent through the contact form (also in StageLink under Settings, Support).

• Your account: your name, email address and profile picture from Google, and the account identifier Google gives us. There is no password.
• Your Google connection: an encrypted copy of the access and refresh tokens from your Google sign-in, which let StageLink read and send your mail and manage the calendar events it creates. They are encrypted at rest and never leave our servers.
• Mail: the messages StageLink syncs and sends from your mailbox (subjects, bodies, attachments, participants), so pitches and replies can be threaded, tagged and followed up.
• What you put in StageLink: contacts and companies, venues, shows, deal terms, advances, contracts, invoices, settlements, expenses, tasks, notes, ideas, files and pictures, your profile and your artist page.
• Usage: counts of which features a workspace uses and what its AI, maps and storage use cost us, so we can keep within usage limits and improve StageLink. These are first-party counts, not third-party analytics.
• Devices and sessions: one record per signed-in device (when it started and expires, the IP address and browser it came from). Sessions last up to 90 days and renew while you keep using StageLink.
• Messages to us: feedback you send from the app and contact form messages, with your name, email and the screen you were on.
• The waitlist: the name and email you give when you join it on stagelink.dev.

Some of what artists do in StageLink involves other people:

• Contacts: bookers, promoters, venues and others an artist adds or imports, and the mail exchanged with them. The artist controls this data; we process it on their behalf.
• Visitors to an artist page: if you send a booking or contact form, we store what you typed (such as your name, email and message) for that artist. If you sign up for show announcements, we store your email and send announcements from the artist’s own mailbox, each with a way to unsubscribe. Page visits are counted as daily totals; we don’t store visitors’ IP addresses.
• Contracts, invoices and crew links: when an artist sends you one, we store your name, email and, for contracts, your signature and when you signed.

Only to run StageLink for you: to sign you in and keep you signed in, read and send mail through the Gmail API, create and update the calendar events for your shows through the Calendar API, power the features you use, keep the service secure and within its limits, and answer you when you contact us. We don’t sell data, don’t use it for advertising, and don’t use third-party analytics or tracking.

Jimi (the assistant), the AI matcher, pitch writing, contract drafting and document reading send the relevant text (for example a thread you asked Jimi about, or an uploaded settlement) to Anthropic’s Claude models running on Amazon Web Services (Amazon Bedrock) to produce an answer. That text is used only to answer your request. It is not used to train AI models, by us or by those providers. Jimi never sends, signs or changes anything without showing you first and asking you to confirm.

StageLink asks Google for three permissions: to read your mail (gmail.readonly), to send mail as you (gmail.send), and to manage calendar events (calendar.events), which StageLink uses only for the events it creates for your shows and meetings. It does not read your other calendar events, your Drive or your Google contacts.

StageLink’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features you see, is never sold, never used for advertising, and never used to train AI models. People can’t read your mail unless you give us permission to, it’s needed for security, or the law requires it.

We use a small number of providers, only to run StageLink:

• Google: sign-in, the Gmail and Calendar APIs, and Google Maps (address search, venue lookups and drive routes).
• Amazon Web Services: hosting, the database, file storage (encrypted at rest), our own system emails (Amazon SES) and the AI features (Amazon Bedrock).
• Public data sources: place names and routes sent to OSRM (routing), the U.S. Energy Information Administration (fuel prices), Travelpayouts (airfares), and Wikipedia and Wikidata (public facts about venues). These receive places and dates, not your personal details.

None of them may use your data for their own purposes. Data is processed in the United States.

StageLink uses only the cookies it needs to work: keeping you signed in, remembering your preferences, and security. No advertising or tracking cookies.

We can’t open your workspace. If you need help, the workspace owner can turn on support access for a limited time in Settings, Account. While it’s on, a named StageLink support person with two-step sign-in can see the workspace to help; every visit is logged where the owner can see it, and the owner can turn it off at any time.

We keep your data while your account is open. You can disconnect your Google mail at any time from within StageLink, which revokes the Google grant and deletes the stored mail. The workspace owner can delete the account in Settings, Account: this permanently deletes the workspace and everything in it, and your user account. Routine backups that hold deleted data are overwritten in the normal course of operation. Anything the law requires us to keep is kept only for as long as required.

You can also ask us, through the contact form, for a copy of your data, to correct it, or to delete it, and to be removed from the waitlist. We’ll answer within 30 days.

Connections are encrypted (HTTPS). Google tokens and the payment details you add for your own invoices are encrypted at rest, files are stored privately and encrypted at rest, every workspace’s data is kept separate from every other’s, and two-step sign-in is available. No system is perfectly secure; if we learn of a breach that affects your data, we’ll tell you.

StageLink is for people aged 16 and over. We don’t knowingly collect data from anyone younger.

StageLink keeps one directory of rooms, built from public sources, that every workspace can search. What an artist types about a room (capacity, address, notes) stays in their own workspace. If you run a venue and want its listing corrected or removed, use the venue correction or removal form.