StagePathOverview
StagePath is a home for music culture: a place to listen, post, create, collaborate, get booked and get paid. This policy explains what information we collect when you use the StagePath apps, the desktop studio at studio.mystagepath.com and this website, why we collect it, who we share it with, how long we keep it, and the choices and rights you have.
We collect what we need to run the service, keep it safe and pay creators accurately. We do not sell your personal information.
Information we collect
Information you give us
- Account details: your email address, username, display name, password (stored only as a one-way hash), country and currency, the roles you choose (fan, artist, creator), the music cultures you follow and your experience level.
- Profile: your photo, cover, bio, tagline, story, links, specialty, services and rates, and portfolio, if you add them.
- Content: posts, comments, reposts, likes, videos and clips, tracks and their details (titles, artwork, lyrics, credits, songwriters, splits, ISRC and ISWC codes), live room chat, and the files and notes you share in Studio Workspaces.
- Messages: the messages, photos, documents and voice notes you send, and your reactions.
- Money: your coin purchases, passes, gifts, tickets, bookings, earnings and payouts. Card and mobile money payments are processed by our payment providers; we receive a record of the payment, not your full card number.
- Payout and identity details: the bank or mobile money account you choose for payouts, identity verification results, and tax forms. For tax identifiers we keep only the last four digits and a protected fingerprint, not the full number.
- Requests and reports: verification requests, copyright notices, reports about content or accounts, and messages to our support team.
Information collected as you use StagePath
- Activity: what you play, like, follow, share and download, used for your library, recommendations, charts and royalty calculations.
- Device and app information: device type, operating system, app version, notification settings and the push token that lets us send you notifications.
- Security and anti-fraud signals: IP address, sign-in sessions, and a device identifier used to detect artificial streaming, account abuse and repeated sign-in attempts.
- Location: only when you use features that need it, such as shows near you and the events map. Your location is sent with that request to find nearby events; we do not keep a history of where you have been.
- Microphone and camera: only when you record a voice note, demo or video, scan a sign-in code, or go live. Nothing is recorded unless you start it.
Information from others
- Sign in with Apple or Google: your name and email address, as you allow when you sign in.
- Other members: when someone tags you, mentions you, invites you to a workspace or credits you on a track.
- Payment and payout providers: whether a payment or payout succeeded, and verification results.
How we use it, and our legal bases
| What we do | Why we may do it |
|---|---|
| Run your account, your feed, your library, messaging, live rooms and Studio Workspaces | To provide the service you asked for (contract) |
| Process purchases, gifts, tickets, bookings, escrow, royalties and payouts | Contract, and legal obligations such as tax and accounting |
| Verify identity and tax status before payouts | Legal obligations, and preventing fraud (legitimate interests) |
| Detect artificial streaming, spam, abuse and copyright infringement, including audio fingerprinting (Content-ID) | Legitimate interests in a fair and safe platform, and protecting rights holders |
| Recommendations, charts and trending | Legitimate interests in showing you music and creators you will enjoy |
| Push notifications | Your consent, which you can withdraw in your device settings |
| Ads for free listeners | Legitimate interests; personalised ads on iOS only if you allow tracking |
| The StagePath newsletter | Your consent, which you can withdraw at any time |
| Respond to legal requests and enforce our terms | Legal obligations and legitimate interests |
Advertising
Free listeners may see ads, served through Google AdMob. On iOS we ask your permission before any tracking for personalised ads; if you decline, ads are not personalised using data from other companies. You can remove ads entirely with an ad-free pass. We never use the content of your messages for advertising.
How long we keep it
- We keep your information while your account is open.
- Deleting your account: your account is switched off straight away and permanently erased after 14 days. We email you a link that can cancel it until then. If money is still owed to you, we hold the erasure until it has been paid out or settled.
- Deleting specific data: the data you choose is erased as soon as you confirm the request.
- Records we must keep: payment, payout, tax and accounting records are kept for as long as the law requires (generally up to seven years), without your name, email or profile. Entries in our tamper-evident audit log are kept with a meaningless identifier in place of your account.
- Deleted data can remain in encrypted backups for a limited time until those backups are overwritten.
Your rights and choices
Depending on where you live, you have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. See Data protection for how to use each right, including the Delete my account and Delete my data pages. We do not discriminate against you for using your rights.
- In the app: edit your profile, change who can see your content, block or mute people, turn notifications on or off, and delete data or your account under Settings, Privacy and your data.
- On your device: turn off location, microphone, camera, photo and notification permissions at any time in your device settings.
Security
Information travels encrypted (HTTPS/TLS). Passwords are stored with Argon2, a slow one-way hash; sign-in, reset and deletion links are stored only as hashes, so a copy of our database could not be used to sign in. Money movements are recorded in a double-entry ledger, and important decisions are written to a tamper-evident audit log. Access to personal information inside StagePath is limited to the people who need it to do their job. No system is perfectly secure; if you find a security issue, please tell us at security@mystagepath.com.
International transfers
StagePath serves members around the world. Our servers and our service providers may be located outside your country, including in the European Union and the United States. Where we transfer personal information internationally, we use appropriate safeguards required by law, such as standard contractual clauses.
Children
StagePath is not meant for children under 13, or under the older age set by the law where they live (for example 16 in parts of the European Union). We do not knowingly collect information from them. If you believe a child has given us personal information, contact privacy@mystagepath.com and we will delete it.
California and other US states
Residents of California and other US states with privacy laws have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and to opt out of its sale or sharing for cross-context behavioural advertising. We do not sell personal information. On iOS, personalised advertising is used only if you allow tracking; on Android you can reset or delete your advertising ID in your device settings. Use the links in Data protection or email privacy@mystagepath.com to exercise these rights; we may need to confirm your identity first.
Changes to this policy
We will update this policy as StagePath changes. When we make a significant change we will tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
Contact
Questions or requests about privacy: privacy@mystagepath.com. We answer within 30 days.