Songpot Live — Privacy Policy (DRAFT)
Draft for the founder and a one-off legal review. Not published. Written 2026-09-23 from what the code
does today (api/track.py,api/submit.py,supabase-users/) plus what is planned for the beta
(taste, newsletter, Apple Music). Fill every [BRACKET], and delete any section that describes something
not live yet when you publish. Items marked (decide) are choices, not facts.
Last updated: [DATE]
1. Who we are
Songpot Live helps you find live music, art openings and record shops in your city, through AI assistants (Claude, ChatGPT), our website and a weekly email.
The controller of your data is [COMPANY LEGAL NAME], [LEGAL FORM], [REGISTERED ADDRESS], [RCS/SIREN]. Contact for anything in this policy: [privacy@DOMAIN]. We have not appointed a data protection officer; the contact above reaches the person responsible.
2. The short version
- You can use Songpot Live without an account. Then we keep only what you searched for and what you clicked, under an ID that changes every day. We do not store your IP address.
- We never see your conversation with an AI assistant. When Claude or ChatGPT uses Songpot Live, we receive only what the assistant sends to our tools (for example "techno, Friday, near Oberkampf").
- If you create an account, we keep your taste (artists, genres, venues, what you liked or didn't) to pick events for you. You can see, change, export or delete it at any time.
- We never sell your personal data. With your separate permission, we may share anonymous group statistics with the music industry (for example "people who like shoegaze in Paris go out on Thursdays"). Groups are always at least 20 people and never include anything that identifies you.
3. What we collect, and why
3.1 Using Songpot Live without an account
| What | Example | Why | Legal basis |
|---|---|---|---|
| Search details sent to us | "post-punk", "this weekend", "near République", max price | Answer the search; measure whether results are good | Legitimate interest (running and improving the service) |
| What we showed and what you clicked | Result order, clicks on ticket or listen links (through our /go and /listen links) | Know which results are useful; count click-outs for venues | Legitimate interest |
| Which app you came from | "Claude", "ChatGPT", "web" (from the browser/app user agent) | Know which channels work | Legitimate interest |
| Festival planning details sent to us by an AI assistant | Artists and sounds you like or want to avoid, the nights you're free, how hard you want it, the area you're staying in, picks you reacted to ("more like that one"), and, if you say so, whether you're a fan, DJ, producer or in the industry. For artists: words describing your sound and what you want from the festival (we don't log your artist name) | Answer the request; learn which tastes and needs our festival tools serve well | Legitimate interest |
| Festival plans and calendar files | Which events are in a plan page or calendar file you open, and which pick links you open (through our /plan and /fgo links). The event list travels in the link itself; we don't store a plan or anything that identifies you | Give you the page and file; count which picks people actually plan to go to | Legitimate interest |
| A daily pseudonymous ID | anon_3f9c…: a salted hash of IP address + user agent that changes every day | Group one day's searches together; we cannot follow you across days with it | Legitimate interest |
We do not store your IP address. It is used briefly for rate limiting and to compute the daily ID, then discarded. Cloud Run's infrastructure logs may contain it for up to [30] days for security. (decide / check log retention setting)
3.2 Your account
When you sign in (by email code or Google, through Claude, ChatGPT or our website):
- Identity: email address; name and profile picture if you sign in with Google.
- How you found us: the app you signed up from, campaign tags in the link (UTM), the referring page, and the daily IDs from your searches before sign-up (at most 30), so your first searches count toward your taste. Collected once, at sign-up.
- Security: sign-in times and the apps you have allowed (managed by our authentication provider).
Legal basis: contract (providing the account you asked for).
3.3 Your taste (the reason for an account)
- Artists, genres, venues and events you mark: love, like, seen live, been to, want to go, not for me.
- Practical preferences: budget, the nights you go out, and the area you start from (a neighbourhood or station, never your exact address). Optional: age range. We do not ask for gender.
- Notes: things you tell us in your own words ("I go with my partner who hates techno"). When you use an AI assistant, it can save such a note for you through our
update_tastetool; we get the note, not the chat. - Feedback on what we sent you: one-tap buttons in the email, and your replies (see 3.5).
We turn notes into structured preferences with an AI model (section 5). The only thing the email writer sees about you is a short taste summary built from the above.
Legal basis: your consent, given at sign-up for personalisation. You can withdraw it by deleting your taste or your account.
3.4 Apple Music (optional) (remove until live)
If you connect Apple Music, we read your library songs, heavy rotation and recently played tracks, and keep the artist names and play signals as taste. Apple's access token is stored encrypted and only used for this import. Disconnect at any time from your profile or in Apple's settings; we then delete the token and, if you ask, the imported taste. Legal basis: consent.
3.5 The weekly email
- Your email address, which issue we sent and when, whether it was delivered or bounced.
- Clicks on links in the email (they pass through our link so we know which picks worked).
- Your one-tap reactions and any reply you send us. Replies are read by a person (the editor) and may be turned into taste notes on your account.
- (decide) We do not use tracking pixels to see whether you opened the email.
Legal basis: consent (a separate tick box from personalisation). Every email has a one-click unsubscribe.
3.6 Adding an event, venue or artist (/add)
The link and text you send, and optionally your name, email, role ("I run the venue") and Instagram handle. We use your email only to contact you about that listing; we never publish it and never add it to a newsletter. Legal basis: legitimate interest (checking and publishing listings). Contact details are deleted [12] months after the listing is handled. (decide)
3.7 Public information about artists, venues and organisers
Our listings are built from public sources: ticketing sites, venue websites, city open data, and public profiles of venues, collectives, organisers and artists (website, public Instagram handle, public professional contact addresses). If you are named in our listings and want something corrected or removed, write to [privacy@DOMAIN]. Legal basis: legitimate interest (a public cultural guide).
4. Aggregate insights for the music industry
Part of how Songpot Live is funded is selling anonymous, aggregated insights to venues, promoters, labels and festivals (for example: which genres grow in which neighbourhoods, which nights sell). We only include people who gave this separate permission at sign-up, only in groups of 20 or more, and never names, emails, IDs or anything that could single you out. You can withdraw this permission at any time in your profile; you are then left out of every later report.
5. AI processing
We use Microsoft Azure OpenAI (hosted in Sweden, EU) to: tag events by genre, write short notes about artists from public sources, understand free-text searches, and turn your notes into taste preferences. Under Microsoft's terms, what we send is not used to train their models. AI output can be wrong; artist notes are reviewed by an editor before they are reused.
No decision with legal or similarly significant effect is made about you automatically. The only automated choice is which events we suggest.
6. Who processes your data for us
| Provider | What for | Where |
|---|---|---|
| Google Cloud (Google Ireland Ltd.) | Hosting our servers and scheduled jobs | Frankfurt, Germany |
| Supabase | Database and sign-in | Frankfurt, Germany |
| Microsoft Azure | AI models (section 5) | Sweden |
| Resend | Sending emails | Ireland (EU) |
| PostHog (remove until used) | Website analytics, only with your consent | EU |
| Google (sign-in) | Only if you choose "Sign in with Google" | — |
Some of these companies are based in the United States. Where data could be accessed from outside the EU, transfers rely on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
Separate controllers: when you use Songpot Live inside Claude (Anthropic) or ChatGPT (OpenAI), your conversation is governed by their privacy policies. When you click a ticket link, the ticket seller (DICE, Ticketmaster, the venue…) handles your purchase under its own policy. We do not receive your purchase details.
7. How long we keep it
| Data | Kept for |
|---|---|
| Search and click logs with the daily ID | 13 months, then reduced to weekly counts with no ID |
| Searches linked to your account | [30 days] in raw form, then only their effect on your taste summary (decide) |
| Account, taste, marks, notes | Until you delete your account, or after [24] months without any activity (we email you first) |
| Email sending records | [12] months |
/add contact details | [12] months after the listing is handled |
| Security logs | [90] days |
Deleting your account deletes your profile, taste, marks, notes, connected accounts and queued emails. Your past anonymous searches stay, no longer linked to you.
8. Your rights
Under the GDPR you can: access your data, correct it, delete it, export it (portability), object to processing based on legitimate interest, restrict processing, and withdraw any consent at any time. You can also give instructions about your data after your death (French law). Most of this is self-service on your profile page; otherwise write to [privacy@DOMAIN]. We answer within one month.
You can complain to the CNIL (www.cnil.fr) or your local data protection authority.
9. Cookies and local storage
Our listing pages (/explore, /add) set no cookies. The sign-in page stores your sign-in session in your browser's local storage; this is strictly necessary and needs no consent. If we add website analytics, we will ask first and this section will list them.
10. Security
Data is encrypted in transit and at rest. Your account data is kept in a separate database from our public event catalogue, and the public service that answers AI assistants has no access to it. Access is limited to the founder, with multi-factor authentication.
11. Age
Songpot Live is for people aged [16] and over (decide: France's digital-consent age is 15; many listed events are 18+). Age limits for events are set by the venues.
12. Changes
We will post changes here and, for important ones, tell account holders by email before they apply.