Privacy Policy

This Privacy Policy explains how Band Way (“Band Way”, “we”, “us”) collects, uses, and protects information when you use our services: the website at bandway.app, the Band Way desktop application (macOS and Windows), and the sharing portal at share.bandway.app. By using our services you agree to this policy.

1. Information we collect

• Waitlist email — the email you submit to join the waitlist on the website.
• Account data — when you create an account or sign in, we process your email address and the one-time login codes we send you to verify it.
• Your content — the audio you record or import, along with related information such as song and setlist names, keys, tempo, notes, and arrangement metadata. This stays on your device unless you choose to share it, in which case the relevant audio and metadata are uploaded to our servers so they can be played back by the people you share with.
• Technical data — IP address, browser or device user-agent, approximate country, operating system, and app version. We use this to operate the service, keep it secure, and prevent abuse and spam.
• Usage analytics & diagnostics (optional) — if you leave product analytics enabled, we collect events about how you use the apps (for example, features used, imports, and playback), basic device information, crash and error reports, and — in the desktop app — session recordings that capture how you interact with the interface. We use these only to find and fix problems and improve the product. You can turn analytics and diagnostics off at any time (see section 3).
• Local preferences — your chosen interface language is stored in your browser’s or app’s local storage. It never leaves your device.

2. How we use your information

• To provide and operate the service — sign you in, store your content, and share it with the people you choose.
• To secure the service and prevent abuse.
• To diagnose crashes and improve the product (where analytics and diagnostics are enabled).
• To notify you about the private alpha, the public launch, and major product updates.

We do not use your email for unrelated marketing, and we do not sell your personal data.

3. Analytics & session recording are your choice

Product analytics, session recording, and other non-essential diagnostics are optional. In the desktop app you can turn them on or off at any time from Settings; when you turn them off, we stop collecting events and end any session recording right away. Where the law requires consent for these technologies, we ask for it before collecting.

4. Legal bases (EEA/UK)

Where the GDPR applies, we rely on: your consent for waitlist and product emails and for optional analytics and session recording (which you can withdraw at any time); performance of a contract to operate your account and store and share your content at your request; and our legitimate interest in keeping the service secure and preventing abuse.

5. Sharing & service providers

We share data only with providers that help us run the service:

• Cloudflare — website and app hosting, edge delivery, and storage of account data, setlists, and the audio files you upload for sharing.
• Resend — sends our transactional email, such as one-time login codes and team invitations.
• PostHog — product analytics and, in the desktop app, session recording. Used only when you have analytics enabled.
• Sentry — crash and error diagnostics.
• Google Fonts — fonts are loaded from Google, which may process technical request data such as your IP address.
• Telegram — we receive an internal notification when someone joins the waitlist, so we can keep track of interest.

We may also disclose information if required by law. We do not sell your personal data.

Sharing you control. When you share a song or setlist with a team or through a link, the people in that team — and anyone who has the link — can access that content. You can stop sharing or revoke access at any time.

6. International transfers

Your data may be processed on our providers’ global networks, including outside your country of residence, with appropriate safeguards in place (such as the European Commission’s Standard Contractual Clauses where applicable).

7. Data retention

• Waitlist data — kept until the product launches plus a reasonable period afterwards, or until you ask us to delete it.
• Account and content — kept while your account is active. When you delete content or your account, we delete it from our active systems; residual copies in backups age out on a rolling basis.
• Analytics, session recordings, and diagnostics — retained for a limited period and then deleted or aggregated.

8. Your rights

You may request access to, correction of, deletion of, or a copy of your data, and you may withdraw consent at any time. You can also delete your account, which removes your content from our active systems. To exercise these rights, email hi@bandway.app.

9. Security

We protect your data with encryption in transit and access controls, and we rely on reputable providers. No method of storage or transmission is completely secure, and because the product is pre-release software you should keep your own backups of important recordings.

10. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version.

12. Contact

Questions about privacy, or want to exercise your rights? Email hi@bandway.app.