Privacy Policy

Tune Tavern ("we," "us," or "our") operates the Tune Tavern platform, a live music review service connecting hosts, artists, and listeners. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Account Information

When you create an account, we collect your name, email address, username, profile picture, and role selection (host, artist, or listener). Hosts and artists may also provide social media links, bio text, and genre preferences.

Audio Uploads

Artists may upload audio files for review. We process these files to verify format and strip embedded metadata for privacy. Audio files are stored securely on Cloudflare R2 and are accessible only within the context of review sessions.

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or banking details on our servers. We retain transaction records (amounts, dates, and associated session IDs) for accounting and payout purposes.

Usage Data

We automatically collect information such as your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data helps us improve the platform and diagnose technical issues.

We use essential cookies for authentication (JWT session tokens stored in httpOnly cookies) and preferences. We may use analytics cookies to understand how the platform is used. You can control cookie preferences through your browser settings.

We do not sell your data to advertisers and do not use third-party advertising trackers.

• To provide and maintain the Tune Tavern platform
• To process skip purchases and host payouts
• To display artist profiles and review history
• To power the Discovery feed and rating system
• To send transactional emails (receipts, session notifications)
• To detect and prevent fraud or abuse
• To improve platform performance and user experience

We share data with the following third-party services as needed:

• Supabase — Database hosting and authentication
• Stripe — Payment processing and payouts
• Cloudflare — CDN, R2 object storage for audio files, and DDoS protection
• Vercel — Application hosting and edge functions

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

We retain your account data for as long as your account is active. Audio files submitted for review are retained for 90 days after the review session, then permanently deleted from our storage. You may request deletion of your account and associated data at any time.

We implement industry-standard security measures including encrypted connections (TLS), secure authentication tokens, row-level security on all database tables, and strict access controls. Audio uploads undergo a multi-step validation pipeline before storage. However, no method of electronic transmission or storage is 100% secure.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at the email address below.

Tune Tavern is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the data promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy, contact us at:

privacy@tunetavern.app