Trust & Transparency

Privacy Policy

Last Updated: August 17, 2026

1. Introduction

BandGravy ("we," "our," or "us") provides a software platform designed for live musical artists, bands, DJs, and performers to manage live song requests, audience tipping, gig scheduling, calendar syncing, booking inquiries, and website embeds (the "Services").

This Privacy Policy explains how we collect, use, store, and share information when you visit our website at bandgravy.com, create a Band account, interact with a hosted band page or embedded widget, or use any of our integrated tools.

2. Information We Collect

A. Information Provided by Bands & Performers

  • Account Details: Name, band name, username, email address, password hash, and profile details (such as timezone, bio, and logo).
  • Songs & Gigs: Song titles, genres, artists, tags, upcoming shows, venues, call times, and contact information for booking inquiries.
  • Custom Domain & Widget Information: Registered external website domains and publishable widget tokens.

B. Information Provided by Fans & Audience Members

  • Song Requests & Tips: Fan name, email address (for order receipts and notifications), requested song title, custom dedication notes, and tip amounts.

C. Automatically Collected Information

  • Device & Usage Data: IP address, browser type, operating system, referring URL, and interaction logs with song menus and widgets to provide live request queues and analytics.

3. Payment & Financial Information (Stripe)

BandGravy integrates with Stripe, Inc. for payment processing, subscription billing, and direct performer payouts via Stripe Connect.

Security Notice: BandGravy never stores, handles, or has access to complete credit card numbers, debit card details, or bank account credentials. All financial and payment card data is processed directly by Stripe under Stripe's Privacy Policy.

4. Google Calendar & Third-Party Integrations

BandGravy allows performers to connect their Google Calendar to automatically synchronize shows, call times, venue addresses, and ticket links.

Google API Limited Use Disclosure

BandGravy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

  • We only request access to the specific Google Calendar scope (https://www.googleapis.com/auth/calendar.events) necessary to create, update, and sync your scheduled BandGravy events.
  • We securely store your encrypted OAuth refresh token to maintain the synchronization you authorized.
  • We do not sell, rent, or transfer your Google Calendar data to third parties, advertisers, or data brokers.
  • We do not use Google user data to train generalized artificial intelligence (AI) or machine learning (ML) models.

5. How We Use Information

We use the data we collect solely to provide, secure, and improve the BandGravy platform, including:

  • Facilitating live interactive fan song requests, digital tipping, and stage queues.
  • Synchronizing gig schedules to your connected calendar accounts.
  • Routing fan payments and tips directly to your connected Stripe payout account.
  • Delivering automated booking emails and show reminders.
  • Protecting platform integrity, detecting fraud, and complying with applicable legal obligations.

6. Data Sharing & Disclosures

We do not sell your personal data. We only share information with trusted third-party service providers who assist us in operating our platform:

  • Payment Infrastructure: Stripe (payment processing, payouts, compliance).
  • Calendar Providers: Google Calendar API (event syncing upon user authorization).
  • Transactional Email: Email delivery providers to send verification links, booking notifications, and payment receipts.
  • Legal Compliance: If required by law, regulation, subpoena, or lawful request by public authorities.

United States ZIP-code location and timezone reference data is provided by SimpleMaps.

7. Data Security & Retention

We employ modern industry-standard security practices, including TLS/HTTPS encryption in transit, salted password hashing, database access controls, encrypted token storage, and regular security audits. We retain your account data for as long as your BandGravy account remains active, or as required to fulfill legal and accounting obligations.

8. Your Rights & Choices

You have full control over your data. At any time, you can:

  • Access, update, or edit your band profile, song catalog, and contact records from your Bandspace.
  • Disconnect your Google Calendar or revoke widget tokens with 1-click in your account settings.
  • Request full export or permanent deletion of your account and associated data by contacting us.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to us at:

Email: support@bandgravy.com
Website: https://bandgravy.com