Privacy Policy

The data controller is bnliu, contactable at hello@bnliu.xyz. Our ICO registration is in progress.

For any question about your data, or to exercise your rights, email hello@bnliu.xyz.

When you create an account: your email address.

When you build a profile: your artist name, handle, biography, London borough, roles, genres, what you are open to and available for, your SoundCloud link, and optionally an Instagram handle, a contact email and a profile photo.

When you use the Service: listings you create (upcoming events and releases), who you follow, and messages you send to other users.

Automatically: technical data needed to serve the site and keep it secure, including IP address and browser information, collected by our hosting providers.

Profile photos are resized in your browser before upload, which removes embedded metadata such as location coordinates. We never receive it.

Your profile is public. Your artist name, handle, biography, borough, roles, genres, availability, music link and listings can be seen by anyone on the internet, including people without an account, and may appear in search engine results.

Your contact email, if you provide one, is shown only to signed-in users. Your account email address is never shown to anyone. Messages between users are private to the two people in the conversation, though we can access them where necessary to investigate a report or comply with the law.

• Running your account and publishing your profile
  Performance of a contract — we cannot provide the Service without it
• Sending sign-in links
  Performance of a contract
• Keeping the Service safe: investigating reports, preventing abuse and impersonation
  Legitimate interests — protecting users and the integrity of the Service
• Complying with the Online Safety Act 2023 and other legal duties
  Legal obligation
• Understanding how the Service is used, in aggregate
  Legitimate interests — improving the Service

We do not sell your data and we do not share it for advertising.

We use these processors to run the Service:

• —Supabase — database, authentication and file storage. Our project is hosted in London (eu-west-2).
• —Vercel — application hosting and content delivery.
• —Resend — sending sign-in emails.
• —SoundCloud — we embed their player on profiles. When you view a profile, SoundCloud may set cookies and receive your IP address under their own privacy policy.

Some processors operate outside the UK. Where data is transferred internationally we rely on [UK ADEQUACY REGULATIONS / INTERNATIONAL DATA TRANSFER AGREEMENT — CONFIRM WHICH].

We may disclose data to the police or a regulator where required by law, or where necessary to investigate illegal content or activity.

Profile and account data is kept for as long as your account exists. When you delete your account, your profile, listings, follows and messages are removed immediately from our live systems, and from backups within 90 days.

Records relating to reports, suspensions and removals are kept for 90 days after resolution, so that we can meet our duties under the Online Safety Act and deal with repeat behaviour.

Under UK GDPR you have the right to:

• —Access a copy of the personal data we hold about you
• —Have inaccurate data corrected — most of it you can edit yourself
• —Have your data erased — you can delete your account at any time from settings
• —Restrict or object to processing based on legitimate interests
• —Receive your data in a portable format

To exercise any of these, email hello@bnliu.xyz. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first.

We use a small number of strictly necessary cookies to keep you signed in. These do not require consent. We do not use advertising or tracking cookies.

Embedded SoundCloud players may set their own cookies when a profile page loads. That is outside our control and governed by SoundCloud's privacy policy.

The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact hello@bnliu.xyz and we will delete it.

We will update this policy as the Service changes. Material changes will be notified by email before they take effect.