GigBoard is a location-aware marketplace and social network for musicians. This policy explains what information we collect, why we collect it, and what choices you have. We don’t sell your personal information — that’s not our business model, and it never will be.
1. Who we are
GigBoard is operated by GigBoard (Nashville, TN, United States). Questions about this policy can be directed to support@gigboard.live.
2. Information we collect
Information you give us
When you create an account or use GigBoard, you may provide:
- Account information — your name, email address, and password (or a Google or Apple account if you sign in with Google or Sign in with Apple).
- Profile information — bio, instruments you play, musical genres, home city and state, links to external profiles (Spotify, SoundCloud, YouTube, Instagram, Apple Music, your own website, etc.), any additional links you choose to add (for example, to a specific song, video, or article), an onboarding intent (e.g., “find paid gigs” or “casual jams”), and the kinds of work you’re available for, including remote work.
- Media — profile photo, banner image, audio tracks, and videos you upload.
- Repertoire — songs you add to your profile, including instrument and proficiency level.
- Gig postings — title, description, date, compensation, instrument needs, and address for gigs you create. You choose a visibility level for each gig you post — public (viewable via a link by anyone, including people without a GigBoard account), unlisted (viewable by any signed-in GigBoard user), or private (viewable only by people you share a private link with). See “How we share your information” below. If you reserve a seat for someone who isn’t on GigBoard, we store the name you enter for them until they join or the invite ends.
- Messages — content of direct messages and gig group conversations you participate in.
- Reviews — ratings and tags you leave for other musicians after working together.
- Reports — if you report another user or a gig, we collect the reason and any description you provide. For gig reports, we also keep a copy of the listing as it appeared when you reported it.
Information collected automatically
- Location — with your permission, we use your device’s GPS to show you nearby gigs and populate your location for gig discovery. You can also set a manual browse location instead. Precise coordinates are used to compute a geohash for proximity search and are not stored verbatim in your public profile.
- Push notification token — if you allow notifications, we store a device push token to send you alerts about auditions, connection requests, messages, and gig updates. You can disable notifications at any time in your device settings or within the app.
- Session and usage data — Firebase (our backend platform, operated by Google) automatically logs basic request metadata such as IP addresses, timestamps, and error traces as part of operating the service. We use this for debugging and service stability, not for marketing.
- Referral information — if you sign up after opening a link another user shared (an invite link, or a gig or profile they shared), we record that your account was referred by theirs, for internal analytics. We don’t track anything about you before you create an account.
Information from third parties
- Google Sign-In — if you choose to sign in with Google, we receive your name, email address, and Google account identifier. We do not receive your Google contacts, calendar, or any other Google data.
- Sign in with Apple — if you sign in with Apple, we receive your name and either your email address or an Apple private relay address, plus an Apple account identifier.
3. How we use your information
We use the information we collect to:
- Create and manage your account.
- Match you with nearby gigs and other musicians based on location, instruments, and genres.
- Enable auditions, connection requests, and in-app messaging.
- Send transactional emails — account verification, password reset, and notifications about activity on your account (via Resend).
- Send push notifications about gig activity, connections, and messages (if you’ve opted in).
- Display your public profile to other GigBoard users.
- Moderate the platform — review reports of harmful content or behavior, and remove content or gig listings that violate our Terms.
- Debug issues and maintain service reliability.
We do not use your information to build advertising profiles or sell it to data brokers.
4. How we share your information
With other GigBoard users
Your profile (name, bio, instruments, genres, media, reviews, and repertoire) is visible to other logged-in users by default. You can set your profile visibility to private or connections only in your privacy settings, which limits who can view your full profile. Other signed-in users can find you by name or @username, subject to your profile visibility setting.
Gigs default to unlisted — visible to signed-in GigBoard users, the same as before. You can instead mark a gig public, which generates a shareable link that shows a preview of that gig (its details, not your full profile) to anyone who opens it, including people without a GigBoard account. Or you can mark it private, which removes it from discovery entirely and makes it viewable only by people you send a private share link to. Regenerating a private gig’s link revokes access for anyone who had the old one. Messages are visible only to the participants of that conversation.
When you add a gig to your calendar
If you add a gig to your calendar, its details go to the calendar service you choose (e.g. Google, Microsoft, or Apple), under that service’s privacy policy.
With service providers
We share data with the following third-party services to operate GigBoard:
- Google Firebase — authentication, database (Firestore), file storage, and serverless functions. Firebase is operated by Google LLC. Firebase Privacy.
- Resend — transactional email delivery. Resend receives recipient email addresses and email content. Resend Privacy.
- Google reCAPTCHA v3 — used on our web app to distinguish human users from bots. Subject to Google’s Privacy Policy.
- Cloudflare — DNS, CDN, and DDoS protection for our website. Cloudflare Privacy.
These providers only process your data as needed to provide their services to us and are not permitted to use it for their own purposes.
Legal requirements
We may disclose your information if required by law, court order, or to protect the safety of users or the public.
Business transfers
If GigBoard is acquired or merges with another company, your information may be transferred as part of that transaction. We’ll notify you before your information becomes subject to a different privacy policy.
5. Data storage and retention
Your data is stored in Google Firebase infrastructure, primarily in the United States. If you are located outside the US, your data will be transferred to and processed in the US. We rely on Firebase’s standard data processing terms for international transfers.
We retain your account and profile data for as long as your account is active. If you delete your account, we delete your profile, media, and most associated data immediately. A limited set of data is retained rather than deleted, because removing it would also delete data belonging to another user who is still active — for example, messages you sent in a shared conversation remain visible to the other participant, and reviews you gave or received are kept (with your identity anonymized) so the other party’s record is preserved. Reports you filed or that were filed about you are also retained for safety and abuse prevention. There is no scheduled purge date for this retained data, and we do not maintain a separate long-term backup archive of deleted data beyond it. See Account & Data Deletion for the full breakdown of what’s deleted versus retained.
6. Your choices and rights
Access and editing
You can view and edit your profile information at any time within the app.
Account deletion
You can delete your account from the settings screen. Deletion removes your profile, uploaded media, and personal data from our active systems.
Notifications
You can disable push notifications in your device settings or granularly within the app’s notification preferences. Some notices about your account or content, such as a gig being removed for violating our Terms, are always sent.
Location
Location access is requested when you use gig discovery features. You can deny or revoke this permission in your device settings. The app remains usable without location permission — you can set a manual browse location instead.
Profile visibility
You control who can see your profile via the privacy settings in the app (public, connections only, or private).
7. California residents (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act gives you specific rights regarding your personal information:
- Right to know — you can request a copy of the personal information we’ve collected about you in the past 12 months.
- Right to delete — you can request that we delete your personal information. We’ll honor this by deleting your account and associated data.
- Right to correct — you can request that we correct inaccurate personal information we hold about you.
- Right to opt out of sale or sharing — we do not sell or share your personal information with third parties for cross-context behavioral advertising.
- Right to non-discrimination — we will not treat you differently for exercising these rights.
To exercise your rights, email us at support@gigboard.live. We will respond within 45 days. If we need more time, we’ll let you know. We may need to verify your identity before fulfilling a request.
8. Other US state privacy laws
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights to access, correct, delete, and opt out of the sale of their personal data. We don’t sell personal data, and we honor deletion and correction requests regardless of your state. Contact us at support@gigboard.live to make a request.
9. Children’s privacy
GigBoard is not intended for users under 18 years old. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.
10. Security
We use Firebase’s built-in security features, including Firestore security rules, Firebase Authentication, and HTTPS for all data in transit. No system is perfectly secure, but we take reasonable measures to protect your information. If you discover a security vulnerability, please report it to support@gigboard.live.
11. Links to other services
Profiles may include links to external services (Spotify, SoundCloud, YouTube, Instagram, Apple Music, a personal website, etc.), as well as other links a user chooses to add to their profile, such as a link to a specific song, video, or article. These are provided by users and are governed by the destination site’s own privacy policy. We are not responsible for the privacy practices or content of any third-party sites linked from a profile.
12. Changes to this policy
We may update this policy as GigBoard grows. When we make material changes, we’ll update the “Last updated” date at the top of this page and, where appropriate, notify you by email or in-app notification. Your continued use of GigBoard after a change takes effect constitutes your acceptance of the new policy.
13. Contact us
Questions, requests, or concerns about this Privacy Policy? We’re reachable at:
GigBoard
5018 Kincannon Dr.
Nashville, TN 37220
United States
support@gigboard.live