Privacy Policy
Last updated: March 20, 2026
IndieStageClub ("we", "our", or "us") operates indiestage.club
1. Information We Collect
We collect the following categories of information:
Account & Profile Information
- Full name and email address (provided at registration)
- Artist name, biography, city, country, and genre
- Profile photos, cover artwork, and gallery images
- Social media links and contact information you choose to share
- Musical content: audio tracks, videos, and lyrics
Transaction & Payment Information
- Purchase history and music sales data
- Stripe Connect account ID (for artist payouts — we do not store card numbers)
- Buyer email addresses associated with completed transactions
- PayPal email and cryptocurrency wallet addresses (if voluntarily provided)
Usage & Analytics Data
- Page views, track plays, and engagement events (likes, shares)
- Device type (desktop, mobile, tablet)
- Approximate country of origin (derived from IP address)
- Referrer URLs and browser user-agent strings
Newsletter & Communications
- Email address, first and last name, gender, date of birth, city, and country (for newsletter subscribers)
- Communication preferences and subscription status
Community Content
- Comments, replies, and likes on productions
- Classified ads, gear listings, and industry profile information
- Follows and playlist data
- Review and interview submissions
2. How We Use Your Information
We use the information we collect to:
- Create and manage your artist or fan account
- Display your public profile, music, and content on the platform
- Process music purchases and route artist payouts via Stripe
- Send transactional emails (sale confirmations, account updates)
- Deliver newsletter communications to subscribers who opted in
- Generate analytics reports visible to artists about their own content
- Operate platform features: radio, playlists, comments, classifieds, and gear marketplace
- Detect, prevent, and investigate fraud or abuse
- Improve platform performance, features, and user experience
- Comply with legal obligations
We never sell your personal data to third parties.
3. Disclosure to Third Parties
We share your information only in the following circumstances:
Stripe (Payment Processing)
We use Stripe, Inc. to process all music purchases and manage artist payouts via Stripe Connect. When you make a purchase or set up payouts, Stripe receives your email address, transaction amounts, and payment details. Stripe's privacy policy governs their use of this data: stripe.com/privacy
Base44 (Infrastructure Provider)
IndieStageClub is built on the Base44 platform, which provides our database, authentication, file storage, and backend infrastructure. Your data is stored on Base44's secure servers. Base44 acts as a data processor on our behalf and does not use your data independently.
Email Delivery
We use Base44's integrated email service to send transactional and marketing emails. Your email address is used solely to deliver communications you have consented to or that are required for the operation of your account.
Legal Requirements
We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Public Profile Information
Information you add to your public artist profile (name, bio, music, photos, social links, location) is intentionally visible to all visitors of IndieStageClub. You control what appears on your public profile.
4. Method of Disclosure
Data is shared with third parties through the following technical methods:
- API calls over HTTPS: Stripe receives payment data via encrypted API requests initiated server-side (never from your browser directly)
- Secure database storage: Your data is stored in Base44's infrastructure using encrypted connections
- File uploads: Media files (audio, images, video) are uploaded via HTTPS and stored in Base44's file storage with access controls
- Email transmission: Emails are sent over SMTP with TLS encryption
- Public web display: Profile content you choose to make public is served via HTTPS to any visitor of the platform
5. Security Practices
We implement the following measures to safeguard your information:
- HTTPS encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
- No raw card storage: We never store credit card numbers. All payment data is handled exclusively by Stripe, a PCI-DSS compliant processor
- Webhook signature verification: Stripe webhook events are validated using cryptographic signatures before being processed
- Authentication controls: User accounts are protected by authenticated sessions managed by Base44's identity system
- Role-based access: Administrative features are restricted to verified admin accounts only
- Service-role isolation: Backend functions that access sensitive data operate under isolated service-role credentials, not exposed to the frontend
- Environment secrets: API keys and secrets are stored as encrypted environment variables, never hardcoded in source code
While we take these precautions, no method of transmission over the internet is 100% secure. We continuously review and improve our security practices.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., records of completed financial transactions).
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated personal data
- Withdraw consent to newsletter communications at any time via the unsubscribe link in emails
- Object to processing of your data in certain circumstances
- Data portability — request an export of your data
To exercise any of these rights, contact us at help@indiestage.club. We will respond within 30 days.
8. Cookies & Local Storage
IndieStageClub uses browser cookies and local storage to maintain your authenticated session and remember your preferences. We do not use third-party advertising cookies or tracking pixels. Essential session cookies are required for the platform to function and cannot be disabled while using the service.
9. Children's Privacy
IndieStageClub is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.
10. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or the handling of your data, please contact us:
We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of IndieStageClub after changes constitutes acceptance of the updated policy.