Privacy Policy

KrewStage is operated by KrewStage SRL, based in Bucharest, Romania. We are the data controller for the personal information you provide when using our Platform. Contact: privacy@krewstage.com

When you create an account and use KrewStage, we collect the following types of information: Account information: Your name, email address, and password (stored encrypted). Profile information: Your city, country, bio, musical roles, genres, instruments, experience level, social links, and profile photo — all provided voluntarily by you. Usage data: Pages visited, features used, and time spent on the Platform. Communications: Messages you send to other users through the Platform, and project applications. Audio and media: Audio demos you upload to your profile. Technical data: IP address, browser type, and device information for security and analytics purposes.

We use your data to: • Operate and improve the KrewStage platform • Display your public profile to other users • Facilitate connections between musicians and venues • Send you notifications about messages, applications, and platform activity • Prevent fraud, abuse, and ensure platform security • Comply with legal obligations We do not sell your personal data to third parties.

Your public profile information (name, bio, roles, genres, city, avatar) is visible to all users and visitors of KrewStage. Your email address and private messages are never visible to other users. We use the following third-party service providers who may process your data: • Supabase — database and authentication infrastructure • Vercel — hosting and deployment • Cloudflare — content delivery and media storage These providers process data only as necessary to operate the Platform and are bound by appropriate data processing agreements.

Your data is stored on servers within the European Union (Supabase EU region). We implement industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and encrypted password storage. No system is 100% secure. If you believe your account has been compromised, contact us immediately at security@krewstage.com.

If you are located in the European Economic Area, you have the following rights regarding your personal data: Right of access: Request a copy of the data we hold about you. Right to rectification: Correct inaccurate data. Right to erasure: Request deletion of your data ("right to be forgotten"). Right to portability: Receive your data in a machine-readable format. Right to object: Object to processing of your data. Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us at privacy@krewstage.com. We will respond within 30 days.

KrewStage uses cookies and similar technologies to: • Keep you logged in between sessions • Remember your preferences • Analyze how the Platform is used (analytics) You can control cookies through your browser settings. Disabling cookies may affect some Platform functionality.

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal compliance purposes. Messages sent to other users may be retained in the recipient's account history.

KrewStage is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. The date at the top of this page shows when the policy was last updated.

For privacy-related questions or requests, contact us at: privacy@krewstage.com KrewStage SRL, Bucharest, Romania If you are unsatisfied with our response, you have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) at www.dataprotection.ro.