Privacy Policy
Last updated: 2026-10-07
Offstage is a booking-management platform for music agencies. This page explains what personal data we process, why we process it, where it lives, and the rights you have under the GDPR.
Data controller
The controller responsible for the personal data processed on this site is the entity named in the Imprint.
What personal data we collect
Account data (your name, email address, and a hashed password) when you accept an invitation and create an account. Operational data you enter into the app — artists, contacts, gigs, contracts, invoices, documents, and file uploads — which is processed solely to provide the booking-management service. Technical data (IP address, browser, request metadata) collected automatically by our infrastructure for security, abuse prevention, and error monitoring. If you fill out the waitlist form, we store the email address you submitted together with your consent timestamp.
Why we process it
To provide and operate the service you signed up for (Art. 6(1)(b) GDPR — performance of a contract), to keep the service secure and available (Art. 6(1)(f) GDPR — legitimate interests), and, for the waitlist form, on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Where your data is stored
Application data is hosted by Railway in its EU region. File uploads are stored in Cloudflare R2 (EU bucket). Connected email also uses Google, Aurinko and TypeSafe AI. Aurinko’s published privacy policy permits processing outside the European Union. TypeSafe AI’s published privacy policy describes hosting in the United States.
Sub-processors
We use Railway for infrastructure hosting and Cloudflare for content delivery, protection and file storage. Sentry provides error monitoring, and Resend delivers transactional emails. When you connect Gmail, Aurinko, provided by Yoxel, Inc., handles mailbox authorization, email delivery and reply synchronization. We use TypeSafe AI for natural-language search and filtering, selecting comparable shows, and interpreting matched ticket-sales replies.
When you use dictation, your speech goes to OpenAI in the United States for transcription. In most fields, our server sends a short recording. In chat dictation, your browser connects directly to OpenAI, which also receives your network address. Offstage stores no recording; the transcribed words go into the field. Typing does not send audio to OpenAI.
OpenAI, for dictation, and TypeSafe AI, for natural-language search and filtering, process data in the United States. Both use the European Commission's standard contractual clauses, which are part of their published data processing terms: OpenAI's and TypeSafe AI's. Write to us for a copy.
Connected Gmail
Connecting Gmail is optional. Google handles sign-in and asks you to authorize mailbox-wide read access and permission to send email on your behalf. Offstage receives your mailbox identity and uses Aurinko to access the account you authorize. Offstage does not receive your Google password.
To find replies to messages sent from Offstage, we check message headers, including senders, recipients, subjects, dates and message identifiers. This check can include messages outside your Offstage conversations. Offstage retrieves and stores message content and attachment information when a message matches an Offstage conversation. It does not import unrelated message bodies into your agency.
We use this data to send authorized emails, display messages and replies, and associate correspondence with your work in Offstage. For ticket-sales requests, we use TypeSafe AI to suggest readings from matched replies. We send reply text, requested show and sales-line labels, and candidate figures and dates. Reply text can contain personal information. You review and confirm proposed figures before they become sales readings. This reply-reading feature does not send mailbox credentials or attachment files to TypeSafe AI.
Google and Aurinko process mailbox authorization and email data to provide this connection. TypeSafe AI processes the matched ticket-sales reply data described above. Sent messages and their attachments go to the recipients you select. Saved conversations are available according to agency permissions and each conversation’s sharing settings. Personal conversations remain private to the sender unless shared with the team.
Read Aurinko’s privacy policy and TypeSafe AI’s privacy policy for their published data-handling information.
How we protect connected-email data
Offstage keeps mailbox credentials on the server and encrypts the stored access tokens. The app checks agency membership, permissions and conversation access before showing saved messages. Provider requests use HTTPS.
Disconnecting and deleting connected-email data
You can disconnect Gmail in your Offstage email settings. This stops new sends and reply imports through that connection. A message already being sent may still be delivered. Offstage schedules cleanup of the retired connection credentials. Disconnecting does not delete correspondence already saved in your agency or messages in Gmail.
Saved correspondence remains part of your agency’s records after disconnecting. To request access to or deletion of stored personal data, contact [email protected]. You can also remove Offstage’s access in your Google Account connections. Removing access there does not delete correspondence already saved in Offstage.
Google API data use
Offstage’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Gmail data or use it for advertising or training general-purpose AI models.
How long we keep it
Your agency's records stay while its workspace exists. When the owner deletes the workspace, we delete its data from our database straight away. To delete a single account, write to us at [email protected]. Error reports held by Sentry expire on that service's own schedule.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to request rectification of inaccurate data, to request deletion of your data, to request that we restrict processing, to object to processing we base on our legitimate interests, to receive your data in a portable format, to withdraw consent at any time, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at the email address below.
Cookies
We use only first-party cookies that are required to operate the site. NEXT_LOCALE stores your language preference; it is set when you select a language or open a sign-up link sent to you in your language, and it is stored for up to 12 months (or only until you close your browser when set by a sign-up link). NEXT_REGION and NEXT_TZ store the region and time zone you select in your account preferences and are stored for up to 12 months. The authentication cookie keeps you signed in and expires after 7 days. We do not use analytics, advertising, or any third-party cookies. These cookies are strictly necessary or store a choice you made yourself, so they are set without a consent banner.
Contact
For any privacy-related questions or to exercise your rights, write to us at [email protected].