Privacy Policy
Last updated: 2026-06-06
Offstage is a booking-management platform for music agencies. This page explains what personal data we process, why we process it, where it lives, and the rights you have under the GDPR.
Data controller
The controller responsible for the personal data processed on this site is the entity named in the Imprint.
What personal data we collect
Account data (your name, email address, and a hashed password) when you accept an invitation and create an account. Operational data you enter into the app — artists, contacts, gigs, contracts, invoices, documents, and file uploads — which is processed solely to provide the booking-management service. Technical data (IP address, browser, request metadata) collected automatically by our infrastructure for security, abuse prevention, and error monitoring. If you fill out the waitlist form, we store the email address you submitted together with your consent timestamp.
Why we process it
To provide and operate the service you signed up for (Art. 6(1)(b) GDPR — performance of a contract), to keep the service secure and available (Art. 6(1)(f) GDPR — legitimate interests), and, for the waitlist form, on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Where your data is stored
Application data is hosted by Railway in their EU region. File uploads are stored in Cloudflare R2 (EU bucket). All processing takes place within the European Union.
Sub-processors
We use the following sub-processors, all processing data within the European Union: Railway (infrastructure hosting, EU region); Cloudflare (CDN, DDoS protection, R2 storage for uploads); Sentry (error monitoring, EU/Frankfurt region); Resend (transactional email delivery).
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to request rectification of inaccurate data, to request deletion of your data, to receive your data in a portable format, to withdraw consent at any time, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at the email address below.
Contact
For any privacy-related questions or to exercise your rights, write to us at [email protected].