Privacy Policy – BandCopilot

1. Introduction

This Privacy Policy explains how BandCopilot collects, uses, and protects personal data of users of the platform. BandCopilot is committed to complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

2. Personal data collected

When using the service, BandCopilot may collect the following data:

identification data: email address, username, project or band name,
account data: information required for authentication and account management,
content data: information voluntarily provided by the user (presskits, biographies, media, messages),
technical data: technical logs required for security and proper operation of the service.

BandCopilot only collects data that is strictly necessary to provide the service.

3. Purposes of processing

Personal data is processed for the following purposes:

creation and management of user accounts,
delivery and operation of platform features,
securing access and preventing fraudulent use,
user support and assistance,
service improvement and bug fixing.

No personal data is used for advertising or marketing profiling purposes.

4. Legal basis for processing

Data processing carried out by BandCopilot is based on:

performance of the contract between the user and BandCopilot,
BandCopilot’s legitimate interest in ensuring service security and reliability,
compliance with legal obligations.

5. Data sharing

Personal data may be hosted or processed by technical service providers strictly necessary for operating the service (hosting, databases, transactional email). BandCopilot does not sell or rent personal data to third parties.

6. Data retention

Personal data is retained:

for as long as the user account remains active,
or for the duration required to comply with legal obligations.

Data may be deleted upon user request or when the account is deleted.

7. Data security

BandCopilot implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or alteration.

8. User rights

In accordance with the GDPR, users have the following rights:

right of access,
right to rectification,
right to erasure,
right to restriction of processing,
right to object,
right to data portability.

These rights can be exercised using the contact details provided in the Legal Notice.

9. Changes to this policy

This Privacy Policy may be updated at any time. Users will be informed of any significant changes.

10. Contact

For any questions regarding personal data protection, please refer to the Legal Notice on the BandCopilot website.