Privacy Policy

The DemoStop, LLC ("DemoStop", "we", "us") is the controller of the personal information described here. This policy covers thedemostop.app, our applications, and every service we offer through them.

It does not cover other companies' services that you reach through DemoStop, or anything you choose to do with another member off-platform.

2.1 Information you give us

• Account: your name, email address, password (stored hashed, never in readable form) and account type. If you sign in with Google, we receive your name, email address and profile picture from Google — not your Google password.
• Profile: stage name, username, biography, photos, links, spheres, genres, instruments, dance and comedic styles, experience, availability, influences and anything else you choose to add.
• Location: the postal code or place you enter, and the city, region and country we resolve it to.
• Venue details: address, capacity, category, photos and menus, where you are a venue.
• Content: audio, video, images, posts, comments, course material, live streams and everything else you upload or publish.
• Messages and inquiries you send to other members, and bookings, applications and submissions you make.
• Payment and payout information you enter with Stripe, including identity verification documents Stripe requires. Stripe holds these; we receive confirmation of status and limited details such as the last four digits of a card.
• Support requests, reports and anything else you write to us.

2.2 Information we collect automatically

• Device and connection data: IP address, browser and operating system, device type, language and time zone.
• Usage data: pages and profiles viewed, searches and filters used, plays, claps, saves, follows and other interactions, and the times they happened.
• Video playback data from our video providers, including view counts and watch progress on your own lessons.
• Cookies and similar technologies (section 8).
• Consent records: the date and time you accepted these documents, which version you accepted, and the IP address and browser you accepted from. We keep this because it is the evidence that you agreed.

2.3 Information from others

• Google, if you use Google sign-in.
• Stripe, about the status of your payments, subscriptions, payouts and identity verification.
• Mapbox, when it resolves a postal code or address you entered into a place.
• Other members, when they tag you, credit you, report you or invite you with a referral code.

DemoStop is a discovery platform, so most of a profile is meant to be found. It is worth being precise about where the line sits.

Public — visible to anyone, including people who are not signed in

• Your name, username, profile photo and cover image.
• Your biography, spheres, genres, instruments, styles, experience and availability.
• Your city, region and country.
• Demos, shorts, releases, posts, comments, courses, events, gigs and collaboration posts you publish.
• Your follower and following counts, and claps on your work.
• Venue name, address, capacity and category, where you are a venue. A venue address is public because that is how people find the room.

Not public

• Your email address. It is held in a separate table that only you and our administrators can read.
• Your postal code and the coordinates we derive from it. These are held privately and are never shown on your profile or returned by our public interfaces. A postal code identifies a few streets, not a city, and its centroid is the same fact in another form.
• Your messages, booking inquiries, applications and submissions, which are visible only to the people involved.
• Your payment details, payout details and identity documents.
• Your saved items, playlists and private notes.
• Your consent records, and your settings and preferences.

Anything you put in a public field is public. Please do not put your home address, phone number or personal email in your biography — put them in a message to the person who needs them.

We use personal information to:

• create and run your account, and authenticate you;
• show your profile and work to the people looking for it, and rank and filter search and discovery;
• match you with gigs, collaborations and events, including by comparing your location with a venue's;
• deliver messages, notifications and emails you have asked for or that are necessary to the service;
• take payments, pay you out, and keep the records that go with money;
• provide support and answer your questions;
• keep the platform safe: detect and investigate fraud, spam, abuse, rule-breaking and security incidents, and enforce our Terms;
• understand how the product is used and improve it;
• comply with law, respond to lawful requests, and establish or defend legal claims.

We do not use your personal information to train machine-learning models that are made available to anyone outside DemoStop.

If you are in the United Kingdom or the European Economic Area, we rely on: performance of our contract with you (running your account, taking payment, delivering the service); our legitimate interests (keeping the platform safe, preventing fraud and abuse, improving the product, direct marketing of our own similar services); your consent (optional cookies, optional marketing, anything we specifically ask you to opt into, which you can withdraw at any time); and compliance with legal obligations (tax, accounting, responding to lawful requests).

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We have not done either in the last 12 months.

Other members and the public

As described in section 3, and as you choose when you publish, message, apply or tag.

Service providers who run the platform for us

They may only use your information to provide their service to us, and are bound by contract to protect it. They include:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Stripe — payments, subscriptions, payouts and identity verification.
• Bunny.net and Cloudflare — video storage, transcoding and delivery.
• Mapbox — resolving postal codes and addresses into places.
• Google — optional sign-in.
• Email delivery providers, for account and notification email.

Legal, safety and business

• Law enforcement, regulators, courts and others, when we are legally required to, or where we reasonably believe it is necessary to investigate a crime, prevent harm, protect someone's safety, or establish or defend a legal claim.
• The National Center for Missing & Exploited Children, where we are required to report child sexual abuse material.
• A buyer or successor, if we are involved in a merger, acquisition, financing or sale of assets. We will tell you if your information becomes subject to a different privacy policy.
• Professional advisers, such as lawyers and accountants, under confidentiality.

We keep personal information for as long as your account is open and for as long afterwards as we need it for the purposes it was collected for.

• Account and profile data: deleted when you delete your account, subject to the exceptions below.
• Content you publish: removed when you delete it or close your account, though backups persist for a limited period and copies other members have already saved are not recalled.
• Transaction and tax records: normally seven years, because we are required to keep them.
• Consent records: for as long as your account exists and for a period afterwards, because they are the evidence of your agreement.
• Safety and enforcement records, including about banned accounts: kept as long as needed to keep the ban effective and to defend against claims.
• Server logs: normally no more than 12 months.

We use cookies and similar storage to keep you signed in, remember your preferences, keep the platform secure, remember a referral code you arrived with, and understand how the product is used.

Strictly necessary cookies — authentication and security — cannot be turned off without breaking the service. You can block or delete other cookies through your browser. We do not use third-party advertising cookies, and we do not run ad-tracking pixels.

We use encryption in transit, hashed passwords, row-level database security so one member cannot read another's private data, restricted administrative access, and audit logging of administrative actions. Private information such as your email address and postal code is held in tables whose access rules name exactly who may read them.

No system is perfectly secure, and we cannot guarantee absolute security. Use a strong, unique password and tell us at once if you think your account has been accessed.

If a breach affects your personal information and the law requires it, we will notify you and the relevant regulator within the required time. Report a suspected vulnerability to thedemostop@gmail.com.

Wherever you are, you can:

• see and edit most of your information directly in your profile and settings;
• delete your account yourself, from settings;
• turn off non-essential notifications and emails, or unsubscribe from any marketing email;
• ask us for a copy of your information, ask us to correct it, or ask us to delete it.

UK and EEA (GDPR)

You also have the right to restrict or object to processing, the right to data portability, the right to withdraw consent at any time, and the right not to be subject to a decision based solely on automated processing that has a legal or similarly significant effect. We do not make such decisions. You may complain to your local supervisory authority, and in the UK to the Information Commissioner's Office.

California (CCPA/CPRA)

You have the right to know what we collect and why, the right to access and to delete, the right to correct, the right to opt out of sale or sharing (we do neither), the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising any of these. You may use an authorised agent. We honour Global Privacy Control signals as opt-out requests where they apply.

How to ask

Email thedemostop@gmail.com from the address on your account, or use the support form. We will verify who you are before acting, and we will respond within the time the law allows — normally 30 days, or 45 days in California.

We are based in the United States and our service providers may process your information there and elsewhere. Data protection law in those countries may differ from your own. Where we transfer personal information out of the UK or EEA, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum.

DemoStop is not for children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we delete the account and the information promptly.

If you are a parent or guardian and you believe your child under 13 has an account, contact thedemostop@gmail.com and we will remove it.

Members between 13 and the age of majority should use DemoStop with a parent or guardian involved, and should be especially careful about arranging to meet anyone in person.

We will update this policy as the product changes. When a change is material we will update the version and effective date at the top and ask you to accept the new version the next time you sign in. Older versions are available on request.

Privacy questions and rights requests: thedemostop@gmail.com. Everything else: thedemostop@gmail.com, or the support form at thedemostop.app/support.

The DemoStop, LLC, 22770 Yellow Button Lane, Alva, FL 33920, United States.