privacy policy
1. what we collect
information you give us
- account info: email address, display name
- phone number: when you sign up via SMS or add SMS as a notification channel
- tracked bands and cities: the entities you choose to follow
- messages: requests you send the bot via Telegram, WhatsApp, or SMS
information collected automatically
- device info: browser type, operating system
- usage data: pages visited, recommendations clicked
- ip address: for security and rate limiting
- cookies: session management only
2. how we use it
- deliver the daily digest of live music notifications you signed up for
- send transactional messages (login links, OTP codes, ticket reminders for shows you marked)
- generate band and show recommendations based on the entities you follow
- improve the recommendation engine and content sourcing
- prevent abuse and respond to legal requests
3. SMS communications
when you provide your phone number through our signup flow or settings page:
- we send a 6-digit verification code to confirm your number (Twilio Verify)
- we send the daily digest of band/show notifications you opted in to receive
- message frequency is typically 1 per day with occasional breaking-news sends (1-3 messages per week on average)
- standard message and data rates may apply
- reply STOP to any message to unsubscribe at any time
see our SMS terms for complete details.
4. who we share with
- messaging providers: Twilio (SMS), Meta (WhatsApp), Telegram (Telegram)
- data processors: Supabase (database hosting), Vercel (web hosting), Resend (email)
- AI providers: Anthropic (Claude API) for content sourcing and intent parsing
- legal authorities: when required by law or valid legal process
we do not sell your personal information to third parties.
mobile information: your phone number and SMS consent data will never be shared with or sold to third parties for marketing or promotional purposes. mobile data is used solely for delivering the messaging services you requested.
5. data retention
- account data: retained while your account is active
- SMS consent records: retained for 4 years per TCPA requirements
- tracked bands and cities: retained until you remove them or close your account
- recommendation history: retained 1 year, then anonymized
6. your rights
you have the right to:
- access the personal information we hold about you
- request correction of inaccurate information
- request deletion of your account and data
- opt out of any messaging channel (Telegram, WhatsApp, SMS) independently
- withdraw SMS consent by replying STOP or removing the channel from settings
to exercise these rights, email support@bandsbandsbands.app.
7. security
- encryption of data in transit (TLS)
- row-level security on the database
- session-based authentication via signed magic links
- rate limiting on phone-verification endpoints
8. children's privacy
bandsbandsbands is not intended for users under 13. we do not knowingly collect personal information from children under 13. if you believe a child has provided us with their information, contact us and we will delete it.
9. changes to this policy
we may update this privacy policy from time to time. material changes will be communicated via email or in-app notification. the "last updated" date at the top of this page reflects the most recent revision.
10. contact
for privacy-related questions:
- email: support@bandsbandsbands.app
- operator: Rainbow Rabbits Games LLC