Privacy policy

1. Introduction

Roster Bookings ("we", "us", or "our") operates the ROSTER platform at rosterartists.com. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have regarding your information. We are committed to handling your data with care and transparency.

2. Information we collect

We collect the following categories of information:

Account information

When you register via Replit Auth, we receive your name, email address, and profile image URL from your Replit account. You may also provide additional information when setting up your ROSTER profile, such as your display name, bio, city, genres, social media links, and booking details.

Activity data

We collect information about how you use the Platform, including booking requests sent or received, messages exchanged within booking threads, availability settings, posts and likes in the community feed, and profiles you follow.

Location data

If you choose to enable location-based search, we use your approximate location to show nearby artists. This is used only for search filtering and is not stored permanently.

Uploaded files

Profile avatar images you upload are stored securely on Cloudflare R2. We do not store other personal files unless explicitly required by a Platform feature.

Technical data

We automatically collect standard technical information such as IP address, browser type, operating system, and pages visited. This data is used to operate, secure, and improve the Platform.

3. How we use your information

We use the information we collect to:

• Create and manage your account and profile
• Facilitate bookings and communications between artists and promoters
• Send transactional emails related to bookings and notifications (via Resend)
• Display your public profile to other users of the Platform
• Power search and discovery features, including geolocation filtering
• Administer the community feed and enforce community standards
• Improve and maintain the Platform's features and security
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Public and private information

DJ and Artist profiles (including display name, bio, city, genres, social links, and avatar) are publicly visible on the Platform and indexed by search engines. You control what information you add to your public profile.

Booking inquiries, messages, availability details, and community feed posts are private and visible only to relevant parties (artist, promoter, and admins where necessary). Feed posts are restricted to logged-in DJ users.

5. Data retention

We retain your account, profile data, and community feed posts for as long as your account is active, unless you choose to delete a post sooner. If you delete your account, we will remove your personal data within a reasonable period, except where retention is required by law or legitimate operational need (such as completed booking records).

6. Cookies and sessions

ROSTER uses a single session cookie to keep you logged in. This cookie is HTTP-only and secure. Your session remains active for up to 30 days from your last visit; if you are inactive for 30 days your session will expire and you will need to log in again. You can end your session at any time by signing out.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Third-party services

We use a limited number of trusted third-party services to operate the Platform:

• Replit Auth: handles secure login via OpenID Connect
• Neon (PostgreSQL): stores your account, profile, and booking data
• Cloudflare R2: stores uploaded avatar images
• Resend: sends transactional emails for booking notifications

Each of these providers is subject to their own privacy policies. We share only the minimum data necessary for each service to function.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at privacy@rosterartists.com. We will respond within 30 days.

9. Security

We take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or disclosure. All data is transmitted over HTTPS. Session cookies are HTTP-only and scoped to the Platform domain. However, no system is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

ROSTER is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will remove it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

12. Contact us

If you have any questions or concerns about this Privacy Policy, please contact us at privacy@rosterartists.com.