Privacy Policy
1. Introduction
Setdrop ("Setdrop", "we", "us", or "our") operates the Setdrop website at setdrop.com.au and the Setdrop mobile application (together, the "Services"), a platform that connects performing artists with venues, promoters, and other businesses for live-music bookings. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use the Services, and the rights and choices available to you.
We are based in Melbourne, Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The legal entity operating Setdrop is being registered, and this policy will be updated with its registered name and ABN once registration is complete. By using the Services, you agree to the collection and use of information in accordance with this policy.
2. Information we collect
We collect the following categories of personal information:
Information you provide to us. This includes your email address and, if you join the waitlist, your artist or business details and any founding number assigned to you. When you create an account, we collect your name or display name, account type (artist or business), password, and profile details you choose to add, such as your handle, biography, photographs, videos, links, genres, press-kit materials, and rider information. When you use the booking, messaging, and career tools, we collect the content you submit, including gig listings, applications, bookings, contracts, invoices, messages, posts, comments, and reviews.
Payment information. Payments made through the Services are processed by our third-party payment provider, Stripe. Your full card or bank details are collected and handled directly by Stripe and are not stored by us. We receive limited transaction information, such as amounts, status, and identifiers, needed to operate bookings and payouts.
Information collected automatically. When you use the Services, we and our providers may collect device and usage information, such as device type and operating system, app version, a push notification token, IP address, log data, and general activity within the app. This helps us keep the Services secure, reliable, and functional.
Permissions on your device. With your consent, the app may access your camera, photo library, and microphone so you can add media to your profile, posts, and messages. You can manage these permissions in your device settings at any time.
3. How we use your information
We use personal information to:
- create and manage your account and profile;
- provide the Services, including gig discovery, applications, bookings, contracts, invoicing, payments, messaging, and career tools;
- operate the waitlist and assign founding access;
- process transactions and facilitate payments and payouts between users;
- send you service communications, including notifications, updates, and security alerts;
- provide customer support and respond to your enquiries;
- maintain the safety, security, and integrity of the Services, and prevent fraud and misuse;
- understand how the Services are used so we can improve them; and
- comply with our legal obligations.
We do not sell or rent your personal information, and we do not use it for third-party advertising.
4. How we share your information
With other users. The Services are a two-sided platform. Information you choose to make public, such as your profile, posts, and gig listings, is visible to other users. Details necessary to arrange a booking, such as your name and messages, are shared with the other party to that booking.
With service providers. We share information with trusted third parties who process it on our behalf and only to provide their services to us, including Supabase (database and file hosting, in Sydney, Australia), Stripe (payment processing), Expo and the Apple and Google push-notification services (delivery of notifications), and our email delivery provider. These providers are bound by contractual and legal obligations to protect your information.
For legal reasons. We may disclose information where we reasonably believe it is required to comply with the law, enforce our terms, protect the rights, property, or safety of Setdrop, our users, or others, or in connection with a business transfer such as a merger or acquisition.
5. Overseas disclosure
We store personal information in Australia where practical. Some of our service providers may store or process information overseas. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.
6. Data security
We take reasonable technical and organisational measures to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include restricted access controls, row-level security on our database, and encryption in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
7. Data retention
We keep your personal information for as long as your account is active or as needed to provide the Services. We may retain certain information after your account is closed where required for legal, accounting, dispute-resolution, or fraud-prevention purposes. We delete or de-identify information when it is no longer needed.
8. Your rights and choices
You may access, correct, or update your account information within the app, or by contacting us. Subject to applicable law, you may request access to or correction or deletion of the personal information we hold about you, ask us to stop sending you certain communications, or ask to be removed from the waitlist. To make a request, contact us using the details below. We will respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
9. Children
The Services are intended for people aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
10. Third-party links
The Services may contain links to third-party websites or services that we do not operate. This policy does not apply to those third parties, and we encourage you to review their privacy policies.
11. Changes to this policy
We may update this policy from time to time to reflect changes to our practices or for legal reasons. We will post the updated policy here and revise the "Last updated" date above. Where changes are significant, we will take reasonable steps to notify you.
12. Contact us
If you have any questions about this policy or how we handle your personal information, or wish to make a privacy request or complaint, contact us at support@setdrop.com.au.