1. Who Is Responsible for Your Data
BandBliss is used by music organizations to manage their members. Most personal information in the Service is entered by an organization about its members, and that organization controls the data. BandBliss stores and processes it on the organization's behalf. If you are a member and want information about you corrected or removed, contact your organization's administrators first; they manage your record. For your own BandBliss account (your login, name, and email), BandBliss is responsible.
2. What We Collect
We collect information you provide when creating an account (name, email, password) and information your organization adds to the platform, which may include member profiles (contact details, address, date of birth, photo, biography), emergency contacts, section assignments, attendance, dues records, messages, documents, electronic signatures, and financial records. We also collect standard server logs (IP address, browser type, pages visited).
Some information reaches us from people who never created an account: audition request forms on public pages (name, email, phone, and message, sent to the organization's recruiting contact), audience RSVPs for public events (name and email, used to confirm attendance), and patron or donor records entered by organizations. This information is collected solely so the organization can respond, and it is controlled by that organization.
3. Medical and Sensitive Information
Organizations may record medical conditions, dietary restrictions, and emergency contact details for their members so they can respond appropriately at rehearsals, performances, and trips. This information is visible only to the organization's administrators and to the member it concerns. It is never shown on public pages, never used for any other purpose, and never shared with third parties. Organizations are responsible for obtaining each member's consent before storing this information.
4. Children's Privacy
BandBliss accounts may not be created by children under 13, and we do not knowingly collect information directly from children. School and youth ensembles may keep records about members who are minors; that information is entered by the organization, which is responsible for obtaining parental or guardian consent first. When a document requires a signature for a minor member, a parent or legal guardian signs on their behalf, and we retain that signature record for the organization. If you believe a child's information has been added without appropriate consent, contact us and we will work with the organization to resolve it.
5. How We Use It
We use your information to operate the Service, send transactional emails (event reminders, invitations, dues notices, signature requests), and improve the product. We do not use your data for advertising and we do not sell it to third parties.
6. Email Communications and Opt-Out
Your organization's administrators may send you email through the platform, such as announcements, event reminders, and invitations. You control what you receive: every broadcast and reminder email includes an unsubscribe link, and you can manage separate preferences for event reminders and announcements from your profile at any time. Essential account emails, such as invitations and password resets, are always delivered.
To keep delivery reliable, we log sent emails (recipient address, subject line, and delivery status). These logs are used only for troubleshooting and monitoring and are periodically purged.
7. Third-Party Services
We share data with a small number of service providers, only as needed to run the Service:
- Payment processing. When you subscribe to a paid plan, your payment details are handled by our payment processor. We never store your full card number.
- Email delivery. Reminders, announcements, and invitations are sent through an email delivery provider, which processes recipient addresses and message content in order to deliver them.
- AI providers. Optional features such as music catalog assistance and the program builder send relevant data (piece titles, composers, and library details) to AI providers to generate suggestions. Member personal information is not used for these features.
- Hosting and infrastructure. The Service runs on secure cloud infrastructure that stores your data on our behalf.
These providers may only use your data to provide their service to us.
8. Data That Leaves the Platform
Some data becomes public or leaves BandBliss at your organization's direction. Organizations can publish a public page that may include upcoming events and, if they enable it, member names, photos, and biographies; anything on that page is visible to anyone on the internet. Members and organizations can also subscribe to calendar feeds, which deliver event details to the calendar app they choose (such as Google, Apple, or Outlook), where that provider's privacy policy applies.
9. Cookies and Browser Storage
We use browser storage to keep you signed in, remember interface preferences such as your theme and sidebar layout, and cache an organization's branding on its public page so it loads consistently on repeat visits. We do not use advertising or cross-site tracking cookies.
10. Data Storage and Security
Your data is stored on secure servers located in the United States. We use industry-standard encryption for data in transit and at rest, and we restrict access to personal data to those who need it to operate the Service. If we become aware of a security breach affecting your personal information, we will notify affected organizations and users without undue delay and describe what happened and what we are doing about it.
11. Your Rights
You can access and correct your own information at any time from your profile page. Administrators can export their organization's complete data as CSV files from the Reports page, and organization owners can delete their entire organization and all related data from the Settings page. If you are a member, direct correction or removal requests to your organization's administrators first; if that does not resolve it, contact us and we will help.
12. Data Retention
We keep your data for as long as your organization uses the Service. Note that when a member leaves an ensemble, the organization typically keeps their history (attendance, dues records, and signed documents) in its archives for its own record-keeping; those records remain under the organization's control. When an organization is deleted, its data is removed from the Service. Server logs and email delivery logs are kept for a limited period and then purged.
13. Data Deletion
You may request deletion of your account and associated data at any time by emailing support@bandbliss.com. Organization owners can delete their entire organization and all related data from the Settings page.
14. Contact
Questions about this policy? Email us at support@bandbliss.com. This policy is governed by the laws of the State of Colorado, consistent with our Terms of Service.