Privacy Policy

Who we are

CueGain is operated as a sole trader (toiminimi) registered in Finland, Business ID 3632334-6 ("CueGain", "we"). We are the data controller for the personal data described in this policy. You can reach us about anything privacy-related at privacy@cuegain.com.

What we collect

DJs (account holders): your email address (used for passwordless magic-link sign-in), display name, optional real name, bio, avatar, social links, event details, notification preferences, and your Stripe Connect account identifier. Identity documents and bank details required for payouts are collected directly by Stripe, not by us. We also keep records of your earnings, payouts, and transactions on the platform.

Fans: you do not create an account. We set a signed, randomly-generated session cookie so we can associate your tips, song requests, and booth bookings with you during and after an event. We store the transaction details you submit (amount, song request text, optional message). We only store your email address if you choose to join a DJ's mailing list or ask to be notified about an event. Payment card details are entered directly with Stripe and are never seen or stored by CueGain.

Automatically: standard server logs (IP address, user agent, request path) used for security, rate limiting, and abuse prevention, and server-side product analytics events (see PostHog below). We do not use advertising identifiers, cross-app tracking, or third-party advertising cookies.

Why we process it (legal bases)

Performance of a contract: processing payments, routing tips and song requests to the correct DJ, managing booth bookings, calculating and executing payouts, and providing DJ accounts.

Consent: sending you event or marketing email from a DJ whose list you joined. You can withdraw consent at any time via the unsubscribe link in every such email.

Legitimate interests: preventing fraud and abuse, securing the service, and understanding aggregate product usage so we can improve it.

Legal obligation: retaining transaction and accounting records as required by Finnish bookkeeping and tax law.

Service providers (processors)

We share data only with the providers needed to run the service, each bound by a data processing agreement and processing data solely on our instructions:

• Stripe — payment processing and DJ payouts. Stripe is an independent controller for the payment and identity data it collects; see the Stripe Privacy Policy.
• Supabase — database, authentication, and file storage, hosted in the EU (Stockholm, eu-north-1).
• Cloudflare — application hosting, content delivery, and security (including bot protection on sign-in).
• Resend — transactional and opt-in email delivery, sent from EU infrastructure.
• PostHog (EU Cloud) — product analytics. Events are captured server-side only; PostHog sets no cookies in your browser and receives no advertising identifiers.

International transfers

Our primary data storage is in the European Union. Where a provider (such as Stripe or Cloudflare) processes data outside the EEA, the transfer is protected by the European Commission's Standard Contractual Clauses and/or an adequacy decision such as the EU–US Data Privacy Framework.

Retention

• DJ account data: kept until you delete your account.
• Transaction and payout records: retained for six (6) years after the end of the financial year, as required by the Finnish Accounting Act, in a form no longer linked to a deleted profile.
• Mailing-list emails: kept until you unsubscribe or the DJ deletes their list.
• Fan session cookies: expire automatically; you can clear them at any time.
• Server logs: kept for a limited period for security purposes, then deleted.

Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these rights, email privacy@cuegain.com. You also have the right to lodge a complaint with your local supervisory authority; in Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Deleting your data

DJs can delete their account at any time in the app under Settings → Danger Zone, or by emailing us. Fans can request deletion of any stored email address by unsubscribing or emailing us. See Account & data deletion for exactly what is removed and what we must retain under bookkeeping law.

Cookies

We use only essential cookies: a signed fan session cookie (to link your payments to your requests), a Supabase authentication cookie for signed-in DJs, and Cloudflare Turnstile's anti-bot token on sign-in. We do not use analytics or advertising cookies, so we do not show a cookie consent banner.

Age

CueGain is designed for use in nightlife venues and is intended for users aged 18 or over. We do not knowingly collect personal data from anyone under 18; if you believe we have, contact us and we will delete it.

Changes

We will post any changes to this policy on this page and update the date above. For material changes affecting DJs, we will also notify you by email.

Contact

Privacy questions and data requests: privacy@cuegain.com. General support: support@cuegain.com.