Privacy Policy

1. Who We Are

Tuneholic Entertainment is an artist management company based in Pune/Mumbai, India. We operate an online portal at www.tuneholicentertainment.com/artist that helps professional musicians manage bookings, gigs, and payments. For any privacy-related queries, contact us at tuneholicindia@gmail.com.

2. What Data We Collect

• Profile information: Stage name, genre, performance type (solo / duo / band), email address, phone number, WhatsApp number, Instagram handle, and city of residence.
• Booking and performance data: Gig dates, venues, performance slots (Brunch / Evening / Night / Midnight), and payment / payout amounts.
• Authentication data: A PIN you create to log in to the artist portal.
• Notification preferences: Whether you have enabled push notifications or WhatsApp alerts for new gig updates.
• Consent records: Date and time you agreed to these terms, so we can demonstrate lawful processing under the DPDP Act.

We do not collect government IDs, Aadhaar numbers, bank account details, or any financial account information from artists.

3. Why We Process Your Data

We process your personal data for the following purposes, each with your consent:

• Booking coordination: To assign you to gigs, confirm dates, and manage your performance schedule.
• Gig notifications: To send you updates about confirmed, changed, or cancelled bookings via WhatsApp and push notifications.
• Payment and payout tracking: To record what you have been paid for each performance.
• Performance scheduling: To display your upcoming and past gigs on your artist dashboard.
• Financial audit compliance: To retain booking records for GST and statutory purposes as required by Indian law.

4. Who We Share Your Data With

We do not sell your personal data. We share it only with the following technology service providers ("data processors") who help us run the platform:

• Supabase, Inc. (USA) — Our database and authentication provider. Your data is stored on Supabase servers, which may be in the United States. Supabase is SOC 2 Type II certified.
• Vercel, Inc. (USA) — Our web hosting and application delivery provider. Vercel runs the platform code and may temporarily process request data (such as IP addresses) when you use the portal.

Both providers are located outside India. By using our platform, you consent to this cross-border transfer of your personal data.

5. How Long We Keep Your Data

• Profile data (name, contact details, login PIN): Deleted immediately and permanently when you delete your account.
• Booking records (gig dates, venues, payment amounts): Retained for 2 years after account deletion for GST / financial audit compliance under Indian law, then permanently deleted.
• Consent records: Retained indefinitely as required proof of lawful consent under the DPDP Act 2023.

6. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access: View all personal data we hold about you via the "My Data" screen in your artist portal.
• Right to correction: Update your profile at any time via the "Edit Profile" screen.
• Right to erasure: Delete your account and all associated data instantly using the "Delete Account" button in your portal settings.
• Right to nomination: You may nominate another individual to exercise your data rights on your behalf. Please contact us by email to register a nominee.
• Right to grievance redressal: You have the right to raise a complaint with our Grievance Officer (see Section 8) and, if unsatisfied, to approach the Data Protection Board of India.

7. Children's Privacy

Our platform is for adults (18 years and older) only. We do not knowingly collect data from anyone under 18. If we learn that a minor's data has been submitted, we will delete it immediately.

9. How We Protect Your Data

We use industry-standard security measures including encrypted storage (bcrypt-hashed PINs), HTTPS-only connections, server-side authentication, and rate limiting on all API endpoints. Access to your data is restricted to authorised Tuneholic personnel and our technology processors listed above.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via WhatsApp or in-app notification before the changes take effect.

8. Grievance Officer

If you have any concerns, complaints, or requests regarding your personal data, please contact our Grievance Officer:

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India once it is constituted under the DPDP Act 2023.