**DataBand Privacy Policy**
**Last updated:** July 2026
**1. General Information**
This Privacy Policy describes how we collect, use, and protect the personal data of users ("Users") who access and use the DataBand platform. Data processing is carried out in compliance with current personal data protection laws, specifically Regulation (EU) 2016/679 (GDPR).
**2. Data Controller**
The Data Controller for personal data is DataBand. For any information, privacy-related requests, or to exercise your rights, you can contact us at: mydataband@gmail.com.
**3. Collected Data**
Through the platform, we collect the following types of data:
* **Registration and account data:** username, email address, and other information voluntarily provided during registration and band setup.
* **Band and member data:** information and details regarding band members, independently uploaded by band managers/leaders within the platform for management purposes.
* **Payment data:** subscription transactions are processed and managed entirely by secure third-party services (such as Stripe). DataBand does not record or store full credit card details.
* **Technical and navigation data:** IP addresses, browser types, and technical cookies necessary for the proper functioning and security of the platform.
**4. Purpose of Processing**
Personal data is used exclusively for the following purposes:
* To provide, manage, and maintain the DataBand platform's management services.
* To manage cloud storage space, files, and repertoire.
* To handle billing, subscriptions, and administrative transactions.
* To send service communications, system alerts, and provide technical support.
* To comply with specific legal, accounting, and tax obligations.
**5. Legal Basis for Processing**
Data processing is based on: the performance of a contract to which the user is a party (provision of DataBand software services), explicit consent (where required), and compliance with legal obligations to which the Controller is subject.
**6. Data Retention**
Personal data will be kept for the time strictly necessary to achieve the purposes for which it was collected. Billing and administrative data will be retained for the periods prescribed by current tax and civil laws. Upon permanent account closure, data will be deleted or anonymized, subject to any specific legal retention periods or periodic security backup archives.
**7. Disclosure to Third Parties**
Data is not sold or transferred to third parties for marketing or profiling purposes. It may be shared exclusively with external technical service providers, appointed as Data Processors, to the extent strictly necessary for the infrastructure to function (e.g., hosting service providers, cloud storage management, and payment gateways).
**8. User Rights**
Under GDPR regulations, the User has the right to:
* Access their personal data to know its origin and processing purposes.
* Request the update or rectification of inaccurate data.
* Request the deletion of data ("right to be forgotten"), provided there are no legal obligations requiring its retention.
* Obtain restriction of processing or object to it.
* Request data portability in a structured, readable format.
These rights can be exercised by sending a communication to: mydataband@gmail.com.
**9. Changes to this Policy**
We reserve the right to update or modify this Privacy Policy. Any significant changes will be communicated on the platform or via email. Continued use of the services following such changes will constitute acceptance of the new Policy.