Privacy Policy

This Privacy Policy explains how Spendy LLC ("we", "us") handles personal data collected through BedroomDJs (bedroomdjs.com). We aim to collect only what is needed to run the Service.

About the Service

BedroomDJs is a platform for user-generated content: users create accounts, DJs publish public profiles and links to their streams, events, and gear. Anything you add to a public DJ profile (including handle, bio, location, images, genres, gear list with links, event listings, and streaming-platform references) is, by design, visible to the public and to search engines.

Data we collect

• Account data: email address, display name, and authentication identifiers.
• Profile data (DJs): handle, bio, location, genres, images/logo, links, gear list, events, and streaming-platform references you choose to add.
• Social graph: the accounts you follow and who follows you on the Service.
• Booking / hiring inquiries: if you contact a DJ about a work opportunity, the contact details and opportunity details you submit (such as name, email, phone, organization, links, dates, location, budget, and your message), plus the status and any private notes the receiving DJ adds.
• Communication preferences: your notification opt-ins (for example, live or new-event emails per DJ) and email delivery events.
• Application data (DJs): the information you submit when applying for a DJ profile and the review outcome (pending, approved, waitlisted, or denied).
• Usage data: basic technical logs (IP address, user agent, timestamps) used to operate, secure, and debug the Service.

We do not sell personal information and we do not use it for cross-context behavioural advertising.

How we use data

• Provide, maintain, and secure the Service.
• Display public DJ profiles, live status, and events.
• Deliver booking/hiring inquiries to the DJ you contact and let them manage and respond to them.
• Send the email notifications you opted in to, and review DJ applications.
• Communicate service-related messages (auth, changes).
• Enforce these Terms and investigate abuse or safety issues.
• Comply with legal obligations.

Booking & hiring inquiries

When you send an inquiry to a DJ, you are deliberately disclosing your contact and opportunity details to that DJ. The DJ receives, stores, and independently controls that information and may keep it after you delete your account or after we delete our copy; they may also add private notes about the request. We are not responsible for how an individual DJ handles information you send them. Only send what you are comfortable sharing, and never include payment card data, government ID numbers, or health information. We may retain inquiry records for a limited period for abuse prevention, safety, and dispute resolution.

Email notifications

Optional emails (for example, when a DJ you follow goes live or adds an event) are sent only where you have opted in, and you can turn them off at any time from the relevant toggle or your account settings. We may still send transactional and security emails while your account exists. Emails are delivered through an email service provider acting on our behalf.

Administrators & moderation

A small number of authorized administrators and moderators can access account and DJ application data to review applications, investigate abuse reports, enforce our Terms, and support users. Access is limited to what is needed for those purposes.

Affiliate links

DJs may include affiliate or referral links in their gear list or profile. When you click those links you are leaving the Service and the destination merchant (and any affiliate network in between) may set cookies and collect data under its own privacy policy. We do not receive purchase data from those links.

Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we rely on: (a) performance of a contract to provide the Service; (b) our legitimate interests in running, securing, and improving the Service; (c) your consent where required; and (d) compliance with legal obligations.

Service providers & disclosure

We use trusted infrastructure providers (including Supabase for database/auth, Cloudflare for hosting, Resend for transactional email, and Lovable for the platform) who process data on our behalf under appropriate agreements. We may also disclose data where required by law or legal process, to protect the rights, safety, or property of users or the public, or in connection with a merger, acquisition, or sale of assets. Data may be transferred to the United States or other countries. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

Retention

We keep personal data for as long as your account is active. You may delete your account at any time from your account settings; after deletion we remove or de-identify your personal data, except where a limited copy must be retained to comply with law, resolve disputes, prevent abuse, or enforce our agreements. Publicly cached copies of previously public content (search engines, archives) are outside our control.

Booking inquiries you sent may remain in the receiving DJ's records after your account is deleted, since that DJ independently controls their copy; you can ask the DJ directly to delete it, or contact us and we will pass the request on where we reasonably can.

Security

We use access controls, row-level database security, and encrypted transport to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent. Residents of the EEA/UK (GDPR/UK GDPR), Switzerland, California (CCPA/CPRA), Brazil (LGPD), Canada (PIPEDA), Australia, and other jurisdictions with similar laws are entitled to those local protections. To exercise a right, contact us at the address below. You also have the right to lodge a complaint with your local data-protection authority.

Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK, or the minimum digital-consent age in your country). We do not knowingly collect personal data from children.

Third-party platforms

Links to external streaming, social, and merchant sites are controlled by those third parties and governed by their own policies. We are not responsible for their practices.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

See also our Terms of Service.