Privacy Policy

Last updated: June 2026

1. Who is responsible for your data

nGage.band ("nGage", "we", "us") is the data controller for personal data we process to run our service and our website. We are established at Burgtstraat 1, 6701 DA Wageningen, The Netherlands (KvK 09213052, VAT NL001642521B87). For privacy questions or to exercise your rights, contact us at info@ngage.band.

Controller and processor roles. For the data needed to run your account and billing, we act as controller. For personal data you add about other people (band members, contacts, relations), you are the controller and we act as your processor. Please also see our Data Processing Agreement which you agree to at sign-up

2. Information we collect

We collect:

  • Account data: your email address and login credentials.
  • Band and member data you enter: names, roles, contact details and similar information about your band and its members.
  • Content you create: songs, setlists, gigs, rehearsals, riders, newsletters and related data.
  • Financial data: invoicing and payment information needed to manage your subscription.
  • Integration data: calendar and storage data you choose to connect (for example Google Calendar, Microsoft Calendar, Dropbox, WebDAV).
  • Technical data: limited log and session data needed to operate the Service securely.

3. How and why we use your data (legal bases)

We process personal data on the following legal bases under the GDPR:

  • To provide and maintain the Service and your account: performance of our contract with you.
  • To process payments and send service-related communications: performance of our contract and compliance with legal obligations.
  • To keep invoicing and financial records: compliance with a legal obligation (Dutch tax law).
  • To respond to support requests and improve and secure the Service: our legitimate interests in running and improving a reliable service.
  • To enable integrations you switch on: your consent.

We do not use your data for advertising, profiling or data mining.

4. Data storage and security

Your data is stored on servers located in Germany within the EU. We apply appropriate technical and organisational measures to protect personal data, including access controls and encrypted connections. No system is completely secure, so we cannot guarantee absolute security.

5. How long we keep your data

We keep account and content data for as long as your account is active. When you delete your account, your personal data and content are deleted immediately and permanently after a series of confirmation warnings, except where we must keep data longer by law. Invoicing and financial records are retained for 7 years to comply with Dutch tax law. Export your data before confirming deletion, as deleted content cannot be recovered.

6. Who we share data with

We do not sell your personal data and do not share it for marketing purposes. We share data only with:

  • Service providers (sub-processors) acting on our behalf, including our hosting provider (Hetzner, EU) and our payment provider (Mollie). These providers process data only on our instructions.
  • Third-party integrations you explicitly enable (such as Google, Microsoft, Dropbox or a WebDAV provider).
  • Authorities, where required by law or legal process, or where necessary to protect our rights or the safety of users.

A current list of sub-processors is available on request.

7. International transfers

We keep your core data within the EU. If you enable a third-party integration (for example Dropbox or Google), data may be transferred to servers outside the EU under that provider's safeguards, such as the EU Standard Contractual Clauses. Those services have their own privacy policies, which we recommend you review.

8. Cookies and tracking

We use only essential cookies needed to keep you logged in and to operate the Service. We do not use advertising or cross-site tracking cookies, and we do not run analytics that identify individual users.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • delete your account and associated personal data;
  • export your data in a portable format;
  • restrict or object to certain processing;
  • withdraw consent at any time, without affecting prior processing.

To exercise these rights, contact us at info@ngage.band. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.

10. Children's privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "last updated" date above shows when the policy was last revised.

12. Contact

nGage.band Burgtstraat 1, 6701 DA Wageningen, The Netherlands info@ngage.band KvK 09213052 - VAT NL001642521B87

Our commitment: no ads, no tracking, no data mining. Your music is yours, not ours to monetise.