Privacy Policy

What we collect

Depending on how you use the platform, we collect:

• Account—Your email, your name and avatar when you sign in with Google or Facebook, and a securely hashed password if you use email and password. We never store your password in plain text.
• Artist content—Everything you upload to build your site and press kit: biography, photos, music links, gig dates, press materials and similar content you choose to publish.
• Press-kit access—When someone opens your protected press kit, we record access events (such as date, a coarse location and the link used) so you can see who viewed it. IP addresses are hashed, never stored raw.
• Payments—Subscription and billing data is handled by Mercado Pago or Stripe, depending on the payment method you choose. We store your plan and subscription status, but we never see or store your card numbers.
• Technical and usage—Basic technical data such as cookies, server logs and device or browser information, used to keep the service running and secure.

Cookies

We keep cookies to a minimum and do not use advertising trackers. We use:

• Session—An essential authentication cookie that keeps you signed in. Without it you cannot log in.
• Language—A small cookie that remembers whether you prefer Spanish or English.
• Analytics consent—A cookie that records your choice about press-kit access analytics, so we only count visits when consent is given.

How we use your data

We use the data above to:

• Provide and operate your website and press kit.
• Authenticate you and keep your account secure.
• Manage your subscription and billing.
• Send transactional emails such as verification, password resets and billing notices.
• Detect and prevent abuse, fraud and technical problems.

Who we share data with

We do not sell your data. We rely on these third-party processors to run the service, each only for its stated purpose:

• Google—Sign-in (OAuth) and address-to-map geocoding for gig locations.
• Facebook—Sign-in (OAuth).
• Mercado Pago—Subscription payments and billing in Argentine pesos (handles card data on our behalf).
• Stripe—Subscription payments and billing in US dollars by international card (handles card data on our behalf).
• Resend—Delivery of transactional emails.
• Cloudflare R2—Storage of the images and files you upload.
• Render—Application hosting and the PostgreSQL database.
• Google Maps—Geocoding gig addresses to coordinates for the tour map.
• Anthropic—Optional AI assistance when you ask it to help draft your biography.
• Sentry—Server-side error monitoring to fix bugs (no browser tracking).

How long we keep it

We keep your data while your account is active. If your subscription lapses, your content is retained for a limited grace period so you can reactivate without losing it; after that it may be removed.

When you delete your account, we perform a hard purge: your account, artist content and associated data are permanently removed, except records we are legally required to keep (for example, billing history).

Your rights

You can request access to, correction of, or deletion of your personal data.

To delete your account and data, follow the data deletion instructions.

For any privacy question or request, contact us at hola@setkitapp.com.

Changes to this policy

We may update this policy as the product evolves or the law requires. When we make material changes, we will update the date above.