Short version: we collect the minimum needed to run the service. Your songs are yours. We don't sell your data and we don't track you. This page lists every outside company that touches your data, what it receives and why.
We collect only what's needed to make GigFrame work:
We never see or store your card number: payments are handled by Stripe. We keep a Stripe customer ID and your plan. We don't read the content of your songs, except to serve them back to you or when you ask us to help with a problem.
GigFrame does not run everything itself. These companies process data on our behalf. The list matches what the service actually does; when we add or remove one, we update this page.
| Company | What it receives | Why | Where |
|---|---|---|---|
| Cloudflare | What it receivesYour account, songs, setlists and bands (database), uploaded files (storage), the web app and this site. | WhyHosting, database, file storage and DDoS protection. | WhereGlobal network, not pinned to one country. |
| Hetzner | What it receivesA second copy of your uploaded files (object storage) and the audio we analyse on our own servers (chords, tabs, parts, lyrics). | WhyFile storage and AI analysis on our own servers. | WhereFalkenstein, Germany. |
| fal.ai | What it receivesAudio you send for splitting into parts or for tab transcription. | WhyExternal AI audio models. | WhereUnited States. |
| AssemblyAI | What it receivesVocal audio you send for lyrics transcription. | WhySpeech-to-text. | WhereEuropean Union (EU endpoint). |
| OpenRouter | What it receivesPhotos and PDFs of charts (AI Smart Import), text for translation, cover search keywords. OpenRouter routes each request to the underlying AI model provider (for example Google). | WhyAI vision and language models. | WhereUnited States; the underlying model provider may process elsewhere. |
| Resend | What it receivesYour email address and the content of emails we send you (verification, password reset, notices). | WhySending email. | WhereUnited States. |
| Stripe | What it receivesYour email address, your plan and the payment. Card details go straight to Stripe and never pass through our servers. | WhyPayments (test mode until launch). | WhereIreland and United States. |
Only when you use that feature:
We do not sell, rent, or share your data for advertising. Outside the companies above, your data stays with us. Where a company is outside the EU/EEA, we are putting formal Data Processing Agreements (GDPR Article 28) in place where they are not signed yet, and until then we only send what the feature needs.
The open-source models and libraries inside GigFrame, with their licenses, are listed on our licenses page.
Your account data and song details live in Cloudflare D1. Uploaded files are stored in Cloudflare R2 and, as a second copy, in Hetzner Object Storage in Falkenstein, Germany. Live-performance state is kept temporarily in Cloudflare KV. Data is encrypted in transit; Cloudflare also encrypts stored data at rest.
When you use an AI feature, the file or text you submit goes to the service shown in the table above: photos and PDFs of charts to OpenRouter, audio for splitting into parts or tabs to fal.ai, vocals for lyrics to AssemblyAI. Chord and other audio analysis runs on our own servers at Hetzner.
AI output can be wrong. Check it before you rely on it.
PDF metadata (title, author, creation date) is removed before a PDF is sent to OpenRouter. By default, your band's songs and AI import results are not used to train AI models; band admins can see this setting under AI Training & Privacy in the band settings, and can switch Smart Import to local-only so imports are not sent to a cloud provider.
By uploading audio, you confirm you have rights to the content. GigFrame does not provide license to copyrighted material, processes your audio only to provide the service you asked for, and claims no ownership of your content.
No tracking. We use no analytics, no advertising cookies, no tracking pixels and no fingerprinting, on this site or in the web app.
This site sets no cookies. Your language choice is saved in your own browser (local storage) and is never sent to us.
The web app uses one session cookie to keep you logged in. It is strictly necessary and is not shared with third parties.
Our pages load fonts from Google Fonts, so your browser contacts Google and your IP address is visible to them. This sets no cookie.
You have the following rights under GDPR:
We respond to requests within 30 days, at [email protected].
GigFrame is not directed at children under 16. If you are under 16, please do not create an account. If we become aware that a user is under 16, we will delete their account.
We may update this privacy policy as GigFrame evolves. When we make significant changes, we will update the "Last updated" date at the top of this page.
Questions about your data or this policy? Email us at [email protected].
GigFrame is operated by an independent developer based in Belgium.