Privacy Policy

This policy explains what personal data Link4Music processes, why, who receives it, how long it is kept and what rights you have.

1. Who is responsible

The controller of your personal data is Nejc Drole, Slovenia. Contact: support@link4music.com.

2. Data we process

Account data. Your email address, password (stored only in hashed form by our authentication provider), optional display name, and account timestamps. Your email address is never shown publicly.

Profile data. Profiles you create for a musician, band or location: name, type, city, country, map position, descriptions, genres, instruments, performance and venue details, and what you are looking for. Published profiles are public. Draft profiles are visible only to the people who manage that profile and, where needed for reports or verification, to Link4Music administrators.

Photos and links. Photos you upload and links you add (for example a website or music/social profiles). On published profiles these are public. Links open the external site directly; we do not embed third-party content.

Location. You choose a map position. Musician and band profiles are always shown approximately: coordinates are rounded to about 1 km before they are stored. Location profiles can choose approximate or exact; exact positions are shown as a precise pin. We do not track your device's location.

Inquiries and messages. Inquiries between profiles (including optional details such as date, event type, place, audience size and budget), replies, their status, and which profile and account wrote them. They are visible to the people who manage the profiles involved.

Verification requests. An explanation and an optional evidence link you submit, reviewed by Link4Music administrators.

Reports. Reports about profiles: reason, explanation, which content is reported (for potentially illegal content), reporting account, and how the report was handled, including moderation decisions and appeals.

Email notifications. A record of transactional emails we send (event, recipient account, template and delivery status).

Technical and security data. When you use the site, our hosting and backend providers process your IP address, browser/device information, request times and similar technical data, and keep sign-in and security logs, in order to deliver the service and protect it against abuse.

3. Required information

An email address and password are required to create and use an account. Certain profile information is required if you choose to create and publish a profile. Other information marked as optional does not have to be provided. If you do not provide information required for a particular feature, you will not be able to use that feature.

4. Why we process it and on what legal basis

• To provide Link4Music under our Terms of Service — accounts, profiles, discovery, inquiries, messages and service notifications (performance of a contract, Art. 6(1)(b) GDPR).
• To keep the service secure, prevent misuse, handle reports and verification, and keep records of emails sent (our legitimate interests in a safe and trustworthy platform, Art. 6(1)(f) GDPR).
• To comply with legal obligations where they apply (Art. 6(1)(c) GDPR).

5. Emails

We send transactional emails about your account (for example sign-up confirmation and password reset) and about your inquiries: a new inquiry to a profile you manage, a decision on an inquiry you sent, and new messages. They are sent from noreply@notify.link4music.com. We do not send marketing emails.

6. Who receives your data

• Everyone: published profile content, photos, links and map position (approximate or exact as described above).
• Other users you interact with: managers of the profiles involved in an inquiry see its content and messages.
• Link4Music administrators: reports, verification requests and profile data needed to handle them.
• Service providers: Lovable (website hosting, using Cloudflare infrastructure), Lovable Cloud (database, authentication and file storage) and Lovable Email (sending emails). They process data to run the service for us.
• OpenStreetMap: map images are loaded directly from OpenStreetMap's tile servers, and place search in the profile editor sends your search text to OpenStreetMap's Nominatim service. Your browser connects to them directly, so they receive your IP address and browser information. OpenStreetMap is an independent service with its own privacy policy.

We do not sell personal data.

7. Where data is stored

Our database is hosted in the United Kingdom. Our providers operate internationally, so some data (for example technical data handled by hosting and email delivery) may be processed in other countries, including outside the European Economic Area.

8. Cookies, storage and tracking

Link4Music uses no advertising, marketing analytics or non-essential tracking. We store only what is needed to keep you signed in (your authentication session in your browser's storage). Our font is hosted on our own site. Because this storage is strictly necessary, we do not show a cookie banner.

9. How long we keep data

• Account and profile data: until you delete the profile or your account.
• Email delivery records: 90 days.
• Resolved or dismissed reports: 24 months after they were handled.
• Decided verification requests: 24 months after the decision. Evidence links are removed when the profile is deleted.
• Moderation decisions and appeals: 24 months after the decision, the lifting of a restriction or the appeal decision, whichever is later. Decisions that still restrict a profile are kept while the restriction applies.
• Inquiries and messages: there is no fixed deletion period. They are kept while at least one participating profile still exists, and are removed once both profiles have been deleted.
• Provider technical and security logs: kept according to our providers' own retention practices.

Cleanup runs automatically every day.

10. Deleting profiles and your account

Deleting a profile removes its photos, links, details, location and descriptions. If the profile took part in inquiries, the other participant keeps the conversation, including message text, but your profile is shown only as “Deleted profile” without a link or other details. Open inquiries are closed. A minimal placeholder remains only while a conversation, report or verification record still refers to it.

Deleting your account is immediate and cannot be undone. It requires your password and typing DELETE. Your sign-in, email address and display name are removed, and profiles you solely manage are deleted as described above. Reports and verification requests you sent are kept without your identity. If a profile you own still has other managers, you must transfer ownership first.

11. Your rights

Depending on the circumstances and applicable law, you may have the right to access your personal data, correct inaccurate data, request deletion or restriction of processing, object to certain processing, and receive certain personal data in a portable format. You can edit or delete profiles and delete your account yourself. For any other request, including a copy of your data, contact support@link4music.com.

You also have the right to lodge a complaint with a supervisory authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec), or the authority in your own country.

12. Age

Link4Music is only for people who are at least 18 years old.

13. Changes

We may update this policy. The date at the top shows the latest version; significant changes will be announced on the site.