DJ Request Privacy Policy

We respect your privacy. This policy explains what we collect, why we collect it, and how we handle it.

Last updated: 8/25/2026

• Account info (email, display name) to operate your DJ profile.
• Session data (request settings, event metadata, join code) to run your shows.
• Operational logs (timestamps, device/browser info, coarse locale/IP) for reliability, security, and abuse prevention.
• Payment data is processed by Stripe; we do not store full card numbers. We may store payment records (base amount, optional tip amount, currency, status, Stripe IDs) for accepted paid transactions to reconcile payouts and fees in line with our Terms.
• For free/zero-amount or declined requests, no charge is created; we retain only minimal status metadata (e.g., authorized/declined/expired) for operational accuracy.
• Photo Wall uploads (images and basic metadata) associated with your event.
• Push notification tokens (if you opt in) to send alerts about requests and activity.

• When an eligible DJ requests an AI song suggestion, our server sends the selected request’s title/artist and a limited set of recent accepted titles/artists to Google Gemini. The browser does not send free-form prompts to Gemini.
• AI safeguards may process an account identifier, an irreversible IP-derived digest, usage counters, and the date/version of your 18+ confirmation for security and quota enforcement. Google reCAPTCHA may receive your IP address, browser/device signals, action context, and request-page information to assess automated abuse.
• For artwork lookups, we may query public music metadata/artwork services using song title/artist.
• Gemini requests are configured not to retain interaction state. We do not send card data, account credentials, guest notes, or contact details to Gemini. AI is optional; do not select it if you prefer not to use it.

• To authenticate you and provide core features (requests, Photo Wall, payouts).
• To prevent fraud, secure accounts, and keep sessions safe for venues and guests.
• To improve the product using aggregate, de-identified analytics (not for ad networks).
• To process payments and reconcile platform/processor fees for accepted paid requests, including distinguishing base vs. tip amounts where applicable.
• To communicate important service information (e.g., transactional emails or push notifications if enabled).

• With service providers strictly to run the app (e.g., Firebase, Stripe, hosting/CDN, AI recommendation API).
• To comply with law or protect rights and safety when required.
• We do not sell personal information.

• Guest photos are tied to your event; only approved photos are visible on guest-facing event displays.
• You can permanently remove a photo at any time. Event photo files and records are deleted no later than 30 days after upload unless included in an album.
• Albums and their photo files are deleted 90 days after the album is created.
• We may remove or restrict content to comply with laws or platform policies.

• We retain operational data while you have an account and as required for legal/compliance purposes.
• Expired photo and album content is purged automatically on a recurring schedule, so deletion may complete shortly after the stated deadline.
• You can request deletion; some records may be retained where legally necessary (e.g., payments, security logs, audit trails).

• Web-push/email alerts are opt-in and depend on your device/browser settings.
• Delivery is not guaranteed and may be affected by battery or network restrictions.

• We employ reasonable technical and organizational measures (e.g., access controls; encryption in transit).
• No method of transmission or storage is 100% secure; use strong passwords and protect your devices.

• Used for authentication, preferences, reliability, and feature state (e.g., staying signed in).
• Some features require these to function.

• You may request access, correction, portability, or deletion of your personal data where applicable.
• Contact us to exercise rights or ask questions about this policy.

• We may process data in the United States and other countries where our providers operate.
• We take steps to protect data in accordance with applicable laws when it is transferred internationally.

• The service is not directed to children under 13 (or the age required by your region).
• If you believe we’ve collected data from a child, contact us to request deletion.

• California (CCPA/CPRA): We don’t sell personal information. You may have rights to know, access, correct, delete, and limit use of sensitive personal information. Use the contact below to submit a request.
• EEA/UK (GDPR): Our legal bases include performance of a contract (providing the service), legitimate interests (security, fraud prevention), and consent (notifications/AI features where applicable). You may have rights to access, rectify, erase, restrict, object, and portability. You can also lodge a complaint with your local authority.

We may update this policy from time to time. Your continued use of the service after changes are posted indicates acceptance of the updated policy.

Questions or requests? Email support@djrequest.net.