Skip to content
PatchBay
Claim patch
Legal · Privacy policy

Privacy
policy

Effective ⟨launch date⟩.

01

What we store

  • Account

    your email address and sign-in identifier, supplied by our sign-in provider (WorkOS) and stored with your PatchBay account.

  • Profile

    everything you enter during onboarding and editing: roles, gear, skills, availability, city, and the audio samples you upload.

  • Location

    never your exact position. Every profile gets a map pin at the centre of the city you typed, blurred by roughly a kilometre before it is saved. Sharpening that pin to your neighbourhood with your browser is optional, and the sharpened point is blurred the same way; only the blurred point exists in our systems. You can reset the pin to city level at any time, and a city we cannot place gets no pin.

  • Requests

    collaboration requests you send or receive, plus local requests you post to authenticated musicians in the same city.

  • Messages and files

    what you send in chat, so your conversations work. For the first supported SoundCloud or Dropbox link in a message, we may also store the link, provider, title, and short description returned by that provider. We do not embed its player or store its thumbnail.

  • Response-time samples

    how long you take to reply, used only to compute the response-time badge on your own profile.

  • Notification choices

    whether you want request and unread-message alerts. If you enable browser notifications, we also store the push endpoint and encryption keys issued by your browser's push service, plus its optional expiry time.

  • Contact and report emails

    emails sent to hello@patchbay.city and report@patchbay.city are forwarded by Cloudflare Email Routing to the operator's business inbox. We use them to answer questions and appeals and handle copyright and abuse reports.

  • Joining payments

    card details stay with Stripe. We store the checkout status, amount and currency, Stripe session and event references, timestamps, and the account identifier needed to match a completed purchase. We may send Stripe your account email to prefill checkout.

02

What we don't store

No exact coordinates. No card or bank details: Stripe collects those on its own checkout. Payments between musicians still happen outside PatchBay. No advertising trackers and no cookies for analytics: we use Vercel Web Analytics, which is cookie-free and aggregates page views without identifying you.

The one thing we count ourselves is profile views, and that counter is first-party and cookie-free too: a view records which profile was looked at and the hostname of the site the visit came from, and nothing else. No IP address, no browser or device details, nothing that identifies the visitor. Those records are deleted after 90 days.

03

Who processes data for us

Vercel (hosting and analytics), Convex (database and realtime), Cloudflare R2 (audio file storage), Cloudflare Email Routing (forwarding incoming contact and report emails to the operator's business inbox), WorkOS (authentication), Stripe (joining checkout), and Resend (email delivery). Your browser's push service processes an encrypted, generic request or message alert if you enable browser notifications. Resend receives the destination email, the sender's display name, the alert type, and a PatchBay link, but not the request or message body. Each processor receives only what its job needs.

04

Deleting your account

Settings → Danger zone deletes your account in place. It erases your profile, your audio samples and the files behind them, your local-request posts, every collaboration request you sent or received, your browser push subscriptions, and the text, attachments, and stored link previews of every message you sent. Empty message rows remain so conversations still read in order for the people you talked to. The founding-slot audit record keeps its number but no longer points at anyone.

Checkout, entitlement, and signed-webhook references remain as closed payment records and cannot restore a deleted account or grant it access. We do not set an automatic retention period here; how long those payment references must remain is ⟨confirm after legal review⟩.

05

Your rights

You can see almost everything we hold about you on your own profile and in your own chats. For a full export, or anything else: hello@patchbay.city, answered by a human.