Privacy Policy

Last updated: June 8, 2026

1. Who we are

Clavis (“we,” “us,” or “our”) operates the Clavis platform, a business management tool for DJs, artists, promoters, and talent buyers. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information we collect

Account information: When you sign up, we collect your name, email address, and role (DJ, venue, or aspiring artist).

Profile information: Information you voluntarily add to your profile — stage name, biography, city, genres, social media links, photos, and rider details.

Gig and business data: Gig bookings, invoices, contracts, and availability you enter into the platform.

Usage data: Standard server logs including IP addresses, browser type, and pages visited. We use privacy-friendly, cookieless page analytics (Vercel Analytics) that collects aggregated page-view counts without tracking cookies, cross-site identifiers, or personal profiles. We do not use advertising trackers.

Communications: Messages sent between users on the platform.

3. How we use your information

  • To provide and maintain the Clavis platform
  • To send transactional emails (password resets, booking notifications)
  • To display your public profile to venues and talent buyers who search the platform
  • To improve our services through aggregated, anonymized analytics
  • To comply with legal obligations

We do not sell your personal data. We do not use your data to train AI models.

4. Data sharing

We share your data only with:

  • Supabase — our database and authentication provider, hosted on AWS infrastructure
  • Brevo — our transactional email provider
  • Stripe — our payment processor. Card details are entered on Stripe's secure pages and never touch our servers
  • AI providers — used for booking-text and rider import features (only the content you explicitly submit)

We do not share your data with advertisers or data brokers.

5. Data retention

We retain your data for as long as your account is active. When you delete your account, your personal data is deleted within 30 days. Some data may be retained longer where required by law.

6. Your rights

You have the right to:

  • Access a copy of your personal data
  • Correct inaccurate data in your account settings
  • Delete your account and all associated data via Settings → Danger Zone
  • Object to certain processing of your data

To exercise these rights or for any privacy questions, contact support.

7. Security

All data is encrypted in transit (TLS) and at rest. We use Supabase's row-level security to ensure users can only access their own data. We perform regular security reviews.

8. Cookies

We use only essential cookies required for authentication (session tokens). We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy as our service evolves. We will notify you of material changes via email or a prominent notice in the app. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy? Contact support.