Privacy Policy

Introduction

Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our DJ request platform ("Marshy" or "Service").

Compliance

We are committed to protecting your privacy and complying with applicable data protection laws:

• ✓ GDPR Compliant (General Data Protection Regulation)
• ✓ CCPA Compliant (California Consumer Privacy Act)
• ✓ Privacy by Design principles

1. Information We Collect

1.1 Account Information

• Name, email address, phone number, and profile picture
• Username and account credentials

1.2 DJ Verification Data

• Business information, tax details, and bank account information for payouts
• Verification documents and identification

1.3 Payment Information

• Processed securely through Stripe (we do not store card details)
• Transaction history and payment amounts
• Multi-currency transaction data

1.4 Location Data

• To show nearby DJs and venues (only when app is in use)
• Venue information for active sessions

1.5 Usage Data

• App interactions, request history, and preferences
• Session participation and engagement metrics

1.6 Device Information

• Device type, OS version, and unique device identifiers
• Push notification tokens

1.7 Referral Data

• If you participate in our referral program, we collect referral codes and commission information
• Collaborator relationships and reward tracking

1.8 Currency Conversion Data

• Transaction amounts in your local currency and EUR conversions for tax compliance
• Exchange rate information

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide and maintain our Service
• Payment Processing: To process payments and facilitate transactions between users and DJs
• Account Verification: To verify DJ accounts and ensure platform security
• Notifications: To send notifications about requests, payments, and account updates
• Service Improvement: To improve our Service through analytics and user feedback
• Legal Compliance: To comply with legal obligations and prevent fraud
• Referral Program: To manage the collaborator/referral program and process commission payments
• Tax Compliance: To calculate taxes, generate invoices, and comply with Spanish tax regulations

3. Information Sharing

3.1 With Service Users

• With DJs: Your username and request details when making a request
• With Requesters: DJ profile information and session details

3.2 With Third Parties

• Payment Processors: Necessary information for transaction processing (Stripe)
• Venue Partners: Aggregated, anonymized data about music preferences
• Service Providers: Third parties that help us operate our Service

3.3 For Legal Reasons

• When required by law or to protect rights and safety
• To enforce our Terms of Service
• To protect against fraud and abuse

4. Third-Party Services

Our Service integrates with the following third-party services:

Each third-party service has its own privacy policy governing their use of your data.

5. Data Security

We implement industry-standard security measures to protect your information:

• ✓ Encryption: Industry-standard encryption for data in transit and at rest
• ✓ Access Control: Access to personal data is restricted to authorized personnel only
• ✓ Security Audits: Regular security audits and penetration testing are conducted
• ✓ Secure Coding: We implement secure coding practices and regular security updates
• ✓ Payment Security: Payment information is tokenized and never stored on our servers
• ✓ Two-Factor Authentication: Available for additional account security

6. Your Rights and Choices

Under GDPR and other privacy laws, you have the following rights:

7. Data Retention

• 7.1 Active Accounts: Data retained while account is active
• 7.2 Transaction Records: Kept for 7 years for tax and legal compliance
• 7.3 Deleted Accounts: Personal data removed within 30 days (except where legally required)
• 7.4 Analytics Data: Aggregated and anonymized after 24 months
• 7.5 Support Communications: Retained for 2 years for quality assurance

8. International Data Transfers

• Your data may be transferred to servers outside your country of residence
• We ensure appropriate safeguards are in place for international transfers
• By using our Service, you consent to these transfers
• We comply with applicable data protection frameworks (GDPR, CCPA, etc.)

9. Children's Privacy

• Our Service is not intended for users under 18 years of age
• We do not knowingly collect data from children under 18
• If we discover underage user data, we will promptly delete it
• Parents can contact us if they believe their child has provided us information

10. Cookie Policy

10.1 Types of Cookies

• Essential Cookies: Required for app functionality
• Analytics Cookies: Help us understand usage patterns

10.2 Cookie Management

• You can manage cookie preferences in your device settings
• Third-party services may set their own cookies subject to their policies

11. Changes to Privacy Policy

• We may update this Privacy Policy periodically
• Material changes will be notified via email or in-app notification
• Review the "Last Updated" date to see when changes were made
• Continued use after changes indicates acceptance of the updated policy

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Additional Information for EU Users

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: To provide the Service you've requested
• Legitimate Interest: To improve our Service and prevent fraud
• Legal Obligation: To comply with tax and financial regulations
• Consent: For marketing communications (which you can withdraw at any time)

Data Protection Officer

For privacy-related inquiries, contact: marshy.app.dev@gmail.com

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

Additional Information for California Users (CCPA)

Categories of Personal Information

We collect and have collected in the past 12 months:

• Identifiers (name, email, phone)
• Commercial information (transaction history)
• Geolocation data
• Internet activity (app usage)
• Professional information (DJ business details)

Your California Privacy Rights

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, contact: marshy.app.dev@gmail.com