Privacy Policy

Privacy Policy
Last Updated: October 8, 2026
Your privacy is important to us at Rythmeet. This Privacy Policy explains how Rythmeet, Inc. collects, uses, stores, discloses, and otherwise processes personal information through our website, mobile application, and related platform features, including profiles, listings, bookings, payments, messaging, ratings, reviews, calendar synchronization, rewards, discounts, and customer support.
This Privacy Policy also applies to the Rythmeet platform, including the mobile application and all features related to professional profiles, pricing and availability displays, booking requests and confirmations, messaging, and public ratings and reviews. Rythmeet, Inc. is a company incorporated in Delaware, United States. We offer the platform to users in the United States and in the European Union, the European Economic Area, the United Kingdom and Switzerland. Our servers are located in the United States; Section 9 (Data Transfers) explains the safeguards that apply when your data leaves the EU.
The purpose of this Privacy Policy is to describe how Rythmeet, Inc. (“we”, “us”) collects, uses, stores and shares information about you through our online interfaces owned and controlled by us, including https://www.rythmeet.com/ (hereinafter “Website”) and related services. Please read this notice carefully. If you do not understand any aspects of our Privacy Policy, please feel free to contact us at [email protected] or our designated privacy counsel below. Your use of the Website is also governed by Terms of Use.
We may update this Privacy Policy occasionally as we improve our services, including expanding professional features like availability calendars, booking management, or reviews; the most current version is always available on our Website.
Contact information (data controller)
Rythmeet, Inc
4545 Center Boulevard
11109, Long Island City, NY, USA
[email protected]
For any question or request about your personal data, including the rights described in Sections 8 and 14, write to [email protected] with "Privacy" in the subject line.

Designated Privacy Counsel:
William McDiarmid
Rubin and Rudman LLP
53 State Street, 15th Floor, Boston, MA 02109
Phone: 617-330-7112
 Email: [email protected] 

1. Information We Collect
When you sign up or create a profile: We require some information to provide you with an account. 
When, why and how we process data: 
	•	Account management
	•	Customer support
	•	Communication
	•	Profile visibility and search functionality
	•	Booking requests and confirmations
	•	Availability and pricing display
	•	Public ratings and reviews
	•	Analytics
	•	Exercise, enforce, and comply with legal rights and obligations
	•	To operate the Website and services (including professional filters and booking tools)
What data is processed: 
**: This data is Personal Information only if it relates to an identifiable natural person
*: Required
Sign up
	•	Email*
	•	Password*

Personal information
	•	First and last name
	•	Birthdate
Musician profile
	•	Profile pictures*
	•	Artist name*
	•	Overall skill level*
	•	Location*
	•	Performance rate*
	•	Music genres played*
	•	Keywords
	•	Description*
	•	Media links
	•	Social media links
	•	Vocalist skills and level
	•	Instrument played and level
	•	Activity performed
	•	Collaboration settings

Band profile
	•	Band images*
	•	Band name*
	•	Location*
	•	Band skill level*
	•	Instruments played and languages
	•	Music genres*
	•	Band activities
	•	Performance rates
	•	Media links
	•	Overall level of the band*
	•	Experience and description*

Teacher profile
	•	Teacher profile image*
	•	Teacher name*
	•	Location*
	•	Time zone*
	•	Gender
	•	Teaching experience*
	•	Music genres taught*
	•	Languages*
	•	Teaching credentials
	•	Instruments taught & level
	•	Vocalism taught & level
	•	Availability
	•	Pricing*
	•	Booking settings*
	•	Media links

Event organizer profile
	•	Event organizer profile images*
	•	Organization name*
	•	Location*
	•	About organization*
	•	Event types*
	•	Notable experience
	•	URL to websites and social media

Listing for a studio**
	•	Studio images*
	•	Services offered
	•	Space type*
	•	Studio name*
	•	Description*
	•	Location*
	•	Time zone*
	•	Area size
	•	Capacity*
	•	Key features
	•	Amenities
	•	Ownership*
	•	Booking settings*
	•	Pricing*

Listing for a venue**
	•	Venue images* Venue type*
	•	venue name*
	•	Description*
	•	Location*
	•	Time zone*
	•	Area size
	•	Capacity*
	•	Equipment
	•	Key features
	•	Event types hosted
	•	Amenities
	•	Additional facilities
	•	Ownership
	•	Pricing*

Location Information 
	•	When users create profiles or listings, we may process location-related information such as city, state, ZIP code, listing address, or approximate map location. This information allows users to discover relevant services and listings near them and helps facilitate bookings and search results
	•	The location information that a user voluntarily enters into Rythmeet may be visible to other Rythmeet users.

     

Legal grounds:
We process the data based on:

	•	Performance of a contract. This information is used to provide discovery, availability, pricing, booking, and messaging services.
	•	Your consent, if you provided additional optional information beyond required profile fields.
	•	Legitimate interest. This information is used to operate and improve the platform, including analytics and fraud prevention.
Retention period:
	We save the data:
	•	Until you delete the information in your account
	•	Until you delete the account / profile
	•	Until Rythmeet deletes the account or information
	•	Five years after your last activity on the platform (we email you 30 days before an inactive account is deleted, and signing in once keeps it)
(whichever moment comes earlier)

When you use the website: Some information may be generated during the use of the website. 
When, why and how we process data:
	•	Customer support
	•	Communication
	•	Profile Visibility
	•	Exercise, enforce, and comply with legal rights and obligations
	•	To operate the website and services
	•	To create usage statistics
What data is processed:
Profile information: Information you post such as messages, likes, posts and reactions.
Rewards and platform activity data: We may collect and process information relating to your activity on the platform, including attendance confirmations, bookings, cancellations, participation history, referrals, ratings received, reviews submitted, reliability indicators, XP balances, reward eligibility, discount redemptions, fraud flags, and related account activity.
We process this information to operate the rewards and reputation systems, determine eligibility for promotions and discounts, prevent fraud and abuse, investigate suspicious activity, and improve the reliability and integrity of the platform.
Ratings, reviews, and public feedback: If you submit or receive ratings, reviews, attendance confirmations, crowd assessments, or other feedback on the platform, we process that information to display feedback publicly or within the platform, support trust and safety features, investigate abuse, and improve the quality and reliability of marketplace interactions.
Depending on the feature, some of this information may be visible to other users, including your display name, profile image, rating value, written review, booking context, or related public profile information.
Jam-session fit scores: After a completed studio booking or a finished event, a studio or event organizer that we have selected as an "exclusive partner" may privately rate, on a scale of 1 to 10 with an optional note, how well the artist they worked with would fit a future jam session. Rythmeet processes these scores to compute an internal level (Emerging, Developing, Advanced, Pro) and uses that level for two things: to help the Rythmeet team choose artists to invite to jam sessions, and to decide automatically whether you can apply to an "exclusive" jam session, which is open to artists at the highest level only. That eligibility check is the only automated use; the host of the session still decides who performs, and you may ask us to review any eligibility decision by contacting [email protected]. These scores are never displayed on your profile and never shown to other users. Our legal basis is our legitimate interest in matching artists of a similar level; you may object to this processing at any time by contacting [email protected], in which case we will delete the scores held about you and stop collecting new ones. You may obtain a copy of the scores and notes held about you through the data export in your account settings; to protect the people who rated you, their identity, the booking or event concerned and the exact date are not included. Scores are deleted three years after they were last edited, or earlier if you delete your account.
View statistics: With your consent (see Section 11), we record which profiles and events are viewed, when, and a random identifier for your browser session, so that studios, organizers and artists can see how many people looked at their page. Thirteen months after a view is recorded, the viewer identifier and session identifier are removed, so the view can no longer be linked to you or your browser.
Technical and monitoring data: When you use the platform, our hosting provider receives the technical data any web request carries (IP address, browser and device type, pages requested, time of the request) and keeps request logs for a short period for security and troubleshooting. With your consent (see Section 11), our error-monitoring service (Sentry) also receives reports about errors that occur in your browser, including the page involved, your browser type and a replay of the affected screen in which all text, inputs and media are masked before they leave your device. Error reports are kept for up to 90 days.
Push notifications: If you enable push notifications, we store the delivery address and keys your browser or device gives us so that we can send notifications, and the push services of your platform vendor (Google, Apple or Mozilla) receive the text of each notification, which may include the names of people you interact with. These records are deleted when you disable notifications on that device or delete your account.

Legal grounds:
	•	Performance of a contract. This information is necessary for us to provide the Services or take steps at your request to provide the services. 
	•	In so far as we process data to comply with legal rights and obligations, we do that to comply with said legal obligation
	•	Legitimate interest. We have a commercial interest in providing a well-functioning platform and our services including generate usage statistics. Our other users have an interest in seeing other users and the general health of our platform. Given that you provide the information voluntarily and that the information is not sensitive, we believe that your interests do not override our interests
Retention period:
	•	Public information is stored until it is deleted. 
	•	Private messages are stored until deleted by all recipients or until all recipients’ accounts are deleted
	•	Jam-session fit scores are stored for three years from their last edit, then deleted automatically
	•	View statistics are stripped of viewer and session identifiers thirteen months after the view
	•	Error reports are kept for up to 90 days; push-notification delivery records until you disable notifications or delete your account
When you contact us: When you ask us for support or contact us.
	When, why and how we process data:
	•	To process your request
	•	To train our staff
	•	To generate usage statistics
	•	To demonstrate compliance
What data is processed:
	•	Name
	•	Email address
	•	Reason for contacting
	•	Message
Legal grounds:
	•	Performance of a contract. This information is necessary for us to answer your questions or provide further services. 
	•	In so far as we process data to comply with legal rights and obligations, we do that to comply with said legal obligation
	•	Legitimate interest: We have a commercial interest in communicating, to train our staff, generate usage statistics to properly allocate our resources, and to save information to demonstrate compliance Given that you provide the information voluntarily and that the information is not sensitive, we believe that your interests do not override our interests
Retention period:
	•	Five years after the latest communication with a person; support conversations older than that are deleted automatically
When you subscribe to our newsletter: We use some personal data if you subscribe to our newsletter.
	When, why and how we process data:
	•	To send you the newsletter with offers, services, and other commercial messages that may be of your interest
What data is processed:
	•	Email address
	•	Usage information (whether the Email is opened and read)
Legal grounds:
	•	Consent: By registering for the newsletter, you give us consent to use your Email address
Retention period:
	•	Until you unsubscribe
	•	Until we clarify the situation and/or delete your account for security purposes or because you did not respect the terms and conditions of our website
When you report someone or someone reports you
When, why and how we process data:
	•	In case you report someone or someone reports you
	•	To process the report and act on it
	•	To demonstrate compliance
What data is processed:
	•	Your listings
	•	Your profile information
	•	Messages in your chats
Legal grounds:
	•	Legitimate interest: Rythmeet as a platform has a legitimate interest to ensure compliance with our terms and to create a culture of respect on the platform. Also, we may be under legal obligation to investigate community reports. Furthermore, we also protect the interests of the people who are affected by your posts or behavior on the platform.
2. How We Use Your Information
We may use your information for the following purposes, as specified in the text above:
	•	Account Management: For you to create and manage your user account, profiles and listings.
	•	Communication: To communicate with you about your account, giveaways results, newsletters, platform updates or answer your questions.
	•	Profile Visibility: To enable other users to find your profiles or listings, book a place and contact you through the chat feature.
	•	Customer Support: To provide customer support and respond to your inquiries.
	•	Analytics: To analyze usage and improve our services.
	•	Exercise, enforce, and comply with legal rights and obligations: This includes responding to subpoenas, court orders, or other legal process; and investigating, preventing, or taking action regarding illegal activities, suspected fraud, security or technical issues, or to protect the rights, property, or safety of Rythmeet, or others, and as otherwise required by applicable law.
	•	Operate the website and services: This includes allowing you to search for profiles or listings in your area according to various criteria, communicate with other users
	•	To train our staff: Providing expert-level customer support requires expert-level training. Therefore, we may use real world cases to provide feedback for our staff
	•	To send the newsletter: If you subscribe to our newsletter, we will use your Email address to send the letter
Aggregated and de-identified information: We may create de-identified statistics that are aggregated from user data. Such information may be used for internal business analytics and improvement, and advertisements to the extent permitted by applicable law.
3. Data Retention
We retain personal information for as long as reasonably necessary to provide the platform, maintain business and financial records, resolve disputes, enforce our agreements, detect and prevent fraud, comply with legal obligations, and protect the safety, integrity, and functionality of our services. The periods below are enforced by automatic jobs in our systems:
	•	Account and profile data: until you delete your account, or five years after your last activity. Thirty days before an inactive account is deleted we email you; signing in keeps the account. While a studio you own still has bookings that have not started yet, the account is kept until they start or are cancelled, so the people who booked are not left without a host.
	•	Private messages: until every participant in the conversation has deleted their account.
	•	Support conversations: five years after the last message.
	•	Reviews and ratings: kept with the listing or profile they concern; when you delete your account the written text is removed and the rating is kept without your name.
	•	Jam-session fit scores: three years after they were last edited.
	•	View statistics: identifiers removed after thirteen months.
	•	Error reports: up to 90 days.
	•	Transaction and payout records: at least seven years, to meet financial record-keeping and tax obligations, even after account deletion.
	•	Records of reports, disputes and enforcement actions: as long as needed to handle the matter and, where required, to demonstrate compliance.
4. Data Sharing and Disclosure
We don’t sell your personal data. We may share your information with third parties in the following situations:
	•	With Other Users: If you create a profile or a listing or use the platform, your provided information may be visible to other users of the platform.
	•	With our processors: We need several parties to provide our services.  We require third parties to: (i) enter into contractual agreements to abide by this Privacy Policy and applicable law; (ii) handle Personal Information in a confidential manner and maintain adequate security; and (iii) use Personal Information only as needed to fulfill the relevant purpose(s). These processors are:
	•	Vercel, Inc., USA (hosting and request logs) (www.vercel.com)
	•	Supabase, Inc., USA (database, authentication and file storage; data stored in the US East region) (www.supabase.com)
	•	Stripe, Inc., USA (payments and payouts) (https://stripe.com)
	•	Resend (Plus Five Five, Inc.), USA (transactional email) (https://resend.com)
	•	Google LLC, USA (Google Maps for location features; Google Calendar when you connect it; Google sign-in) (https://developers.google.com/maps)
	•	Functional Software, Inc. (Sentry), USA (error monitoring and masked session replay, only with your consent) (https://sentry.io)
	•	Push-notification services of your platform vendor: Google LLC (Chrome, Android), Apple Inc. (Safari, iOS) or Mozilla Corporation (Firefox), only if you enable push notifications
All of these providers are located in the United States. Section 9 describes the safeguards we rely on for transfers from the EU, the EEA, the UK and Switzerland.
	•	Legal Compliance: We may disclose your information if required by law or in response to valid requests by public authorities (e.g., a court or government agency). We will inform you of such disclosure, unless that is forbidden.
	•	Business Transfers: In the event of a merger, acquisition, or system transfer to another system, your personal data may be transferred.
	•	With other Website users in order to create an interactive environment and support the development of music-based communities: We may share your publicly visible account information with other Website users in our newsletters and in our giveaway section of the website.

5. Stripe
Payments made through the Rythmeet platform are processed by our third-party payment processor, Stripe, using Stripe Connect. When a user makes a payment for services offered by a professional, studio, venue, teacher, or other service provider on the platform, payment information is transmitted directly to Stripe and processed in accordance with Stripe's terms and privacy policies. Rythmeet does not store full payment card details and does not directly process payments. By using the payment features of the platform, users agree that Stripe may collect, use, and process personal and financial information as necessary to facilitate payments, verify identities, prevent fraud, and comply with applicable financial regulations and tax reporting requirements.
Service providers who register for Stripe Connect accounts consent to Stripe collecting additional information, which may include legal name, date of birth, address, bank account details, and tax identification numbers, as required for identity verification, payout processing, and regulatory compliance. This information is collected and stored by Stripe — Rythmeet does not have access to full bank account numbers or tax identification numbers submitted to Stripe.
Rythmeet retains transaction records (booking amount, platform fee, payout status, and transaction dates) for a minimum of 7 years to comply with financial record-keeping and tax reporting obligations.
Stripe may process personal information as an independent controller or business for certain payment, identity verification, fraud prevention, legal compliance, and tax-related purposes under its own privacy notice and legal obligations.
Location information: When users create profiles or listings, we may process location-related information such as city, state, ZIP code, listing address, or approximate map location. This information allows users to discover relevant services and listings near them and helps facilitate bookings and search results.
Depending on the feature and the user's settings, some location information may be visible to other users of the platform.


6. Google Calendar Sync
Rythmeet offers optional integration with Google Calendar to allow users to synchronize availability, bookings, and scheduled events with their personal calendars. When a user chooses to connect their Google account, Rythmeet accesses the following through Google APIs:

	•	Google account Email address: Used to identify the connected account and display it in the user's settings.

	•	Calendar data, including event time, status, and limited event metadata such as title where necessary for synchronization and conflict detection, is used solely to determine availability, prevent booking conflicts, and create, update, or remove booking-related events requested by the user. We limit access to the minimum Google Calendar scopes and data reasonably necessary for these user-facing scheduling features.

	•	Calendar event creation and deletion: Used to add confirmed bookings and approved event registrations to the user's Google Calendar, and to remove them upon cancellation.

Rythmeet stores encrypted OAuth authentication tokens necessary to maintain the connection. We do not use Google Calendar data for advertising, user profiling, model training unrelated to the requested scheduling feature, or any unrelated secondary purpose. We retain Google Calendar-connected data only for as long as reasonably necessary to provide the synchronization feature, maintain the connection, troubleshoot issues, protect against abuse, and comply with applicable law.

Rythmeet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data accessed through this integration is used only to provide and improve the scheduling features of the platform and is not used for
advertising, profiling, or any unrelated purposes.

Rythmeet does not sell or share Google user data with third parties except as necessary to provide the requested services or as required by law. Access to Google user data is limited to the minimum scope necessary for the functionality of the integration. 

Users may revoke Rythmeet's access to their Google account at any time through their Rythmeet account settings or through their Google account permissions. When a user disconnects their Google Calendar, all stored authentication tokens, calendar synchronization data, and synced availability records are permanently deleted from Rythmeet's systems.

7. How to manage your personal information
You can manage your Personal Information through the Website or by request to Us. We will provide support to the extent required by applicable law and more broadly when possible, as a courtesy in our sole discretion.
Access and correct your Personal Information
Much of your Personal Information is available in your account on the Website. Your Email address, name, musical interests, images, links to videos and soundtracks, and other identifiable profile information are editable through the profile settings in your account except as noted below. Please contact Us for support accessing and updating this or other information.
Exceptions:
We do not track or index every time or every place on the Website where or when a user may voluntarily share Personal Information, so We may not be able to help you locate or manage all such instances. We encourage you to use discretion before volunteering Personal Information on the Website.
Delete account and Personal Information
You can delete part or totally your Website account and Personal Information, through your profile on the website, or by sending us an Email requesting deletion or cancellation.
When you delete your account, we:
	•	permanently disable sign-in and release your email address,
	•	replace your name, birthdate, address and gender with placeholder values, and remove them from public pages,
	•	remove your profiles and listings from the platform and delete their images from our storage,
	•	delete your notifications, settings, push-notification registrations and any connected Google Calendar tokens (which we also revoke at Google),
	•	remove the free text you wrote in bookings, reviews, reports and support requests, and delete the files you attached to support requests,
	•	delete the jam-session fit scores held about you, and remove your identity from scores you gave,
	•	remove your identity from view statistics (which profiles and events you looked at),
	•	remove you from our email lists.
Some information is kept in an anonymized form because other users rely on it: the star rating of a review you left (without the text or your name), the fact that a booking or event registration took place, and your private messages, which remain visible to the other participant until they delete their account too, after which the conversation is deleted automatically. Transaction and payout records are kept for the period stated in Section 3.
We will retain and use Personal Information to comply with our legal obligations, resolve disputes, enforce agreements, and as otherwise permitted by applicable law.
We may collect Personal Information such as contact information, account credentials, profile information, user-generated content, listing and booking information, payment and transaction records, customer support records, calendar synchronization data, geolocation-related information you provide such as city or address for listings, device and log information, and in some cases government- or tax-related information processed by our payment partners.
We collect this information from you directly, from your use of the platform, from integrations you choose to connect with such as Google Calendar, from our third party service processors such as Stripe, and from other users if related to your bookings, reviews, messages, or reports.
     
8. Your Rights
You have certain rights in relation to your Personal Information. You can access your Personal Information provided in your profile and confirm that it remains correct and up-to-date or choose whether or not you wish to receive material from us by visiting the Website and logging into your user account. We strongly encourage you to do this, as it is the fastest way to enforce your rights.
When our data processing is based on consent, you can always withdraw consent. The withdrawal process depends on the way the consent was given:
	•	If you provided non-required information on your profile, you may always delete this information in your profile
	•	If you subscribe to our newsletter, you can unsubscribe
	•	If you posted public information, you may delete this information
We answer requests within one month; where a request is complex we may extend this by up to two further months and will tell you why. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive. Keep in mind, however, that there will be residual information that will remain within our databases, access logs and other records, which may or may not contain your Personal Information. Please also note that certain Personal Information or requests may be exempt from such requests in certain circumstances, which may include if we need to keep processing your Personal Information to comply with a legal obligation.
When you contact us with a request, we may ask that you provide us with information necessary to confirm your identity.
If you believe that we have not complied with applicable privacy laws, you have the right to file a complaint with the appropriate regulatory or enforcement authority. In the United States this may include your State Attorney General or other state privacy or consumer protection agency. In the EU and the EEA it is the data protection authority of the country where you live or work (in France, the CNIL, www.cnil.fr); in the UK it is the Information Commissioner's Office. We would appreciate the chance to address your concern first: write to [email protected].

If you would like further information in relation to your rights or would like to exercise any of them, you may also contact us via [email protected]. 
9. Data Transfers
Rythmeet is established in the United States, and all of the processors listed in Section 4 are located there. If you use the platform from the European Union, the European Economic Area, the United Kingdom or Switzerland, your personal data is therefore transferred to and stored in the United States.
For these transfers we rely on the following safeguards: where a processor is certified under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), we rely on that certification; otherwise we rely on the Standard Contractual Clauses adopted by the European Commission (and the UK International Data Transfer Addendum), together with a data processing agreement with each processor. You can ask us for a copy of the safeguards in place for a given processor by writing to [email protected].
10. Automated decision making
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects. Some features compute figures automatically (for example a reliability indicator, XP balances, or the internal jam-session level described in Section 1). One of them, the jam-session level, is used automatically to decide whether you can apply to an "exclusive" jam session; applying to every other event, and the choice of who performs at any event, is not automated. If you believe an eligibility decision is wrong you can ask a person to review it by writing to [email protected]. Any decision that affects your access to the platform itself is taken by a person.
11. Cookies and similar technologies
Essential (no consent needed): we use cookies and browser storage that are strictly necessary to run the platform: keeping you signed in, remembering your cookie choice, remembering which of your dashboards to open first, and (on our test environment) an access code. Stripe sets its own cookies on payment pages for fraud prevention. These cannot be switched off.
Optional (only with your consent): when you first visit, a banner asks whether we may also (a) collect view statistics as described in Section 1 and (b) send error reports and masked screen replays to our error-monitoring service, Sentry. Refusing is as easy as accepting and has no effect on the service. If you do not choose, neither is active. You can change or withdraw your choice at any time: "Cookie settings" is in the footer of every page, in your account menu, in Settings under Legal & Support, and at the top of this page.
We do not use advertising cookies, do not run third-party analytics such as Google Analytics, and do not allow anyone to track you across other websites through our platform.
12. Data Security
We take reasonable measures to protect your personal data from unauthorized access, use, or disclosure: all traffic is encrypted in transit, database access is restricted per user by row-level security rules enforced in the database itself, credentials such as Google Calendar tokens are encrypted at rest with a key held separately from the data, passwords are stored only as salted hashes, and payment card details never reach our servers. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee its absolute security.
STORAGE & SECURITY
We utilize reasonable administrative, physical, and technical safeguards that attempt to reasonably and appropriately protect the confidentiality, integrity, and availability of the information that it collects, receives, stores, or transmits. However, no method of transmission over the Internet, or electronic storage is 100% secure; and therefore, We cannot guarantee its absolute security. While We work hard to ensure the integrity and security of its network and systems, We cannot guarantee that its security measures will prevent "hackers" or other unauthorized people from illegally accessing or obtaining information.
SECURITY BREACH NOTIFICATIONS
If We learn of a security breach affecting your Personal Information, We may attempt to notify you electronically so that you may take appropriate protective steps. By using the Website or providing Personal Information to Us, you agree that We can communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Website. If a security system breach occurs, We may post a notice on the Website's homepage (www.rythmeet.com) or elsewhere on the Website and may send an Email to you at the Email address associated with your account.
Depending on where you are located, you may have a legal right to receive notice of a security breach, involving your Personal Information, in writing.
13. California Residents 
If you are a resident of the State of California, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Right to Request your Personal Information
If you reside or are located in the state of California, you have the right to request that Rythmeet discloses certain information to you about our collection and use of your Personal Information over the past 12 months for no charge. Once we receive and confirm your verifiable consumer request, we will disclose to you:
	•	Categories of Personal Information we collected about you
	•	Categories of sources of Personal Information we collected about you
	•	Business purpose for collecting your Personal Information
	•	Third parties with whom we share that Personal Information
	•	Specific pieces of Personal Information we collected about you
Right to Non-Discrimination
If you choose to exercise any of your data rights, we will not discriminate against you or your use of our services in any of the following ways:
	•	Denying services to you
	•	Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties
	•	Providing a different level or quality of services to you
	•	Suggesting that you will receive a different level or quality of services
How to Request your Personal Information
If you would like to exercise your access, data portability, or deletion rights, please submit a verifiable consumer request to us by either:
	•	Emailing us at [email protected]
	•	Using the “Contact us” form on the website
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. When you contact us with a request, we may ask that you provide us with information necessary to confirm your identity.
Rythmeet does not sell your Personal Information to any third party for monetary value. 
14. GDPR Data Protection Notice for Residents of the United Kingdom or the European Economic Areas
This section of our Privacy Policy applies only to you if you are a visitor to our Websites or otherwise interact with us as described in this Privacy Policy and are resident in the UK or European Economic Area (“EEA”). If you are resident in the UK or the EEA, we will only process your Personal Data in compliance with applicable data protection laws, including the EU General Data Protection Regulation, the UK General Data Protection Regulation, and related data protection laws in the UK and the EEA (together, the “European Data Protection Laws”). Rythmeet, Inc., at the address given at the top of this policy, is the data controller of your personal data.
Legal bases. Section 1 explains, feature by feature, why we process each category of data. In summary:
	•	Performance of our contract with you (Article 6(1)(b)): your account, profiles and listings, bookings, payments and payouts, messaging, calendar synchronization, notifications and customer support.
	•	Legal obligation (Article 6(1)(c)): keeping transaction records, answering lawful requests from authorities, handling reports of illegal content.
	•	Consent (Article 6(1)(a)): the newsletter, optional profile fields, view statistics and error monitoring (Section 11), push notifications. You can withdraw consent at any time without affecting the lawfulness of processing before the withdrawal.
	•	Legitimate interests (Article 6(1)(f)): keeping the platform secure and free of fraud and abuse, understanding how it is used in aggregate, jam-session fit scores used to match artists of a similar level (Section 1), and enforcing our terms. You can object to processing based on legitimate interests; we will stop unless we can show compelling grounds that override your interests.
Your rights. You may:
	•	Request access to your personal data and a copy of it (the data export in your account settings is the fastest way)
	•	Request correction of the personal data that we hold about you
	•	Request erasure of your personal data (the account deletion control in your settings does this immediately; if a studio you own still has upcoming bookings, those must be cancelled first, and our support team can cancel confirmed ones for you)
	•	Object to processing of your personal data based on our legitimate interests
	•	Request restriction of processing of your personal data
	•	Receive the personal data you gave us in a portable format and have it transmitted to another provider
	•	Withdraw consent at any time where we are relying on consent to process your personal data
To exercise a right, use the controls in your account or write to [email protected]. We may ask you to confirm your identity. We answer within one month, extendable by two further months for complex requests.
Transfers. Your data is stored in the United States under the safeguards described in Section 9.
Complaints. You have the right to lodge a complaint with your data protection authority (for France, the CNIL, 3 place de Fontenoy, 75007 Paris, www.cnil.fr) if you believe that we have not complied with applicable data protection laws.
15. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party websites you visit.
16. Third-Party Integrations
To provide a seamless experience, we integrate with third-party service providers. These include Stripe for payment processing, Google Maps for location features, Resend for emails, Google Calendar for scheduling, Sentry for error monitoring (with your consent), and the push-notification services of Google, Apple and Mozilla (if you enable notifications). Section 4 lists them with their locations.
17. Changes to This Privacy Policy
This Privacy Policy will be reviewed and updated from time to time. When changes are made, the Privacy Policy will be labeled as "Revised (date)," indicating that you should review the new terms, which will be effective immediately upon posting on this page, with an updated effective date. By accessing the Website after any changes have been made, you accept the modified Privacy Policy and any changes contained therein. In case you miss the notification referenced above, be sure to return to this page periodically to ensure familiarity with the most current version of this Privacy Policy.
18. Children’s Privacy
Rythmeet is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18 without appropriate authorization or in violation of our Terms, we may delete the information and terminate the associated account. If you believe a minor has provided personal information to us, please contact us at [email protected].
     

19. International privacy practices
The Website is operated on servers located in the United States, and we offer it to users in the United States, the European Union, the European Economic Area, the United Kingdom and Switzerland. If you use the Website from any of these places or elsewhere, your Personal Information is transferred to, processed, and stored in the United States, where data protection laws may differ from those in your jurisdiction. Section 9 describes the safeguards we apply to such transfers, and Section 14 describes the rights of users in the UK and the EEA.
20. Contact Us
If you have any questions about this Privacy Policy, please contact us at: [email protected].

21. DSA point of contact
Any complaint or report concerning illegal, infringing, abusive, or inappropriate content on our Website may be sent to [email protected]. We will review such reports diligently and take appropriate action based on the information provided.
We will investigate such matters diligently and take appropriate action based on the information we have. We may take the following circumstances into consideration in our decision:
	•	Whether the content likely violates an intellectual property right
	•	Whether the content is harassing, contains disinformation, is likely to be true or is a form of bullying
	•	Whether the content regards a newsworthy topic or person
	•	Whether the content has legitimate informational or community value
	•	Any other relevant factors under applicable law, our Terms of Use, and our content moderation policies
When reviewing reported content, we may consider factors including whether the content violates applicable law, infringes intellectual property rights, constitutes harassment, bullying, impersonation, fraud, or misinformation, or otherwise violates our Terms of Use or community standards.
To help us process your report, please include the following information where applicable:
(a) A statement that the request concerns potentially illegal, infringing, or policy-violating content
(b) A sufficiently detailed explanation of why you believe the content violates applicable law, infringes rights, or violates our Terms of Use
(c) A clear indication of the exact electronic location of the content, such as the exact URL or URLs, and any additional information necessary to identify the reported content
(d) Your name and contact email address (unless submission of identifying information is prohibited or restricted by law)
(e) A statement confirming your good-faith belief that the information provided is accurate and that the reported content violates applicable law or our platform policies
We may remove, restrict, or disable access to content that violates applicable law, infringes rights, or violates our Terms of Use or community standards.