Privacy Policy
Last updated October 6, 2026
GigPenguin, run by ThreeThirtyThree & Sons LLC, helps bandleaders send gig details to the musicians they hire and see who has confirmed. This policy explains what we collect, who can see it and how long we keep it. It covers gigpenguin.com and the messages we send.
Bandleaders
When you create an account we store your name, email address and password (hashed), and the bands, players and gigs you enter. You can close your account at any time by emailing us (see Contact below).
Players
You don't need an account. A bandleader adds you with your name and an email address or mobile number, and sends you a private link to each gig.
The bandleader who sent the link can see:
- whether the message reached you, or bounced;
- whether you opened the gig page, when you first and last opened it, and how many times;
- whether the gig page you last opened was its latest version;
- your answers: in, tentative or out, and any later changes;
- when you tapped "Got it" on a change to the gig;
- anything you text back to a gig text.
That's all we record about what you do on a gig page. If we ever record more, we'll update this policy and that page before your bandleader sees it.
They can't see how long you spent on the page, where you are, or anything about gigs you play with other bands. Other players on the gig see your name and role, never your pay. What your bandleader can see explains this in more detail.
Text messages
If you agree to receive gig texts, we keep a record of that consent for the band that asked. Reply STOP to any text to stop receiving them. Mobile opt-in data and consent are not shared with third parties or affiliates for marketing or any other purpose. We never sell personal information.
Who processes data for us
We use a small number of providers to run the service: Hetzner (servers, in the United States), Cloudflare (network and file storage), Resend (email), Twilio (text messages) and Sentry (error reports, with gig links removed). They process data only to provide their service to us.
How long we keep it
- Account, band and gig records: until the bandleader deletes them or closes their account.
- Delivery error details on messages: 12 months.
- Encrypted backups: 30 days.
- Server logs: rotated automatically after a short time, and kept only on our own server.
A player can ask us to erase their details at any time. We remove the name and contact details and keep only anonymous counts.
Cookies
We use a cookie to keep bandleaders signed in; the app needs it. Product analytics (PostHog) count how the site is used. If you're in the EEA, the UK or Switzerland — or we can't tell where you are — they run only after you accept them. Elsewhere they run unless you decline. Either way, change it any time under Privacy choices, and your choice is kept in a cookie on that browser for a year. Analytics never run on players' gig pages.
Contact
Privacy questions or erasure requests: privacy@gigpenguin.com. Anything else: support@gigpenguin.com. Using GigPenguin is also covered by our Terms & Conditions.