1. Who is responsible
PlaceDJ is the service name for the business music platform and is responsible for the account and service information described in this notice. The contracting service provider is identified in your checkout confirmation or invoice. For privacy questions or requests, contact kazim@toork.com.
2. Information the service handles
- Account and sign-in: account identifiers, email and profile details supplied during registration, authentication and workspace membership. If you choose Google sign-in, authentication uses Google OAuth through Supabase Auth; the profile fields depend on your consent and provider configuration.
- Workspace and venue: business and venue names, venue type, description, an optional Google Maps link and location coordinates available from that link or shared from the browser. The service detects a venue timezone automatically to run schedules. Workspace owners and admins manage team invitations and access.
- Player and operations: registered device identifiers and status, venue association, last-seen and playback-session state, schedules, selected playlists and operational events needed to operate and protect playback. The app may keep limited playback preferences or recovery state in browser storage.
- Billing: subscription plan, status, billing interval, provider customer/subscription identifiers and relevant billing events. Payment providers process payment details; PlaceDJ stores subscription information needed to provide and administer the service.
- Certificate verification: a high-entropy certificate reference resolves to limited venue details and current authorization status without requiring a visitor account. The lookup returns the venue and coverage fields needed to check that record.
- Catalog rights administration: authorized PlaceDJ catalog reviewers may store rights-holder details, review notes and private supporting evidence for catalog material.
3. Why and on what basis information is used
PlaceDJ uses information to authenticate accounts, provide the service, operate venues and devices, manage subscriptions, prevent misuse, support users, maintain service records and display a certificate’s current status. Depending on the information and applicable law, processing is based on performing the service agreement, complying with legal obligations, legitimate interests in operating and securing PlaceDJ, or consent where consent is required.
4. Providers and disclosure
PlaceDJ uses Supabase for authentication, database and private file storage; Google when you choose Google sign-in; Stripe for subscription billing where enabled; Resend for service email; and Vercel for website hosting. These providers process information to deliver their part of the service under their applicable terms and privacy notices.
PlaceDJ does not sell account or venue data. Information may be disclosed to authorized workspace members, service providers, or authorities and other recipients where required to protect users, respond to valid legal process or meet a legal obligation.
5. Cookies and similar storage
Necessary cookies support sign-in sessions, workspace and venue context, and language selection. PlaceDJ also uses browser local or session storage for preferences such as theme, selected venue, Player behavior, installation state and short-lived recovery or session coordination. These features support the service and remember your choices. PlaceDJ does not use a separate advertising or analytics SDK in the application source.
6. Public pages and certificate checks
Venue operators choose whether to publish venue information through PlaceDJ’s public venue experiences. Certificate verification is a separate lookup by a high-entropy reference. It returns only the venue and authorization fields needed to check that specific record. Verification pages are not intended to be indexed as a directory. Hosting infrastructure may create security and access logs to operate and protect the service.
7. Storage, retention and security
Account and product data are stored in the configured Supabase project. Private catalog audio and rights evidence are held in private storage; signed links are time-limited. PlaceDJ uses server-side access checks, workspace isolation and database policies to restrict access.
PlaceDJ retains information while needed to provide the service, maintain security and service records, meet legal and accounting obligations, and resolve disputes. Information is deleted or anonymized when it is no longer needed for those purposes, subject to required retention and backup cycles.
8. International processing
PlaceDJ and its service providers may process information in countries outside your country of residence. Where a transfer is subject to legal safeguards, PlaceDJ uses the transfer mechanisms and protections required by applicable law.
9. Your choices and rights
Depending on applicable law, you may have the right to request information about processing, access or correction, deletion or anonymization, restriction or objection, and other remedies. Account owners can manage workspace access and available account settings in the product. Send privacy requests to kazim@toork.com; PlaceDJ may ask for information needed to verify and respond to the request.
For people in Türkiye, PlaceDJ handles requests under the Turkish Personal Data Protection Law (KVKK), including the information duty and data-subject rights. See the official KVKK sources: rights and obligations ↗, information duty ↗ and erasure, destruction and anonymization ↗.
10. Contact and changes
For privacy questions and requests, contact PlaceDJ at kazim@toork.com. This notice is effective from 11 October 2026. PlaceDJ updates it when its data practices, service providers or legal obligations change; material updates will be communicated through the service where required.