Your artist information.

Last updated: 14 November 2026.

Who is responsible

AUDEX For Artists is operated by Jacob Bradley, trading as AUDEX and Jacob Bradley Web Development. Business address: Unit 8 Studios, 8 Whessoe Road, Darlington, DL3 0QP, United Kingdom. Contact AUDEX support for privacy questions or requests.

What we collect

We store your account name, email, a securely derived password hash, email-verification status, acceptance of artist terms and the profile information you choose to add. We also store your draft, published page, selected appearance settings and links. Spotify metadata may be cached to display selected music cards. Security records include sessions, trusted-device records, verification challenges, browser information, IP information used by authentication and rate-limit records. Support enquiries, reports and moderation decisions are recorded when used. We store your private Artist Playbook checklist statuses and, if you answer it, your optional helpfulness response. If you send feedback, we store its type, message, your account reference, the app page it came from and whether you allow a reply and whether you were a partner when it was sent. Partner accounts also have page preferences, a welcome dismissal timestamp and individually granted early-access features. We do not attach URL queries, fragments or unsaved editor content.

Private and public

Your account email, password hash, security records and unpublished draft are not included in your public Artist Page. Your published name, bio, location if supplied, text, links and music cards are public. Add only information you want visitors to see. No image or audio upload is provided in this release.

Why we use it

Account and page information is used to provide the service you request. Checklist progress is used to save your choices across devices; optional helpfulness responses help AUDEX assess the checklist. Neither is public. Feedback is used to understand problems and improve AUDEX; it is visible to AUDEX administrators, not other artists. We email you about feedback only when you tick the optional reply box. Security, abuse prevention, support, feedback improvement and moderation are used for our legitimate interests in running a safe and reliable service, balanced against your rights. We may process information to meet legal obligations. Creating an artist account does not sign you up for marketing. AUDEX news has a separate, optional opt-in on sign-in or in Settings. When you choose it, your account email is sent to the existing AUDEX news service, which sends a confirmation or preference-management link and uses your existing entry if one exists. An unchecked box does not change an existing subscription. Manage or withdraw news consent through its email links or the news preferences page.

Service providers and linked services

We use contracted hosting, database and email providers to operate the service. Where information is processed outside the UK, applicable international-transfer safeguards must be in place. Spotify artist searches, discography, metadata and artist-photo requests are made by our server. Search terms are sent to Spotify to provide results; when selected artwork loads, visitors’ browsers request that image from Spotify’s image service. Tour spreadsheets are processed in your browser; the file itself is not uploaded. Only dates you choose to add are saved in your page draft. A connected Bandsintown or Seated tour widget loads automatically when a visitor views the tour section. This connects to that provider, which receives network/browser information and supplies events under its own privacy practices. YouTube uses its privacy-enhanced player and is not loaded until a visitor chooses to play the video. Once loaded, YouTube may use cookies or other storage and receives information under its own privacy practices. Privacy-enhanced mode is not a promise of zero cookies. Clicking an external link takes the visitor to that service, under its own privacy practices. This page does not set advertising or analytics cookies.

Event reports

Fans can report an event without an account or email address. We store the event reference and title, reason, optional details, review status and moderation decisions to investigate abuse and protect users. Report details are private to AUDEX administration. Closed reports are normally deleted 180 days after review; open investigations and records needed for legal claims may be retained longer.

Your Music

Your Music lets you select releases from Spotify and save catalogue identifiers to your AUDEX account. Music information and artwork are supplied by Spotify and kept in temporary caches. AUDEX does not download or store Spotify audio. Optional Spotify artist-photo permission and profile preferences are saved for your Underground profile. During pre-launch preparation, importing music does not publish it or create a public Underground profile. You can remove releases or delete your account. Publishing, when available, requires a separate choice and artist-authorisation confirmation.

Artist Page stats

Published Artist Pages record aggregate page views and content-link clicks so their owners can understand activity. These are page loads, not unique visitors. Stats do not use analytics cookies, browser storage or persistent visitor identifiers, and do not store visitor profiles, locations or referrers. Browser privacy signals are respected. Signed-in visits to your own page and editor previews are excluded. A daily rotating, hashed network key limits abuse; raw IP addresses are not stored in stats. Random event identifiers prevent duplicate delivery and are cleared after two days. Daily totals are retained for up to 366 days and removed when the artist account is deleted. Processing is used for our legitimate interests in providing useful activity counts and preventing abuse.

Google sign-in

If you choose Google sign-in, Google shares your account identifier, email address, verification status and basic profile information with AUDEX. We use these to create or securely link your AUDEX account and sign you in. We do not request access to Gmail, Drive or contacts. Google processes the sign-in under its own privacy policy. New artists still confirm their artist name, base area and acceptance of our terms.

Cookies and device security

Necessary cookies keep you signed in and remember a trusted device. The sign-in session can last up to 30 days and may refresh with use. Device trust expires after 30 days; a non-remembered security check is limited to that sign-in session and up to one day. Password sign-in on a new or expired device requires an emailed security-code check. A successful Google sign-in or initial email-verification link establishes trust for that sign-in session. Codes expire after five minutes and have limited attempts.

How long we keep information

Profile, checklist progress, optional checklist responses and account information are kept while the account is maintained. You can unpublish immediately or permanently delete your artist account in Settings after confirming with your password where one is set and an emailed link. Limited report and moderation records may be retained for safety, disputes or legal obligations; deleting your artist account does not unsubscribe your separate AUDEX news entry. Feedback is kept for up to 12 months. Completed support and moderation records are normally kept for up to 12 months, unless a longer period is necessary for an unresolved issue or legal obligation. Expired security records and short-term caches are regularly cleared. Information may remain in backups until the relevant backup retention cycle ends.

Your choices and rights

Edit and unpublish your page from the dashboard, revoke trusted devices in settings and download your account/profile information. You may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Contact support to exercise these rights. You may complain to the UK Information Commissioner’s Office at ico.org.uk.

Your base area

Artist signup asks for your country and town or city. We use that area as the default for venue search and local Connections forms. It is editable in Settings and is not added to a public page automatically. A local area is shared when you choose to publish it in a Connections profile or opportunity. A map centre derived from that area may be saved to avoid repeating location lookups.

Live booking tools, when available

Your private venue entries, booking stages, performance dates, follow-up dates, fees and written notes are stored to provide your booking workspace. Gig tools also store the contacts, schedules, setlists, payment status, billing identities and addresses, and payment instructions you enter. Invoices retain the details used when created so later gig changes do not alter them. Removing a gig keeps its saved invoices in your invoice archive; deleting your account removes them. Gig and invoice details are not published to your artist page. You can optionally save billing defaults and compressed invoice branding for reuse. Saved billing defaults and invoice snapshots are encrypted in application storage. AUDEX can decrypt them to provide your invoices and account export; this is not end-to-end encryption. Forgetting saved billing defaults does not remove existing invoice snapshots. Logo images are resized and compressed in the browser before upload. Written booking notes are not shown to other artists. Venue suggestions, reports and proposed changes are reviewed before publication; approved venue details and aggregate ratings may be visible to other artists, while your report explanation is kept for authorised reviewers. These records are included in account export and private records are removed when the associated account is deleted.

Live venue discovery uses Ticketmaster. Search areas and requested venue identifiers are sent from our server to that provider. City or region lookups use Nominatim and OpenStreetMap data. If you choose Use my location and allow browser location access, that location is used for your venue search; it is not added to your public artist profile. Opening the map connects your browser to OpenStreetMap tile servers, which receive technical information such as your IP address. These providers have their own terms and privacy practices. Private booking notes are not sent to these providers. Booking email is not connected and AUDEX does not send booking messages on your behalf.

Account notifications

We store in-app notifications, read status and your Connections email preference. Important updates such as interest in your opportunity and accepted introductions may also be emailed to your verified account address. Your private chosen contact details are not included. You can disable Connections emails from the notification inbox; security emails remain necessary for your account. In-app notifications and their delivery records are ordinarily removed after 90 days.

Connections profiles and introductions

If you opt into Connections, we store your public display name, headline, bio, skills, genres, interests, optional portfolio link, remote/local preferences, optional town/region/country, travel preference, publication state and your 13+ declaration and rules acceptance. We do not collect ID, face scans, GPS, a date of birth or a street address for this feature. Visitors without an account can browse limited previews of skills, opportunity types and broad locations. Names, biographies, free-text posts and portfolio links require sign-in. Your sign-in email is not part of these records.

We store opportunity text, payment category, expiry and closure state. Introductions include the message and the contact details each participant explicitly chooses to share, plus the recipient’s decision to reveal a private message. Contact details are provided to the other participant only after acceptance; no account email is substituted. Chosen contact details may be an email address, phone number or HTTPS link. Blocks prevent new introductions and suppress contact-detail access through Connections but cannot recall information already copied off-platform. Reports and moderation records are accessible to authorised administrators. We process these records to provide the service you request, administer your choices, prevent abuse and meet applicable obligations.

Profiles are kept while the account exists or until removal is requested. Introductions and closed/expired opportunities are ordinarily removed after 12 months of inactivity; unresolved reports may require relevant records to be kept longer for review or legal obligations. Resolved reports and routine moderation records are ordinarily retained for 12 months. Blocking records remain until unblocking or account deletion. Security limits have shorter retention. For access, correction, deletion or a full Connections data copy, contact support; the Artist Page export may not include all Connections history.

Fan forms and submissions

If you submit a fan form, we store your answers, the question labels and submission time, and any photo or video you choose to send. There is no fan-account requirement. The artist receives this information privately and may download it. The artist is responsible for explaining its intended use and for any separate consent it needs, including email marketing. Do not include passwords, card details or sensitive information.

Uploaded files are processed in private storage. Metadata is stripped from converted photos; videos are converted for compatible playback. Files and answers are removed seven days after the event ends, plus up to a day for scheduled cleanup. You can delete a response using the confirmation screen while it remains open, or contact support. The artist may already have downloaded a copy, which AUDEX cannot recall. Limited security rate records help prevent abuse. Reports are available only to authorised reviewers. We do not use submissions to train AI.

Drops media and payments

Drops stores your draft text, layout choices, uploaded media, processing state, file checksum, hosting dates and reserved link. Local drafts and selected files may also remain in this browser until you remove them. Optimised media is kept in a separate private Cloudflare R2 account and bucket, and is delivered through expiring signed links. Anyone with a published drop link may view the content while it is available. A private bucket is not a promise that published content is confidential or cannot be copied.

We process this information to provide the hosting you request, prevent abuse and protect the service. Stripe collects payment information directly through its embedded form. AUDEX stores order references, amount, currency, status, billing country and US state, an approximate network country when available, and the hosting-start request, but not complete card numbers or CVCs. Full billing addresses are collected by Stripe; AUDEX retains only country/state for location checks and financial records. Location disagreements create a private support review, with no automatic publication. Aggregate state-level sales help us review registration obligations. Stripe processes payment data under its own privacy notice. Payment-related scripts load when checkout is opened. Ordinary fan playback does not load Stripe.

Upload originals are deleted after successful conversion, with retries for failures. Incomplete uploads are normally removed within two days. Unpublished media may be removed after its draft has not been edited for 30 days. Published media is normally removed seven days after expiry, plus up to a day for scheduled cleanup, unless another active drop or recent draft still uses it. Account deletion schedules storage deletion separately from database deletion. We keep the minimum payment and consent records necessary for accounting, fraud prevention and disputes; applicable UK business records may need to be retained for up to six years. We do not retain uploaded media for that accounting period. Contact support to exercise privacy rights or ask about a particular record.