Privacy Policy

Account and profile information. We may collect your name, .edu email address, phone number, school or university, password hash, role, biography, profile image, music genres and subgenres, and links you ask an administrator to add.

Requests and communications. We collect information included in contact forms, account requests, venue suggestions, reports, booking requests, and support communications.

Subscription information. Stripe provides us with identifiers and status information such as your Stripe customer and subscription IDs, plan, payment status, renewal date, cancellation status, and active entitlements. Payment card numbers and complete card details are entered directly into Stripe Checkout and are not stored by YELLOW NOTE.

Technical information. Our hosting and security systems may process IP address, browser and device information, request timestamps, referring pages, error logs, and a strictly necessary session cookie used to keep you signed in.

• Provide, secure, maintain, and troubleshoot the site and member accounts.
• Display approved musician and venue information to eligible users.
• Authenticate users and enforce role- and subscription-based access.
• Process All Access purchases, renewals, cancellations, refunds, and billing support.
• Respond to contact requests, facilitate booking introductions, and investigate reports.
• Maintain transaction, consent, security, and compliance records.
• Improve the service and prevent fraud, spam, misuse, and unauthorized access.

Musician profiles are designed to support networking and may include a member’s name, school, email address, phone number, biography, genres, image, and submitted links. These profiles are restricted to signed-in users, while administrators control profile creation and editing. Do not provide profile information you do not want shared within the authenticated YELLOW NOTE directory. Venue information may be displayed publicly or to signed-in members depending on the page and service configuration.

We disclose information only as needed to operate the service, complete a request, comply with law, or protect rights and safety. Our service providers include Stripe for payment processing and billing, MongoDB Atlas for database hosting, Vercel for website hosting, Mailgun for email delivery, and Mapbox for mapping and geocoding.

Each provider processes information under its own terms and privacy practices. Stripe’s privacy notice is available at stripe.com/privacy. We may also disclose information in response to lawful process, to investigate abuse or fraud, or as part of a business reorganization with appropriate safeguards.

YELLOW NOTE does not sell personal information and does not share personal information for cross-context behavioral advertising.

YELLOW NOTE uses a strictly necessary, secure session cookie to authenticate signed-in users and preserve account access. Disabling this cookie prevents sign-in and member-only features from working. We do not currently use third-party advertising cookies on yellownote.co.

We retain information for as long as reasonably necessary to provide the service, maintain accurate subscription and transaction records, resolve disputes, enforce agreements, meet legal obligations, and protect the service. Account and profile records may remain until an administrator deletes them. Certain billing, security, and compliance records may be retained after account closure when required or reasonably necessary.

We use reasonable administrative, technical, and organizational safeguards, including hashed passwords, secure session cookies, access controls, server-side secret storage, and Stripe-hosted payment collection. No transmission or storage system is completely secure, so we cannot guarantee absolute security. If you suspect unauthorized account activity, contact us promptly.

You may ask to access, correct, or delete personal information associated with you, or object to or restrict certain processing, by using the Contact Us page. Administrators can update profile details, and subscription billing details can be managed through the Stripe-hosted billing portal. We will verify requests and respond as required by applicable law; some records may be retained where legally permitted or required.

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. YELLOW NOTE and its service providers operate in the United States, so information may be processed and stored in the United States.

We may update this Privacy Policy as the service or law changes. We will post the revised policy with a new effective date and provide additional notice when appropriate. Privacy questions or requests may be submitted through the Contact Us page or by calling (615) 854-8205.