Legal · HIPAA-aware

    Privacy Policy

    How BandJAM collects, uses, and safeguards your information when you use our Site and Services.

    Effective Date: March 1, 2025

    Thank you for visiting BandJAM, LLC ("BandJAM," "we," "us," or "our"). We are a Delaware limited liability company operating in California, offering a platform that enables businesses ("Clients") to book musicians ("Musicians") for music sessions and gigs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website ("Site") and related services ("Services").

    Scope of this Policy

    This Privacy Policy applies to information we collect through:

    • Our website, web application, and any other platforms we use to facilitate our Services.
    • Communications (email or otherwise) related to our Services.
    • Any other forms of interaction with us, unless a separate or updated policy is provided.

    By accessing or using our Site or Services, you agree to this Privacy Policy. If you do not agree, please discontinue use.

    Information We Collect

    Personal Information

    We collect various categories of personal information ("Personal Information") to fulfill our Services, including but not limited to:

    • Contact Details: Name, email address, phone number, and mailing address.
    • Payment Details: We may collect limited payment information to facilitate transactions; full payment details are processed by Stripe. We do not store complete credit/debit card numbers on our servers.
    • Demographic Information: Age range, gender, or other demographic details you or our Clients may provide.
    • Account Information: Username, password, and any profile data you provide when creating an account.
    • Usage Data: IP address, browser type, operating system, and browsing behavior.

    Health-Related Information / HIPAA

    • Potential PHI Collection: Clients may provide limited health-related information about individuals under their care to customize music sessions. This may constitute Protected Health Information ("PHI") under HIPAA.
    • Business Associate: Where we handle PHI for a HIPAA-covered Client, we function as a Business Associate and execute a Business Associate Agreement ("BAA") with that Client.

    How We Use Your Information

    We use the information we collect to:

    1. Provide and Maintain our Services – Facilitate bookings, manage user accounts, handle payments, and ensure quality of service.
    2. Communicate with You – Send administrative information, updates, and promotional content if you opt in.
    3. Analyze Usage and Improve Services – Monitor and analyze trends, usage, and activities to develop new features.
    4. Ensure Security – Detect, prevent, or investigate security breaches or fraud.
    5. Comply with Legal Obligations – Respond to legal requests, enforce our Terms of Service, or otherwise comply with applicable laws.

    Disclosure of Your Information

    We may share your information in the following circumstances:

    1. Service Providers

    • Payment Processors (Stripe) – Stripe's use of your data is governed by its own privacy policy.
    • Hosting & Analytics Providers – We partner with hosting services and analytics tools to help us operate our Site.

    2. Business Associates (HIPAA)

    If we receive PHI as part of our Services for a HIPAA-covered Client, we may share PHI only as permitted under a BAA or as required by law.

    3. Legal Compliance & Protection

    We may disclose Personal Information if required by law or in good-faith belief that it is necessary to:

    • Comply with a legal obligation (subpoena, court order, etc.).
    • Protect and defend our rights or property.
    • Prevent or investigate possible wrongdoing related to our Site or Services.
    • Protect the personal safety of users or the public.

    4. Business Transfers

    If we (or our assets) are acquired or merged with another entity, or in the unlikely event of bankruptcy, your information may be transferred to the acquiring entity.

    Cookies & Tracking Technologies

    We use cookies, pixels, and other tracking technologies to collect information about your browsing activities on our Site. This helps us understand user behavior, improve functionality, and offer relevant promotions. You can instruct your browser to refuse all cookies, but certain features may not function properly without them.

    Data Security & HIPAA Compliance

    Security Measures

    We implement reasonable organizational, technical, and administrative measures to protect your information, including:

    • Encryption: SSL/TLS protocols to secure data in transit.
    • Secure Servers: Restricted-access servers requiring authentication for all authorized personnel.
    • Limited Access: Only employees or contractors with a job need access to Personal Information and any PHI.

    HIPAA-Specific Protections

    When acting as a Business Associate, we will:

    • Enter into a BAA with the covered entity to protect PHI in compliance with HIPAA.
    • Use and disclose PHI only as permitted by the BAA and applicable law.
    • Maintain appropriate safeguards to prevent unauthorized use or disclosure of PHI.
    • Report any security incident or breach involving PHI to the covered entity in accordance with the BAA.

    No Guarantee

    While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

    User Choices & Rights

    Opt-Out of Communications

    You may opt out of receiving marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us at admin@bandjam.co.

    Access, Correction & Deletion

    • Access / Correction: Contact us at admin@bandjam.co to access or correct your information.
    • Deletion Requests: Email admin@bandjam.co to request deletion. We will make reasonable efforts to delete your data, except where required or permitted by law to retain it.

    Data Retention

    We do not have a single retention policy for all data, but we generally retain user profiles, booking history, and related information for as long as reasonably necessary to provide our Services, fulfill contractual or legal obligations, and maintain appropriate business records.

    Minors

    Our Services are not intended for individuals under 18, and we do not knowingly collect Personal Information from minors. If you become aware that a minor has provided us Personal Information, contact us at admin@bandjam.co so we can delete it.

    Additional Disclaimers

    • No Medical Advice: BandJAM does not provide medical advice, diagnosis, or treatment.
    • User-Generated Content: We are not responsible for user-generated content, including information shared by Clients or Musicians.
    • No International Use: We do not currently offer or market our Services internationally. We focus on U.S.-based Clients and Musicians.
    • Arbitration: Any disputes arising from this Privacy Policy or use of the Site/Services will be resolved through arbitration, as outlined in our Terms of Service.

    Changes to This Policy

    We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. Your continued use of our Site or Services after any modifications indicates acknowledgment of the changes.

    Contact Us

    If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

    BandJAM, LLC

    admin@bandjam.co