Last updated: 28 October 2026
Welcome to NextSong ("we", "our", or "us"). NextSong operates the website nextsong.bar and related services (collectively, the "Service"). NextSong is a platform that connects musicians, venues, and audiences — enabling song requests, direct tipping, and live music management.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using NextSong, you consent to the data practices described here.
When you create an account by email or via Google OAuth, we receive and store your email address, display name, and (for Google sign-in) your profile photo. We never receive or store your Google password.
Depending on your role (artist, venue manager, partner), you may provide additional information such as venue name and address, artist biography, genre preferences, contact phone number, Instagram handle, profile link, and website URL.
When you make a song request or send a tip, we record the transaction amount, song name, requester name, and dedication message. Payment card details are processed and stored exclusively by Stripe — we never see or store your full card number.
With your permission, we collect your approximate geolocation to show nearby venues and provide location-based search results. You can deny or revoke location access at any time in your browser or device settings.
We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, device type, IP address, and referring URLs. On our website we use Google Analytics, Yandex Metrica and PostHog for this purpose. Our mobile application uses PostHog only: Google Analytics and Yandex Metrica are not included in it.
PostHog receives product usage events, such as a page or screen being opened, a step of sign-up or of a song request being completed, or the app being opened, together with your device and browser type and a random identifier created on your device. We do not send PostHog your name, email address, phone number, account or payment identifiers, card details, or anything you type, and we do not use this data for advertising or to track you across other companies’ apps or websites. Like any web service, PostHog receives your IP address with each request and may use it to estimate your approximate location (country or city).
We use browser cookies and localStorage to maintain your session, remember your preferences (such as language and theme), and support analytics functionality. PostHog keeps its random identifier in localStorage and sets no cookies.
We use the information we collect to:
We integrate with the following third-party services, each governed by its own privacy policy:
Google OAuth for authentication, Google Places for venue search, YouTube for music playback, and Google Analytics for usage measurement. See policies.google.com/privacy.
All payment processing is handled by Stripe. Card information is sent directly to Stripe and never touches our servers. See stripe.com/privacy.
Song titles, artists, album artwork and 30-second previews come from the public iTunes Search API. Your search text is sent to Apple to return results; no account is involved and we send no personal data. See apple.com/legal/privacy.
Full-length playback happens in an embedded YouTube player, which is subject to Google’s privacy policy and may set cookies in your browser. See policies.google.com/privacy.
Product analytics on our website and in our mobile application (see 2.5). PostHog, Inc. processes this data in the United States. See posthog.com/privacy.
Your data is stored in a PostgreSQL database that we operate ourselves on Google Cloud infrastructure, with Row Level Security enabled on all tables so each user can access only the data they are authorised to see. All data is transmitted over HTTPS/TLS. Uploaded files (venue photos, artist avatars, profile pictures) are stored in access-controlled storage buckets. Database backups are taken daily and retained for 14 days.
While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
To exercise any of these rights, email ivan@aialarm.live. We respond within 30 days.
We retain your personal data for as long as your account is active or as needed to provide the Service. Transaction records are retained for at least 3 years for legal and accounting purposes. When you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law.
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such data, we will delete it promptly. If you believe a child has provided us with personal data, contact ivan@aialarm.live.
Your information may be transferred to and processed in countries other than your country of residence, which may have different data protection laws. By using the Service, you consent to such transfers.
We may update this Privacy Policy from time to time. Material changes will be announced by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
Email: ivan@aialarm.live
Website: nextsong.bar
Operated by AVA Alarm Corporation.