Privacy

Last updated October 26, 2026

Band Runbook keeps your band’s songs, setlists, gigs and booking in one place. This page says what we store, who else is involved in running it, and how to get your data out or delete it. The short version: we keep what you put in so your band can use it, we don’t sell it, and there are no ads or tracking scripts.

What we store

• Your account: your name, email address, a scrambled (hashed) copy of your password that can’t be turned back into the password, and a profile photo if you add one.
• Your band’s work: songs, charts, parts and tab, setlists, gigs and rehearsals (including pay and contacts if you enter them), rehearsal notes, song requests, audio files, and booking records such as venues, contacts, message history and attached files.
• Edit history: who changed a song or a booking, and when, so the band can see what happened.
• Directory suggestions: if you suggest a fix to the shared venue directory, we keep the suggestion and which band sent it.
• Error reports: when something breaks, a technical report of the error (what failed, on which page, and the time), so it can be fixed. These don’t include your songs or passwords.

Who can see it

• Members of a band see that band’s data. Owners also manage invites and band settings.
• Nothing is public unless you make it so: a setlist share link, a song or show you choose to publish to your band’s website, or a calendar link you hand out. You can turn each of those off again.
• The shared venue directory only shows public facts about venues. What your band writes about a venue (notes, contacts, history) stays private to your band.

Services that help run it

• Microsoft Azure hosts the app, its database, uploaded files, and the error reports.
• Resend sends our emails (invites and password resets), so it receives the address and the message.
• Cloudflare Turnstile, when switched on, checks that sign-ups and logins come from a person rather than a bot.
• Embedded players. If a song links to YouTube, Spotify, Apple Music or a similar service, its player loads from that service when you open the song, under that service’s own privacy policy.

Cookies and storage on your device

We use one cookie, to keep you logged in. The app also keeps a copy of your band’s songs and setlists on your device so stage mode works without a signal, plus a few preferences such as which band you last opened. Logging out clears the offline copy.

Getting your data out, and deleting it

• Export: any member can download everything for a band from the account menu (Download band data). Venues and outreach history can also be exported as spreadsheets from Booking.
• Delete a band: the band’s owner can delete it, with all its songs, files and records, from Band settings.
• Delete your account: from your account menu. If you own a band other people are in, ownership passes to the longest-standing member; bands with nobody else in them are deleted with you.

Deleted data is gone from the app straight away. Backups the hosting provider keeps expire within a few weeks.

Changes and questions

If this page changes in a way that matters, we’ll say so in the app. For questions or requests, use Send feedback in the app’s account menu (your photo, top right).