Legal
Last Updated: November 11, 2026
Setlistr, Inc. (“Setlistr,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, store, share, transfer, protect, and retain information when you access or use Setlistr, including our mobile application, website, software, tools, features, data services, and related services (collectively, the “Service”).
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree to this Privacy Policy, you may not access or use the Service.
This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the Terms of Service.
When you create an account, use the Service, or contact us, you may provide us with information including: name, email address, username, password, artist name, band name, songwriter name, PRO membership information, IPI or CAE numbers, publisher information, label information, manager information, venue information, payment information, billing address, tax information, and any other information you choose to provide.
You may also provide performance information, setlist information, song information, venue details, performance dates and times, expected cover songs, setlist corrections, catalogue information, metadata, submission information, account preferences, feedback, support requests, and other information you enter or upload through the Service.
When you use the Service, we automatically collect: your IP address and browser or device type (user agent) when you sign in and make requests, which our hosting and authentication providers record for security and to operate the Service; usage events tied to your account, such as when a show is created, capture starts or ends, a review is opened, changed or completed, and an export is generated, with the time and song counts; and error and diagnostic logs.
Why we collect usage events. We use them to run features (for example, showing how a show was recorded) and to measure where people get stuck between capturing, reviewing and exporting a show, so we can improve the Service. We do not use them for advertising.
If you allow location access, the app records your device's precise location once, when you start capturing a show, and stores it with that show together with its distance from the venue. This adds venue context to your performance record; it is not proof that a performance took place. Location is optional: capture works if you decline, and you can change the permission in your device settings at any time.
Setlistr processes audio in two ways: live, real-time song identification during a performance, and audio or video recordings you choose to upload.
Live song identification. When you use live song identification features, Setlistr temporarily processes short portions of audio solely for the purpose of generating audio fingerprints and matching those fingerprints against third-party or internal music identification databases. This audio is not stored by Setlistr — only the results of the matching process (see below) are retained.
Uploaded recordings. If you upload an audio or video recording of a performance (for example, through the Upload a Show feature), Setlistr stores that recording in order to generate your setlist and as a record of the performance. Uploaded recordings are kept until you delete your account or ask us to delete them, as described in “Data Retention” below.
Setlistr stores information generated by song identification, including match results, confidence scores, timestamps, the recognition service's responses, the browser or device type that sent each sample, and your confirmations and corrections. We use these records to run the feature (for example, so a song is not added twice) and to measure and improve recognition accuracy.
Setlistr uses ACRCloud, a third-party audio recognition service, to match audio samples against music identification databases. Each sample is sent to ACRCloud as necessary to return match results. Under ACRCloud's terms, it acts as our processor, does not retain raw audio after processing, may retain derived data such as fingerprints for service, security and billing purposes, and does not use our content to train models or add it to shared reference databases.
If you add a photo or PDF of a setlist, Setlistr sends that file to Anthropic (the Claude AI service) to read the song titles. Only the file is sent, not your name, email or account details. The app explains this and asks for your permission before the first file is sent from each device; if you decline, nothing is sent and you can type the songs instead. You can withdraw permission at any time in Settings → Setlist photos, and the app will ask again before sending another file. Typed or plain-text setlists are read by Setlistr and never sent to Anthropic. Under Anthropic's commercial terms, it processes the file to return the result, deletes API inputs and outputs within 30 days unless longer retention is required to enforce its usage policy or by law, and does not use them to train its models. Setlistr also stores the photo with your show. Stored setlist photos are available at an unlisted web address: anyone who has the address can open the image.
If you connect third-party services to your Setlistr account, such as Spotify or other music platforms, we may receive information from those services, including artist catalogue information, track metadata, album information, playlist data, and related music data.
We may also receive information from performing rights organizations, collection societies, royalty administrators, publishers, labels, distributors, venues, industry databases, analytics providers, fraud prevention providers, payment processors, app marketplaces, and other third-party sources in connection with the Service.
If you access paid features, payment and billing information may be collected by Setlistr or by third-party payment processors or app marketplaces on our behalf. Setlistr does not store full payment card numbers. We may retain limited billing information such as the last four digits of a card, billing address, transaction records, and payment history for account management and legal compliance purposes.
We use the information we collect to: create and manage your account; enable song identification, audio fingerprinting, and music recognition features; generate, display, organize, and manage setlists, performance records, and submission data; prepare, organize, support, transmit, or submit performance information to performing rights organizations, collection societies, royalty administrators, publishers, venues, or other authorized third parties; display royalty estimates, submission status, performance history, and related information; verify your identity and authority; process payments and manage billing; provide customer support and respond to inquiries; send service-related notices, security alerts, account updates, billing notices, and legal notices; investigate, detect, prevent, and respond to fraud, abuse, unauthorized access, security incidents, rights disputes, and violations of our Terms of Service; comply with applicable legal obligations; enforce our Terms of Service and other agreements; improve the accuracy of song identification and other features; analyze usage, performance, and trends to improve the Service; and develop new features, products, and services.
We may use aggregated, anonymized, or de-identified data derived from use of the Service for analytics, product improvement, research, reporting, benchmarking, fraud prevention, music industry insights, market insights, and development of new features or services. Aggregated or de-identified data does not identify you personally as an individual user.
This does not permit us to sell individual artist-level User Content in a personally identifiable form unless separately authorized by you or permitted by applicable law.
We do not sell your personal information to third parties for their own marketing purposes.
We use the following service providers, which process data on our behalf and are required by their agreements with us to protect it consistently with this Privacy Policy: Supabase (database, sign-in and file storage); Vercel (hosting); ACRCloud (song recognition); Anthropic (reading setlist photos and PDFs); Mapbox (maps and venue search, which receives the venue names you search, your device's IP address and a random usage identifier); Resend (email delivery); Notion (our internal records of new accounts and shows: your name or email, sign-up date, PRO affiliation and show dates); and music information services (MusicBrainz, Spotify, setlist.fm, Last.fm, Bandsintown and Ticketmaster), which receive artist names and song titles but not your account details. The app also loads fonts from Google Fonts, which receives your device's IP address.
Within the Service, people you invite to your team can see and work on your shows according to their role, and anyone who has a public setlist link you share can view that setlist.
We may also share your information with: other trusted third-party service providers that help us operate, provide, maintain, protect, and improve the Service (including customer support providers and legal advisors); performing rights organizations, collection societies, royalty administrators, publishers, labels, venues, distributors, or other third parties where you authorize or request us to submit performance information; third-party integrations such as Spotify or other music platforms you connect to your account; app marketplaces such as Apple or Google in connection with app distribution, billing, and marketplace requirements; authorities where required by applicable law, legal process, court order, governmental or regulatory authority, or law enforcement request; and successors in connection with a merger, acquisition, financing, sale of assets, corporate reorganization, change of control, or similar transaction.
In the Setlistr app, we use local storage and cookies only to keep you signed in, remember your preferences and run features. The app does not load advertising, cross-site analytics or visitor-identification tools, and we do not track you across other companies' apps or websites.
On our website, outside sign-in and invitation pages, we use Google Analytics, the LinkedIn Insight Tag, Contentsquare, Warmly and RB2B. These services use cookies or similar technologies to measure visits, understand how the site is used, measure LinkedIn campaigns and, in the case of Warmly and RB2B, identify the companies or people visiting the site. They are not loaded on sign-in or invitation pages, or in the app.
You may be able to control certain cookies through your browser settings, device settings, or other tools. However, disabling certain cookies or tracking technologies may affect your ability to use parts of the Service.
We retain your information for as long as reasonably necessary to provide the Service, maintain accurate records, comply with legal obligations, resolve disputes, prevent fraud, enforce our Terms of Service, and support legitimate business purposes.
We may retain certain information after you delete your account or request deletion, including where retention is required or permitted by law, necessary for fraud prevention, needed to complete transactions or submissions, required to resolve disputes, needed to maintain audit trails or business records, or maintained in backup systems for a limited period.
Uploaded audio and video recordings of performances, and stored setlist photos, are kept until you delete your account, or until you ask us to delete them at info@setlistr.ai. Live song identification audio is not retained by Setlistr, as described above.
Deleting your account. You can delete your account in the app under Settings → Delete Account. This deletes:
• your sign-in, profile and access invitation;
• your shows, bookings, spreadsheet imports and their songs;
• the recordings, setlist files and photos stored with your shows, including files a team member uploaded for you, and files you uploaded that no show uses;
• recognition records for your shows (recognition events, processing logs, and the recognition service's responses) and usage events about your account and shows.
Files are deleted first and checked. If any can't be deleted, the app tells you whether some were already deleted, and your account and other records stay as they are until you try again. On other artists' shows you worked on as a team member, the shows stay because they belong to those artists: your name on them is replaced with “Former team member”, and files you uploaded for those artists stay with their shows.
Deleting your account also sends us a request to remove your record from our internal Notion workspace, which we do manually within 30 days. Some bookings can't be removed automatically: bookings you scheduled for another artist (they name you as the scheduler), and your own scheduled bookings and imported show listings. If you have any, the app accepts your request straight away, deletes everything else and closes your account so you can no longer sign in; our team then removes your name from those bookings, deletes your own scheduled bookings and listings and finishes deleting your account within 30 days, and emails you when it's done. The other artist's bookings stay, with your name replaced by “Former team member”.
Hosting and sign-in logs, which include IP addresses and device types, are kept by our providers for short periods according to their retention settings, generally between one day and 90 days. Our authentication provider also keeps a sign-in history with IP addresses for security, which is not removed when you delete your account; it is deleted according to that provider's retention settings.
Depending on where you live, you may have certain rights regarding your personal information, including the right to: access the personal information we hold about you; correct inaccurate or incomplete information; request deletion of your personal information, subject to legal limitations; request restriction of processing of your personal information; object to certain processing of your personal information; request a copy of your personal information in a portable format; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority or data protection regulator.
To exercise any of these rights, please contact us at info@setlistr.ai. We may require identity verification or account verification before responding to certain requests.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, use, disclose, or sell about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to non-discrimination for exercising your privacy rights; and the right to correct inaccurate personal information.
Setlistr does not sell your personal information to third parties for their own marketing purposes as defined under the CCPA/CPRA. To exercise your California privacy rights, please contact us at info@setlistr.ai.
If you are located in Canada, your personal information is handled in accordance with applicable Canadian privacy legislation, including PIPEDA and applicable provincial privacy laws. You may have the right to access the personal information we hold about you, to request correction of inaccurate information, and to withdraw consent to certain uses of your information, subject to legal and contractual restrictions.
To exercise your Canadian privacy rights, please contact us at info@setlistr.ai.
Setlistr is based in the United States. If you access or use the Service from outside the United States, your information may be transferred to, processed in, and stored in the United States or other countries where we or our service providers operate. By using the Service, you understand and consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.
Setlistr is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without required parental consent. If we learn that we have collected personal information from a child under 13 without required parental consent, we will take steps to delete that information, restrict the account, suspend access, or take other steps required by applicable law.
If you are a parent or legal guardian and believe that a child under 13 has provided personal information to Setlistr without required consent, please contact us at info@setlistr.ai.
We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, disclosure, alteration, loss, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. If you believe your account or information has been compromised, please contact us immediately at info@setlistr.ai.
We may update or modify this Privacy Policy from time to time. If we make material changes, we may provide notice through the Service, by email, in-app message, or another reasonable method. Your continued access to or use of the Service after the updated Privacy Policy becomes effective means you accept the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy, your personal information, your privacy rights, data access, correction, deletion, portability, or other privacy matters, please contact us at: