Privacy Policy

Last updated: September 2026

OurSongSet ("we", "us") is operated in the United Kingdom. This policy explains what personal data we collect when you use OurSongSet at oursongset.com, why we collect it, and what your rights are.

What we collect

When you create an account we collect:

• Email address — used to log you in, send account emails (verification, password reset), and notify you when a setlist or run sheet is shared with you.
• Display name — shown to other members of your groups.
• Password — stored as a one-way hash; we never see or store your actual password.

As you use the app we also store the content you create — groups, teams, setlists, run sheets, and any songs or chord charts you upload.

How we use your data

• To provide the service — logging in, showing your setlists, sharing with your teams.
• To send transactional emails — account verification, password resets, share notifications. We do not send marketing emails.
• To keep the service secure and prevent abuse.

We do not sell your data or share it with third parties for advertising.

Who can see your data

• Other members of your groups can see your display name and the content you contribute to that group.
• Team members can see setlists and run sheets shared with their team.
• Your email address is visible only to admins of groups you belong to, for the purpose of managing membership.

Third-party services

We use the following providers to run the service. Each processes data on our behalf under their own privacy terms:

• Supabase — database and authentication (data hosted in the EU)
• Vercel — web hosting
• Resend — transactional email delivery

Song content and copyright

Chord charts and lyrics in the shared song catalog may be subject to copyright. It is your responsibility to ensure your group holds the appropriate licences (e.g. CCLI) for any copyrighted material you use. Content you upload to your own group is your responsibility.

Your rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and data
• Object to how we process your data

To exercise any of these rights, email hello@oursongset.com. We will respond within 30 days.

Data retention

We keep your data for as long as you have an account. If you delete your account, your personal data is removed within 30 days. Content you contributed to groups (setlists, run sheets) may be retained by the group as it belongs to them, but your name will be removed from it.

Cookies

We use a single essential session cookie to keep you logged in. We do not use tracking or advertising cookies.

Changes to this policy

If we make significant changes we'll email you. Minor updates will be reflected on this page with a new date.

Contact

Questions about your data? Email hello@oursongset.com.