Privacy Policy

Data Controller

GATEBREAKER.IO is a trading name of ELPAMU LTD, a company registered in England and Wales under company number 15824095, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. ELPAMU LTD is the data controller responsible for your personal data collected through GATEBREAKER. You can contact us at hello@gatebreaker.io. We have not appointed a Data Protection Officer because the scale of our processing does not require one; privacy questions go to the same address.

Data We Collect

We collect the following information: your email address and DJ name (required to create an account); your city and country (required to show you opportunities near you); the DJ profile data you choose to add (real name, phone number, bio, photo, genres, music links, mix links and social links, follower counts we fetch from the platforms you link); your activity on the platform (open calls viewed, saved and applied to, pitches generated, outcomes you report, EPK links you create); payment information, which is processed by Stripe; and, with your consent, cookie and device data as described in the Cookie Policy.

We do not store your IP address. Our analytics record only the country and city derived from your connection at the moment of the visit, the type of device, and the page you were on.

How We Use Your Data

Your data is used to operate your GATEBREAKER account, show you open calls near your city, help you fill in and send applications, build and host your EPK, process subscription payments, send service emails, keep the platform secure, improve it, and comply with legal and tax obligations. We also produce aggregated, anonymised market statistics about the emerging DJ scene, described below. We do not use your data for purposes unrelated to these functions without your explicit consent.

Legal Basis (GDPR Article 6)

We process your data on the following legal grounds:

• Contract performance (Article 6(1)(b)) to provide your GATEBREAKER account, EPK, application tools and subscription.
• Legitimate interest (Article 6(1)(f)) to keep the platform secure, to improve it, to produce aggregated and anonymised market statistics, and to contact DJs found in public sources about GATEBREAKER once or twice.
• Consent (Article 6(1)(a)) for marketing communications, non-essential cookies, the optional Get Discovered scouting feature, and optional gig verification.
• Legal obligation (Article 6(1)(c)) for tax and accounting records.

You can withdraw consent at any time. Cookies can be changed via “Cookie settings” in the footer. Scouting and verification can be switched off directly in your profile settings. For anything else, contact us.

Processors and Data Sharing

We use a small number of service providers who process data on our instructions under written data-processing terms. By category:

Category	Provider	What they receive	Where
Database, authentication, file storage	Supabase	Account and profile data, activity data	EU (Ireland)
Website hosting and edge delivery	Netlify	Requests to our pages; country and city are derived at the edge, the IP is not stored	EU and US, standard contractual clauses
Payments	Stripe	Payment details, billing email, subscription status	EU and US, standard contractual clauses
Transactional email	Resend	Your email address and the content of service emails	US, standard contractual clauses
AI language-model provider	Anthropic	The profile fields needed to prepare an application (DJ name, real name if given, contact email, phone if given, bio, genres, city) and the text of the listing; not used to train models	US, standard contractual clauses
Web data collection	Automation services used to import your own public profile at your request and to collect publicly posted open calls	Public profile data you ask us to import	EU and US
Analytics and advertising measurement (only with your cookie consent)	Google (Google Analytics), Meta (Meta pixel and Conversions API)	Pseudonymous usage and conversion events as described in the Cookie Policy	EU and US, standard contractual clauses

We do not sell personal data to third parties. Aggregated, anonymised market statistics that cannot identify any individual may be shared with or sold to industry partners. Your identifiable DJ profile is only ever shown to labels, booking agencies, venues or scouts if you have explicitly opted in through the Get Discovered setting in your profile.

Market Intelligence From Platform Activity

We analyse how GATEBREAKER is used, for example which open calls receive views and applications, in which cities and genres, and what organisers ask for and offer. From this we produce aggregated market-intelligence reports and services for music-industry customers such as venues, festivals, agencies and labels.

These insights are always aggregated and anonymised. We apply a minimum group size, so no published statistic can identify you. We never sell your name, your contact details or your individual activity unless you have explicitly opted in to scouting.

Legal basis: our legitimate interest in producing anonymised market research (Article 6(1)(f) GDPR). You can object to this processing at any time under Article 21 GDPR by contacting us at hello@gatebreaker.io.

Get Discovered (Optional Scouting Opt-In)

If you switch on Get Discovered in your profile, your artist profile (name, genres, cities, mix links, verified gig history and activity-based momentum indicators) may be shown to vetted industry customers looking for talent.

This is entirely optional and off by default. You can switch it off at any time, and switching it off is as easy as switching it on. Your profile is removed from scouting products within 30 days. We keep a record of when you switched this setting on or off, so that we can demonstrate the basis on which your profile was shown. Legal basis: your consent (Article 6(1)(a) GDPR).

EPK Links and Analytics

Your GATEBREAKER EPK is free on every plan. Your public EPK page is visible to anyone who has its address. When you share an EPK link, we collect standard usage analytics (opens, approximate location by country and city, device type, and which sections were viewed) and show them to you.

If you label a link with a recipient, for example a label or venue name and email address, we store that information to organise your analytics. We use recipient information for two purposes only: showing you your own EPK analytics, and producing the aggregated market intelligence described above, always subject to the minimum group size.

We never contact your recipients, never sell or share their details, and delete recipient details 24 months after the link was last active.

Gig Verification (Optional)

If you enable verification, we check the past gigs listed on your profile against your own public social-media posts and public event pages, and store only the result and a reference link. We do not collect anything else from your profiles. Legal basis: your consent (Article 6(1)(a) GDPR).

Prospects and Outreach

If we contacted you before you had an account, we hold limited information about you obtained from public directories and open sources: your name or artist name, your public social-media handle, your public bio, your city and, where it was publicly listed, an email address. We use it only to tell you about GATEBREAKER, at most a few times, and to record whether you replied so we do not contact you again unnecessarily.

Legal basis: our legitimate interest in reaching working DJs who are likely to benefit from the platform (Article 6(1)(f) GDPR). You can object at any time by replying to the message or emailing hello@gatebreaker.io, and we will stop and remove the record. Records of people who did not join are anonymised 24 months after last contact. We never upload these contact lists to advertising platforms.

Cookies and Analytics

Essential cookies and storage keep you signed in and remember your cookie choice. Analytics cookies (Google Analytics and our own page statistics) and marketing cookies (Meta pixel) are set only if you accept them in the banner, and you can change your choice at any time via “Cookie settings” in the footer. Each decision is recorded with a timestamp and the policy version in force. Full details, including names and lifetimes, are in the Cookie Policy.

Automated Decisions

We do not make automated decisions about you that produce legal effects or similarly significantly affect you. Rankings, scores and indicators in our products are informational; booking and signing decisions are made by people. The AI-assisted application tool prepares text and form entries from your own profile data; you review and submit every application yourself.

Data Retention

Account data is retained for as long as your account is active and deleted when you close it, apart from the records below. Billing records are retained for seven years to satisfy tax and accounting requirements. Marketing preferences are retained until you withdraw consent. Cookie data is retained according to the Cookie Policy.

Usage analytics and EPK link analytics are retained in identifiable form for up to 24 months, after which an automated monthly job removes the identifiers. Aggregated statistics contain no personal data and may be retained indefinitely. Consent records are retained for as long as we need them to demonstrate the lawfulness of past processing. Prospect records are anonymised 24 months after last contact.

Your Rights (GDPR)

Under GDPR you have the right to access your personal data, request correction of inaccurate data, request erasure, restrict processing, request data portability, object to processing, and withdraw consent at any time. You can delete your account and its data from your profile page or by emailing us; analytics rows are de-identified rather than deleted so that anonymous statistics survive.

You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom, contact the ICO (Information Commissioner's Office). In Poland, contact the UODO (Urząd Ochrony Danych Osobowych). In any other EU or EEA country, contact your national data protection authority. To exercise any of these rights, contact us at hello@gatebreaker.io.

International Transfers

Your account data is stored in the EU. Some of our processors operate in the United States. Where data leaves the EU or the UK we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the providers' own safeguards, and we transfer only what the service needs.

Security

All traffic is encrypted in transit. Access to personal data in our systems is restricted by row-level security and limited to the account owner and authorised personnel. Payment processing is handled by Stripe. While we take reasonable precautions, no online transmission is completely secure. If we become aware of a breach affecting your data we will inform you and the relevant authority as required by law.

Changes

We may update this Privacy Policy. Changes are published on this page with a new version date. Where a change materially affects how we use your data we will tell you by email or by a notice on the site before it takes effect.

Contact

For privacy questions or concerns, contact ELPAMU LTD at hello@gatebreaker.io or by post at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Version 2026-09-02. Effective 2 September 2026. Previous version: 28 July 2026.