Legal

Privacy Policy

Effective March 2026 · Last updated 28 July 2026

On this page
  1. Data Controller
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis
  5. Data Sharing
  6. Market Intelligence
  7. Get Discovered
  8. EPK Links & Analytics
  9. Gig Verification
  10. Automated Decisions
  11. Data Retention
  12. Your Rights
  13. International Transfers
  14. Security
  15. Changes
  16. Contact

Data Controller

ELPAMU LTD is the data controller responsible for your personal data collected through GATEBREAKER. You can contact us at hello@gatebreaker.io.

Data We Collect

We collect the following information: your name and email address; the DJ profile data you provide (artist name, bio, city, genres, music links and social links); your activity on the platform (open calls viewed, saved and applied to, pitches generated, and application outcomes you report); payment information, which is processed securely by Stripe; your IP address, device information and browsing data through cookies.

Your payment card details are never stored by GATEBREAKER. Card data goes directly to Stripe, our payment processor.

How We Use Your Data

Your data is used to operate your GATEBREAKER account, generate personalised pitch emails, build and host your EPK, process subscription payments, send service emails, improve our platform, and comply with legal and tax obligations. We also produce aggregated, anonymised market statistics about the emerging DJ scene, which are described in detail below. We do not use your data for purposes unrelated to these functions without your explicit consent.

Legal Basis (GDPR Article 6)

We process your data on the following legal grounds:

You can withdraw consent at any time. Scouting and verification can be switched off directly in your profile settings; for anything else, contact us.

Data Sharing

We share data with Stripe (payment processing), Netlify (hosting), Supabase (database) and Resend (transactional email). We do not sell personal data to third parties. Aggregated, anonymised market statistics that cannot identify any individual may be shared with or sold to industry partners. Your identifiable DJ profile is only ever shown to labels, booking agencies or scouts if you have explicitly opted in through the Get Discovered setting in your profile.

Market Intelligence From Platform Activity

We analyse how GATEBREAKER is used, for example which open calls receive views and applications, in which cities and genres. From this we produce aggregated market-intelligence reports and services for music-industry customers such as venues, agencies and labels.

These insights are always aggregated and anonymised. We apply a minimum group size, so no published statistic can identify you. We never sell your name, your contact details or your individual activity unless you have explicitly opted in to scouting.

Legal basis: our legitimate interest in producing anonymised market research (Article 6(1)(f) GDPR). You can object to this processing at any time under Article 21 GDPR by contacting us at hello@gatebreaker.io.

Get Discovered (Optional Scouting Opt-In)

If you switch on Get Discovered in your profile, your artist profile (name, genres, cities, mix links, verified gig history and activity-based momentum indicators) may be shown to vetted industry customers looking for talent.

This is entirely optional and off by default. You can switch it off at any time, and switching it off is as easy as switching it on. Your profile is removed from scouting products within 30 days. We keep a record of when you switched this setting on or off, so that we can demonstrate the basis on which your profile was shown. Legal basis: your consent (Article 6(1)(a) GDPR).

EPK Links and Analytics

Your GATEBREAKER EPK is free on every plan. When you share your EPK link, we collect standard usage analytics (opens, approximate location, device type, and which sections were viewed) and show them to you.

If you label a link with a recipient, for example a label or venue name and email address, we store that information to organise your analytics. We use recipient information for two purposes only: showing you your own EPK analytics, and producing the aggregated market intelligence described above, for example how many electronic-music EPKs a well-known label received in a quarter, always subject to the minimum group size.

We never contact your recipients, never sell or share their details, and delete recipient details 24 months after the link was last active.

Gig Verification (Optional)

If you enable verification, we check the past gigs listed on your profile against your own public social-media posts and public event pages, and store only the result and a reference link. We do not collect anything else from your profiles. Legal basis: your consent (Article 6(1)(a) GDPR).

Automated Decisions

We do not make automated decisions about you that produce legal effects or similarly significantly affect you. Rankings, scores and indicators in our products are informational; booking and signing decisions are made by people.

Data Retention

Account data is retained for as long as your account is active. Billing records are retained for seven years to satisfy tax and accounting requirements. Marketing preferences are retained until you withdraw consent. Cookie data is retained according to our Cookie Policy.

Usage analytics and EPK link analytics are retained in identifiable form for up to 24 months, after which they are deleted or fully anonymised. Aggregated statistics contain no personal data and may be retained indefinitely. Consent records are retained for as long as we need them to demonstrate the lawfulness of past processing.

Your Rights (GDPR)

Under GDPR you have the right to access your personal data, request correction of inaccurate data, request erasure, restrict processing, request data portability, object to processing, and withdraw consent at any time.

You also have the right to lodge a complaint with the relevant supervisory authority. In Poland, contact the UODO (Urząd Ochrony Danych Osobowych). In the United Kingdom, contact the ICO (Information Commissioner's Office). To exercise any of these rights, contact us at hello@gatebreaker.io.

International Transfers

Your data is processed within the EU and EEA. Where transfers outside the EEA occur, we apply appropriate safeguards such as Standard Contractual Clauses to protect your data.

Security

We implement SSL encryption across the platform and use secure payment processing via Stripe. Access to personal data is restricted to authorised personnel only. While we take reasonable precautions, no online transmission is completely secure.

Changes

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Your continued use of the platform after changes indicates your acceptance.

Contact

For privacy questions or concerns, contact ELPAMU LTD at hello@gatebreaker.io.