Privacy Policy

Effective Date: September 3, 2026

RequestIn LLC ("RequestIn," "we," "our," or "us") provides websites and mobile applications that let performers manage song lists and gigs, collaborate with invited gig participants, receive audience requests and messages, and accept payments for live performances. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the RequestIn website, Android app, iOS app, public song-request pages, and related services (collectively, the "Services").

Looking for account deletion? See Account and Data Deletion or use our public account deletion request page.

1. Information We Collect

Account and profile information

• Username, email address, optional full name, password credentials in hashed form, email-verification status, referral information, and account settings.
• Performer profile, instrument, public song-list link, payment preferences, and other information you choose to add to your account.

Gig, song-list, and collaboration information

• Repertoires, song lists, songs, artists, pricing, gig names and dates, performance history, and request-management settings.
• Gig invitations, accepted participants, participant roles, shared song information, notes, messages, and other content submitted within an invited gig group. This content is visible to the host and accepted participants as needed for the collaboration.
• Files you choose to upload or import, such as CSV files containing repertoire information.

Connected music services

• If you choose to connect Apple Music and import a playlist, RequestIn receives the selected playlist's name and identifier and its songs' titles, artists, order, and Apple Music identifiers. We use this information only to preview matches and create or update the RequestIn song list or repertoire you select.
• Imported titles and artists become part of your RequestIn song-list data and may be retained like songs you enter manually or import by CSV. RequestIn uses the Apple Music authorization token transiently to complete your request and does not store that token in your RequestIn account or database.
• If you choose YouTube Music import, Google authorizes read-only access to your YouTube account. RequestIn reads playlist names, identifiers, item order, video titles, and uploader names to help you confirm song details and import titles and artists. We do not copy audio or change your YouTube playlists. Google access tokens are encrypted in a temporary import session for up to 30 minutes, and removed when the import finishes or you cancel; we do not request or store Google refresh tokens or automatically sync later changes.

Audience and transaction information

• Name, email address, optional phone number, song requests, tips, messages to performers, and related request status.
• Transaction information such as amounts, currency, payment status, refund status, payment method category, payer details returned by the payment processor, and processor transaction or authorization identifiers.
• For performers, payment-account connection status, PayPal merchant identifier, available payment methods, and transaction or balance information needed to support payments and payouts.

Payments are currently processed by PayPal. PayPal collects and processes payment credentials under its own privacy policy. RequestIn does not store full card numbers or PayPal login credentials.

Communications and support

• Support-ticket email address, username, issue description, additional details you provide, and our communications with you.
• Email, push-notification, and SMS delivery information, including consent or opt-out status where applicable.

Private custom-request chats may remain writable for 10 days after a gig ends and remain available through a private link or remembered browser for a limited recovery period. If post-gig email notifications are offered, RequestIn requires the audience member to verify the address through a private link before later reply notifications are enabled. These emails concern that request and are not marketing messages.

Device, usage, and diagnostic information

• IP address, device type, operating system, browser type, app version, language, timestamps, referring pages, server logs, and error or diagnostic information.
• Pages and screens viewed and interactions such as searches, song selections, checkout events, feature use, and survey responses.
• A persistent browser identifier stored in local storage on some web pages.
• Mobile installation and push-notification information, including a Firebase installation identifier and Firebase Cloud Messaging device token. A token may be associated with your RequestIn account so we can deliver notifications.
• Cookies, local storage, software development kits, pixels, and similar technologies described below.

2. How We Use Information

We use personal information to:

• Create, authenticate, secure, and administer accounts.
• Provide public song lists, gig collaboration, invitations, repertoire tools, audience requests, tips, messages, and performance history.
• Process and verify payments, authorizations, refunds, and payouts; connect performer payment accounts; and provide transaction records.
• Send service communications by email, push notification, or SMS, including account-security notices, email-verification links, and updates about gigs, chats, or song requests.
• Respond to support requests and enforce our Terms of Service and platform rules.
• Detect, investigate, and prevent fraud, abuse, security incidents, and technical problems.
• Measure service performance, understand feature use, improve the Services, and measure the effectiveness of our outreach.
• Comply with legal obligations, resolve disputes, and protect the rights and safety of RequestIn, our users, and others.

3. When We Disclose Information

We disclose information in the following circumstances:

• With performers, audiences, and invited collaborators. We show song requests, messages, payment status, shared song information, and participant information to the people who need that information to use the requested feature. Phone numbers collected for SMS request updates are processed by RequestIn and its communications provider and are not shown to bands. A performer's public song list and chosen profile details can be viewed by anyone with its public link.
• With payment providers. We disclose information to PayPal to process payments, refunds, seller onboarding, and payouts. PayPal may return payer, merchant, and transaction information to us. Older records may contain Stripe identifiers from our prior Stripe integration, and Stripe controls information it collected while providing those services.
• With communication providers. We use Postmark to deliver email, Twilio to process SMS communications, and Google Firebase Cloud Messaging to deliver Android push notifications.
• With analytics and advertising providers. Some website pages use the Meta Pixel. Meta may receive page, cookie, device, browser, and IP-address information to provide measurement and advertising services. We also use our own usage analytics and persistent browser identifier.
• With hosting and technical service providers. Vendors that provide hosting, databases, security, monitoring, and other infrastructure process information for us under their service terms.
• With connected music services. When you choose the Apple Music import feature, Apple authenticates your Apple Music account and provides the selected playlist information through MusicKit and the Apple Music API. Apple's handling of your Apple Music account is governed by Apple's privacy policy.
• With Google and YouTube. YouTube Music import uses YouTube API Services. Google's handling of your account is governed by the Google Privacy Policy. You can revoke RequestIn's access in your Google account permissions. RequestIn uses this access only for the import you initiate.
• For legal and safety reasons. We may disclose information when reasonably necessary to comply with law or legal process; enforce our agreements; detect or prevent fraud, abuse, or security incidents; or protect rights, property, and safety.
• In a business transaction. Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable law.

We do not sell personal information for money. Some privacy laws may define disclosures through advertising technologies such as the Meta Pixel as a "sale," "sharing," or use for targeted advertising even when no money is exchanged.

4. Cookies, Local Storage, and Similar Technologies

Our websites use cookies and local storage for sign-in, security, preferences, checkout continuity, analytics, and other core functions. Public song-request pages may store a persistent RequestIn browser identifier and record IP address and events such as page views, searches, and song selections. You can remove these identifiers by clearing cookies and site data in your browser, although doing so may sign you out or reset preferences.

Pages that use the Meta Pixel may allow Meta to set or read cookies or similar identifiers. You can use browser privacy controls and your Meta account advertising settings to limit this activity. Blocking a required cookie or script may affect parts of the Services.

5. Mobile App Permissions and Notifications

The Android app uses internet access to connect to RequestIn and may request permission to display notifications. The app does not request access to precise location, contacts, photos, camera, or microphone as part of its current functionality. If you enable notifications, we associate the device's push token with your account to send relevant service notifications. You can disable notifications at any time in your device settings.

If you choose Apple Music import, the iOS app requests permission to access your Apple Music library, and the Android app opens Apple's MusicKit authentication flow. This access is optional and is used only when you initiate an import.

6. SMS Communications

If you provide a phone number and affirmatively opt in, you may receive transactional SMS messages from RequestIn related to your song request, including confirmations, status updates, and communications from the band. Enrollment is optional and is not required to submit or pay for a request. Message frequency varies, and message and data rates may apply. Reply STOP to opt out and HELP for help. See the SMS Request Updates Terms for complete program information.

We do not share, sell, rent, or otherwise provide mobile phone numbers or SMS opt-in data and consent to third parties or affiliates for their own marketing or promotional purposes. Bands can communicate through RequestIn but do not receive the audience member's phone number.

7. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain security, comply with legal, tax, accounting, payment, and recordkeeping requirements, resolve disputes, and enforce agreements. Retention periods vary by record type and context.

• Account information is kept while the account is active and is deleted or anonymized through the deletion process described below.
• Support, security, fraud-prevention, audit, and transaction records may be retained after account deletion when reasonably necessary for the purposes above.
• Gig and transaction records that involve other people may remain in de-identified or historical form so those users retain accurate performance, payment, refund, and accounting records.
• Backup copies may remain for a limited period until they are overwritten in the ordinary backup cycle.
• Payment processors retain information according to their own policies and legal obligations.
• Apple Music authorization tokens used for playlist import are not retained by RequestIn. Playlist and song metadata imported into RequestIn remains until you edit or delete the applicable song list, repertoire, or account, subject to the other retention terms in this section.
• YouTube Music import authorization is limited to the temporary session described above. Confirmed titles and artists become editable RequestIn song data. You can remove entries from your song lists and repertoires or request deletion of your account data through the processes below.

8. Account and Data Deletion

Delete in the mobile app: Sign in, open Account, select your Username to open Account Info, and choose Delete Account. Confirming the request closes any active gig, revokes active sessions, disables registered notification devices, deletes personal repertoire lists, removes identity and payment-connection fields from the RequestIn account, and deactivates the account.

Request deletion without the app: Visit our public account deletion request page. Enter the email address associated with the account and the username, if available. You do not need to sign in or reinstall the app. We will verify that you control the account before completing the request. You may also email contact@requestin.net with the subject "Account deletion request."

Deletion is irreversible. As described in this section and the retention section above, we may retain de-identified or limited records when necessary for transactions, security, fraud prevention, other users' records, or legal obligations. Information held independently by PayPal or another third party is governed by that party's deletion and retention practices.

9. Your Privacy Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. You may update available profile and service settings in your account, disable push notifications through device settings, opt out of SMS as described above, clear browser storage, and use Meta's advertising controls. To make another privacy request, use the Support form or email contact@requestin.net. We may verify your identity before acting on a request.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network connections, access controls, hashed account passwords, and protected credential storage in the mobile apps. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

11. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

12. International Processing

RequestIn and our service providers may process information in the United States and other countries. Those locations may have privacy laws different from the laws where you live. Where required, we use appropriate safeguards for international transfers.

13. Changes to This Policy

We may update this Privacy Policy as the Services or legal requirements change. We will post the updated policy here, change the effective date, and provide additional notice when required by law.

14. Contact Us

RequestIn LLC
Email: contact@requestin.net
Support: requestin.net/support