Privacy Policy

Last updated: September 2026

Band Toolbox is a private web app for our band: it manages shows, setlists, a shared calendar with invitations and RSVPs, and member messaging. This policy explains what the app stores and how it is used.

What we store

• Account and profile info — your name, display/stage name, email address, and password (hashed) for signing in.
• App content — messages you send, shows and setlists, song catalog entries, and calendar events you are added to.
• RSVP data — whether you have been invited to an event and your response (accepted / declined / maybe).
• Google account connection — for one authorized band account, an OAuth refresh token that lets the app send calendar invites and read RSVPs as that account. This token is stored on the app's own server only.

How it is used

Everything is used solely to operate the band site: scheduling shows, building setlists, emailing calendar invitations, tracking responses, and member communication. We do not sell your data, share it with third parties, run ads, or use analytics trackers.

Google user data

If you connect a Google account, its access is limited to Google Calendar for managing the band's shared calendar (creating events, inviting guests, reading RSVP statuses). The app does not read your Gmail, Drive, or any other Google services. Access is limited to the band's own use of the calendar and is never transferred to other parties. You can revoke access at any time from your Google account permissions page (myaccount.google.com/permissions).

Emails sent by the app

The app sends transactional email: calendar invitations, password-reset links, and administrative notices. Invitations sent for a band calendar come from the calendar's connected account.

Data removal

Ask a band admin to remove your profile; associated personal data is deleted with it.

Contact

Questions about this policy: honkytonkpgh@gmail.com