Privacy Policy

Last updated: June 2026

This policy explains how Set List Creator handles your personal information. We keep it short, plain and honest: we only collect what we need to run the service, and we never sell your data.

Introduction

Set List Creator (“Set List Creator”, “we”, “us” or “our”) is a setlist-building tool for cover bands, available at setlistcreator.co.nz. The service is operated by Paragon Design, a sole operator based in New Zealand. We are committed to protecting your privacy and handling your personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles.

By creating an account or using the service, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the service.

Information We Collect

We collect the following categories of personal information, most of which you provide directly when you sign up and use the app:

  • Account details. Your name and email address, collected through our authentication provider when you create an account or sign in.
  • Content you create. Band names, your song library, setlists, gig details, templates and any notes or ratings you enter.
  • Band member contact details. If you are a band owner, the names, email addresses and phone numbers of band members you add so they can be invited and sent gig information. You are responsible for having a proper basis to share these details with us.
  • Uploaded files. Chord charts (PDFs or images) and audio tracks that you upload and attach to songs.
  • Billing information. Subscription and payment processing is handled by Stripe. We store a Stripe customer identifier and your subscription status; we do not store or have access to your full card number.
  • Technical and usage data. Standard server and log information generated by our hosting and infrastructure providers (such as IP address, browser type and timestamps) used to operate, secure and troubleshoot the service.

How We Use It

We use your personal information to:

  • Provide, maintain and improve the service and its features.
  • Create and authenticate your account and keep it secure, including providing read-only access to the band members you invite.
  • Process your subscription, free trial and payments, and send related billing communications.
  • Send transactional and notification emails, such as gig packs, invitations and account or service notices.
  • Respond to your support requests and other enquiries.
  • Detect, prevent and address technical issues, fraud, abuse or breaches of our Terms of Service.
  • Comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Sub-processors & Third Parties

We rely on a small number of trusted third-party service providers to run the service. These providers process personal information on our behalf, only as needed to deliver their part of the service:

  • Stripe — payment processing and subscription billing.
  • Clerk — account authentication and login.
  • Convex — database, file storage and backend hosting for your app data and uploads.
  • Resend — sending transactional and notification email.
  • Vercel — web hosting and content delivery for the application.

Each provider has its own privacy and security practices. We choose reputable providers and limit the information shared with them to what is necessary.

Cookies

We use only strictly necessary cookies, and we do not use advertising or third-party tracking cookies. Because of this, no cookie consent banner is required to use the service. The cookies we set include:

  • Authentication cookies set by our login provider (Clerk) to keep you signed in and secure your session.
  • Band member access cookies named clo_member_auth and clo_member_token, which allow invited band members to access their band’s read-only view via a link.

These cookies are essential for the service to function. Blocking them in your browser may prevent you from signing in or accessing your band.

Data Storage & International Transfer

Your information is stored and processed by the providers listed above. Some of these providers operate data centres and infrastructure outside New Zealand, including in the United States. This means your personal information may be transferred to, stored and processed overseas.

Where information is held overseas, it may be subject to the laws of those countries. We take reasonable steps to ensure our providers maintain appropriate safeguards to protect your information consistent with the New Zealand Privacy Act 2020.

Your Rights & Choices

Under the New Zealand Privacy Act 2020 you have the right to access the personal information we hold about you and to request correction of anything that is inaccurate. In practice:

  • You can view and edit most of your information directly in the app at any time.
  • You can request a copy of, or correction to, your personal information by emailing us at support@setlistcreator.co.nz.
  • You can permanently delete your account and associated data from your account settings (see below).

If you have a concern about how we handle your information, please contact us first and we will do our best to resolve it. You also have the right to complain to the New Zealand Office of the Privacy Commissioner (privacy.org.nz).

Data Retention & Deletion

We retain your personal information for as long as your account is active and as needed to provide the service. You can permanently delete your account at any time from Settings; doing so deletes your account and the associated data, including your bands, songs, setlists and uploaded files.

After deletion, residual copies may persist for a short period in routine backups maintained by our infrastructure providers before they are overwritten, and we may retain limited records where required to comply with legal, tax or accounting obligations (for example, billing records held by Stripe).

Children

Set List Creator is intended for use by working and hobbyist musicians and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes

We may update this Privacy Policy from time to time to reflect changes to the service or to legal requirements. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may also be communicated by email or in the app. Your continued use of the service after an update means you accept the revised policy.

Contact

For any privacy questions, requests or complaints, please contact us at support@setlistcreator.co.nz. Set List Creator is operated by Paragon Design, New Zealand.

This document is provided as a general template for information only and does not constitute legal advice. You should obtain your own professional legal advice before relying on it.