Privacy policy

This policy describes how Hangar 31, LLC ("Hangar 31", "we", "us") handles personal information in Usician, including usician.app and every Local's portal (the "Service"). The Service is offered only in the United States and is not directed to people outside the United States. Information is stored and processed in the United States. Capitalized terms not defined here have the meanings in our Terms of Service.

Locals control Member information

Each Local decides what information it collects about its Members and how it uses it. For that information, the Local is the business (or controller) responsible for it, and Hangar 31 acts as its service provider (or processor), handling it on the Local's behalf and under its instructions. The Local's own privacy practices apply to that information. Questions and requests about Member information should go to your Local. If we receive a request about a Local's Member information, we may refer it to that Local.

Hangar 31 is responsible only for information about the people who set up and manage Locals' accounts, and for the operation of usician.app itself.

Information in the Service

• Account information: name, email address, optional phone number, a secure hash of your password, and, if you use two-step sign-in, an encrypted authenticator key and backup codes.
• Membership information a Local keeps: member number, membership type and status, dates, history and office notes.
• Application information a Local requests, which may include date and place of birth, address, instruments, prior Locals, an emergency contact, a beneficiary and answers to the Local's questions.
• Directory listings a Member chooses to publish, to other Members or to the public.
• Dues, payment, work dues and hall booking records. Card details are handled by Stripe; the Service does not store full card numbers.
• Technical information: sign-in sessions (IP address and browser), a log of changes made in office tools, email delivery and bounce events, and error reports.

The Service is not designed for, and must not be used to store, Social Security numbers, full financial account numbers, health information or similar sensitive information.

How information is used

To provide and operate the Service for Locals and their Members, including sending service email (account verification, password resets, invitations, invoices, receipts and notices a Local sets up); to secure, maintain and improve the Service; and to comply with law. We may create de-identified, aggregated information that doesn't identify any person or Local.

We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. The Service uses no advertising or analytics trackers.

Cookies

The Service uses only cookies necessary to sign you in and keep you signed in, including one that remembers a trusted device for two-step sign-in if you choose. Because we don't track you across sites, we don't respond differently to "Do Not Track" signals.

When information is disclosed

• Within your Local, according to its settings (for example, to its Staff, or in its member or public directory if you choose to be listed).
• To service providers that help us run the Service, under contracts that limit their use of it: Vercel (application hosting); Neon (database hosting); Amazon Web Services (email delivery and encrypted backups); Stripe (card payments, on each Local's own Stripe account); Sentry (error monitoring, configured not to collect names, emails or other personal details); Cloudflare (DNS); Better Stack (uptime monitoring (no personal information)).
• When required by law or legal process, or to protect the rights, property or safety of Hangar 31, Locals, Members or others.
• In connection with a merger, sale or transfer of all or part of our business.

Retention

Information is kept while a Local uses the Service and as needed to operate it, resolve disputes and meet legal obligations. Encrypted backups are kept for up to about 13 months and then deleted automatically. After a Local stops using the Service, we may delete its information at any time, so Locals should export what they need first.

Security

We use reasonable administrative, technical and physical safeguards, including encryption in transit and at rest, separation of each Local's data, and required two-step sign-in for office staff. No method of transmission or storage is completely secure, and we cannot guarantee security. If we become aware of a breach affecting personal information, we will notify the affected Local, and others where required by applicable law.

Your state privacy rights

Depending on the state where you live, you may have rights to know, access, correct, delete or obtain a copy of personal information, and to appeal a decision about your request. Because each Local controls its Members' information, Members should make these requests to their Local; we will assist Locals as required by law. If your request concerns information Hangar 31 controls, email support@usician.app with the subject "Privacy request". We will verify your identity and respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. People aged 13 to 17 may use the Service only with a parent's or guardian's permission. If we learn we have collected information from a child under 13, we will delete it.

Changes

We may update this policy by posting a new version here and updating the date above. Changes take effect when posted.

Contact

Hangar 31, LLC · support@usician.app