Privacy policy
Last updated: November 6, 2026
Toquem only uses your data so you can find gigs or musicians and close them safely. It does not sell it or use it for advertising. It complies with the GDPR and Spanish Organic Law 3/2018 (LOPDGDD).
Controller
Félix Cavestany Güell, NIF 21776678W, Carrer de Saragossa 61, principal, 08006 Barcelona (España). For any privacy matter: felixcguell@gmail.com.
What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email, password (encrypted), name and language | Create and keep your account, verify your email and send you service emails | Contract (art. 6.1.b GDPR) |
| Musician profile: stage name, genres, city, area, fee, members, cover photo, links, music, events, merch and bio | Show it on your public page and to venues so they can propose gigs | Contract |
| Venue profile: name, type, city, area, capacity, equipment, photo, links, gigs and description | Show it on your public page and to musicians | Contract |
| Free dates, proposals, gigs and their messages | Manage proposals, agreed gigs and your calendar | Contract |
| Private contact (email and phone) and venue address | Share them only with the other party of a confirmed gig | Contract |
| Community posts, replies, likes and photos | Show them to people with a Toquem account | Contract |
| Private conversations | Deliver them to the other person and email you about new messages | Contract |
| Reviews (stars and comment) and number of gigs played | Show each profile's reputation and sort searches | Legitimate interest in a trustworthy community (art. 6.1.f GDPR) |
| Waiting list email | Let you know when we open | Consent (art. 6.1.a GDPR) |
| IP address, access date and time, technical logs and reports | Security, abuse prevention and moderation | Legitimate interest |
We do not ask for special category data (health, beliefs…). Toquem is only for people aged 18 or over.
Who sees your data
- Anyone on the internet can see the public pages of published musician and venue profiles (without email, phone or venue address), their upcoming events and their published reviews.
- People with an account can also see musicians' free dates and the Community.
- The other party of a proposal or conversation sees what you write to them. Until there is a confirmed gig between you, the app automatically hides emails, phone numbers and links in messages. Your private contact and the venue address are only shown once the gig is confirmed.
- Reviews are blind: they are not published until both parties review or 14 days pass.
- The Toquem team may see reported content in order to moderate it.
Providers processing data on behalf of Toquem
| Provider | Service | Where |
|---|---|---|
| Supabase | Database, photos and account management | European Union (Ireland) |
| Vercel | Website hosting | EU and US |
| Sending service emails | EU and US | |
| Anthropic (via Vercel AI Gateway) | AI musician recommendations | US |
AI recommendations. When a venue asks for recommendations, we send its description and the public data of musician profiles (stage name, genres, area, fee, bio, free dates and reputation) to an Anthropic AI model (Claude). Emails, phone numbers and addresses are never sent. The legal basis is our legitimate interest in helping venues find musicians; a musician can object by writing to felixcguell@gmail.com.
When a provider processes data outside the EU, it does so with GDPR safeguards: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We will only share data with authorities when the law requires it.
How long we keep it
- While you have an account, we keep your data to provide the service.
- If you delete your account, we erase your name, profiles, photos, dates, private contact, venue address and the text of your reviews and messages, and revoke your access. We keep, anonymised, the fact that a gig took place on a date and the stars you gave or received, so the other party's history and reputation are not altered.
- Waiting list emails are deleted when you ask or when we no longer use the list.
- Technical logs are deleted after 90 days at most.
Your rights
You can access, correct and erase your data, object to or restrict processing, and take your data to another service. Many of these you can do in the app itself: edit your profile in «My profile» or «My venue», and delete your account in «My account → Delete my account». For anything else, write to felixcguell@gmail.com; we will reply within one month.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Automated decisions
Toquem sorts search results by gigs played in the app and by average rating, and does not let profiles be published without some minimum details. None of these rules has legal effects on you; if a moderation decision affects you, a person reviews it.