Privacy Policy

Welcome to DanceBrain.

DanceBrain is a software platform that helps dance organizations create workshops, manage registrations, track attendance, communicate with participants, and streamline workshop administration.

DanceBrain is currently operated by its founders as an early-access platform while the business is being established.

This Privacy Policy explains what information we collect, why it is collected, how it is used, and what rights individuals have regarding their personal data.

This Privacy Policy applies to:

• visitors to DanceBrain
• attendees registering for workshops through DanceBrain
• dance organizations using DanceBrain
• instructors and administrators managing workshops through DanceBrain

Data protection law distinguishes between the party that decides what personal data is collected and why (the Data Controller) and the party that handles that data on the controller’s behalf (the Data Processor). Which role DanceBrain plays depends on the data in question.

Attendee registration data

The dance organization or workshop organizer generally determines what attendee information is collected and why it is collected. The organization therefore generally acts as the Data Controller.

DanceBrain processes this information on behalf of the organization in order to provide the workshop-management service and therefore generally acts as the Data Processor.

Data about DanceBrain itself

For data related directly to operating DanceBrain itself, such as administrator account information, platform security, service communications, and website analytics, DanceBrain may act as the Data Controller.

Administrator and account information

This may include:

• name
• email address
• organization information
• authentication-related information handled through Supabase Authentication

Account passwords are handled by Supabase Authentication.

Workshop information

This may include:

• workshop title
• description
• dates and times
• venue
• pricing
• instructor information
• uploaded workshop imagery or promotional material

Attendee registration information

Depending on the workshop form configured by the organizer, this may include:

• name
• email address
• phone number
• age or age-related information
• workshop or session selection
• custom registration responses
• photo and video consent responses
• fitness or readiness declarations
• registration timestamp
• payment status
• check-in and attendance status

The exact fields vary between workshops, because each organizer decides which questions their own registration form asks.

Technical and usage information

This may include:

• IP address
• browser information
• device information
• pages visited
• approximate usage information
• diagnostic information
• analytics information

Personal data may be used for purposes such as:

• providing DanceBrain services
• operating administrator accounts
• creating and managing workshops
• processing workshop registrations
• enabling organizers to manage attendees
• tracking attendance and payment verification
• sending registration confirmations and workshop-related emails
• maintaining platform security
• troubleshooting and improving the service
• analytics where permitted
• complying with legal obligations

DanceBrain does not sell personal data.

Where the GDPR applies, processing may rely on different legal bases depending on the context, including:

• performance of a contract, for example operating an administrator account or delivering a requested registration
• legitimate interests, for example keeping the platform secure and improving the service
• consent, for example where consent is specifically asked for
• compliance with legal obligations

Consent is not the legal basis for every processing activity. For attendee data processed on behalf of an organizer, the organizer is generally responsible for determining the appropriate legal basis for collecting that data.

DanceBrain currently uses the following service providers:

• Supabase — authentication and database infrastructure
• Vercel — application hosting and deployment
• Resend — transactional email delivery
• Google Analytics — website and usage analytics

These providers may process personal data in order to provide their services to DanceBrain.

DanceBrain currently does not process card payments.

Workshop payments are made directly to workshop organizers using the payment method provided by the organizer. DanceBrain does not receive those payments.

DanceBrain may store administrative information such as whether a payment has been marked as verified.

Personal data is kept only for as long as it is needed for:

• providing the service
• workshop administration
• account operation
• legitimate business or security purposes
• legal obligations

Retention periods may vary depending on the purpose above and on what an organizer asks us to keep for their workshops.

DanceBrain uses reasonable technical and organizational measures intended to protect personal data, including authenticated access controls and encrypted HTTPS connections.

No online service can guarantee absolute security.

Some of the infrastructure and service providers used by DanceBrain may process information outside Sweden or outside the country in which you are located.

Where required by applicable law, appropriate safeguards may be used for such international transfers.

Where the GDPR applies, individuals may have rights including:

• access to their personal data
• correction of inaccurate personal data
• deletion of personal data
• restriction of processing
• objection to processing
• data portability, where applicable
• withdrawal of consent, where processing relies on consent
• lodging a complaint with a competent data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY).

If an organizer is the Data Controller for the data in question, we may need to refer a request to that organizer, or ask them to respond to it.

Privacy requests should currently be directed to support@dancebrain.se.

DanceBrain may be used for workshops attended by minors.

Organizers are responsible for ensuring they have an appropriate legal basis, and any parental or guardian consent required by applicable law, when collecting data from minors through DanceBrain.

DanceBrain may link to external websites, including websites belonging to workshop organizers, instructors and service providers.

DanceBrain is not responsible for the privacy practices or the content of those external sites. We recommend reading the privacy policy of any site you visit from DanceBrain.

This Privacy Policy may be updated as DanceBrain evolves.

Material updates will be reflected by changing the effective or last-updated date shown at the top of this page and, where appropriate, by notifying users.

DanceBrain

Privacy and support inquiries: support@dancebrain.se

DanceBrain is currently operated by its founders while the business is being established.