1. Introduction

Stageconnect ("we," "us," or "our") respects your privacy. This policy explains how we collect, use and protect your personal data when you use Stageconnect. We operate under Belgium law and comply with the General Data Protection Regulation (GDPR).

This Privacy Policy applies to all users of our services, whether you access them via the web, API, or any other means. By using our Service, you acknowledge that you have read and understood this Privacy Policy.

What We Collect

Only what's necessary to deliver and secure our service.

2. Data We Collect

Account Data: When you create an account, we collect your name, email address, billing address and password (stored in hashed form). If you sign up on behalf of an organization, we may also collect the organization's name and VAT number.

Usage Data: We automatically collect IP addresses, browser type and version, operating system, referring URLs and activity logs (including timestamps and user identifiers for every action performed within the platform, as described in our Terms of Service).

Content Data: Any personal data that may be included in the media, text, documents, or other content you upload or create within the platform. You are the data controller for any personal data of third parties contained in your Content Data.

Billing Data: Payment information such as credit card details or bank account numbers are processed by our third-party payment processor (Stripe). We do not store your full payment credentials on our servers. We retain transaction records, invoices and billing history.

Communication Data: If you contact us via email, support tickets, or other channels, we retain the content of those communications and any associated metadata.

Legal Basis

Every piece of data we process has a lawful reason.

3. Why We Process Your Data (Legal Basis)

Under GDPR Article 6, we process your personal data based on the following legal grounds:

Performance of a Contract (Art. 6(1)(b)): To provide the platform services you signed up for, manage your account, process payments and deliver the features.

Legitimate Interest (Art. 6(1)(f)): To secure our platform, prevent fraud, maintain audit logs, debug issues, analyze usage patterns to improve our services and enhance our AI features. We have conducted a balancing test to ensure our legitimate interests do not override your rights and freedoms.

Consent (Art. 6(1)(a)): For marketing emails, newsletters and promotional communications. You can withdraw your consent at any time by clicking "unsubscribe" in any marketing email or by contacting info@stageconnect.be.

Legal Obligation (Art. 6(1)(c)): To comply with Belgian tax law (retention of invoices and financial records), respond to lawful requests from authorities and maintain records required by applicable regulations.

Retention

We keep your data only as long as necessary.

4. How Long We Keep Data

We retain your account data, usage data and content data for the duration of your active account.

After Cancellation: Upon cancellation or termination of your account, all User Content, configurations and associated personal data will be permanently deleted within 30 days. This deletion is irreversible.

Financial Records: Invoices, billing records and transaction history are retained for 7 years to comply with Belgian tax law (Article 60 of the Belgian VAT Code and Article 315 of the Belgian Income Tax Code). These records are stored securely and accessed only for accounting and tax compliance purposes.

Audit Logs: Activity logs may be retained for up to 12 months after account closure for security, regulatory compliance and dispute resolution purposes. After this period, they are anonymized or permanently deleted.

Your Rights

GDPR gives you strong rights over your personal data.

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

→Right of Access (Art. 15): You can request a copy of all personal data we hold about you.
→Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete personal data.
→Right to Erasure (Art. 17): You can request deletion of your personal data ("Right to be Forgotten"), subject to legal retention obligations.
→Right to Restrict Processing (Art. 18): You can request that we limit the processing of your data in certain circumstances.
→Right to Data Portability (Art. 20): You can request your data in a structured, commonly used and machine-readable format.
→Right to Object (Art. 21): You can object to processing based on legitimate interest, including profiling.
→Right to Withdraw Consent (Art. 7): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@stageconnect.be. We will respond to your request without undue delay and in any event within one month. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

Sharing

We never sell your data. Period.

6. Data Sharing & International Transfers

No Sale of Data: We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We never have and we never will.

Sub-processors: We share your data with trusted third-party service providers who help us operate the Service. These include cloud hosting providers, payment processors, email delivery services and AI model providers. Each sub-processor is bound by a Data Processing Agreement and is vetted for GDPR compliance.

Current Sub-processors:

Provider	Purpose	Location
Stripe	Payment processing	USA (EU SCCs)
OpenAI	AI services	USA (EU SCCs)
Google Analytics	Analytics	USA (EU SCCs)

International Transfers: Some of our sub-processors are based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate protection through EU Standard Contractual Clauses (SCCs), adequacy decisions, or other approved transfer mechanisms under GDPR Chapter V.

Legal Disclosure: We may disclose personal data if required by law, regulation, or court order, or if necessary to protect the rights, property, or safety of Stageconnect, our users, or the public.

Cookies

We use only essential cookies to keep you logged in.

7. Cookies & Tracking Technologies

Essential Cookies: We use strictly necessary cookies for authentication, session management and security. These cookies are required for the Service to function and cannot be disabled.

Analytics: We may use privacy-friendly analytics tools to understand how users interact with our platform. Where analytics involve personal data, we rely on legitimate interest or obtain your consent as required.

Security

Your data is protected by industry-standard measures.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

Encryption of data in transit (TLS/SSL) and at rest
Secure password hashing
Role-based access controls
Regular security assessments and code reviews
Comprehensive audit logging
Incident response procedures

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly addressing any security incidents in accordance with GDPR requirements.

Updates

We'll notify you of material changes to this policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. For material changes, we will notify you via email and/or a prominent notice in the platform dashboard at least 30 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this page periodically.

Contact Us: If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at info@stageconnect.be.