Privacy Policy

What we collect

We collect only what we need to run the service. Specifically:

• Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. We store your name and email on our servers, along with a copy of the profile picture, so we can display your profile. We do not receive or store your Google password.
• Account identifier. We assign each account a unique internal ID that links your profile to the content you create.
• Profile information. Anything you choose to add to your LegatoHub profile — biography, instruments, education, roles, social links, cover image.
• Content you create. Posts, comments, concerts, images you upload, and direct messages you send to other users.
• Activity. Who you follow, whose posts you like, and who has liked or commented on yours.
• Technical information. Server access logs (IP address, user agent, timestamp) kept for security and debugging. These logs are rotated and deleted on a rolling basis.

We do not run third-party advertising networks, we do not use analytics that track you across other apps or websites, and we do not sell personal data.

How we use it

• To create and maintain your account.
• To show your posts, concerts, and profile to the people you intend to reach.
• To deliver direct messages to their recipients.
• To keep the service running — diagnosing errors, preventing abuse, and enforcing our community guidelines.
• To respond when you contact support.

How it’s stored

Content you post, messages you send, and images you upload are stored on our own servers. Our mobile apps store a sign-in token on your device using the platform’s secure storage — the iOS Keychain on iPhone and iPad, and Encrypted Shared Preferences on Android. This token lets you stay signed in and is never shared with anyone else.

Who we share it with

We share your data only with the parties needed to operate the service:

• Google — for sign-in. Google receives the information needed to authenticate you, governed by Google’s privacy policy.
• Our hosting provider — Hetzner Online GmbH, based in Germany. Our servers run in Hetzner data centres in the European Union.
• Legal authorities — only if we receive a valid legal order, and only to the extent legally required.

We do not share your email, profile, messages, or uploads with advertisers or data brokers. Ever.

Your rights

Depending on where you live you may have legal rights over your data. Regardless of jurisdiction, LegatoHub gives every user the following:

• Access & export. Email support@legatohub.com and we will send you a copy of the data we hold about you.
• Correction. Edit your profile in-app at any time.
• Deletion. Email support@legatohub.com to request permanent deletion of your account and all associated content. We aim to complete deletion requests within 30 days.
• Blocking & reporting. Block other users to remove their content from your feed, or report posts, comments, or accounts that violate our guidelines.
• Complaint. If you are in the EU, you may lodge a complaint with your local data protection authority.

Children

LegatoHub is not directed at children under 13, and we do not knowingly collect data from them. If you are under 16 and in the EU, please obtain a parent or guardian’s consent before signing up. If you believe a minor has created an account, email us and we will remove it.

Security

We use TLS in transit, encrypted-at-rest credentials, and the platform’s built-in secure storage on mobile. No online service is perfectly secure, so we also keep the amount of data we collect to a minimum. If you discover a security issue, please email support@legatohub.com.

Changes

If we update this policy, we’ll change the effective date at the top. If the changes are material, we’ll highlight them in-app or by email.

Contact

Questions, requests, or concerns about your data: support@legatohub.com.