Privacy policy

Gain.fm builds landing pages for musicians. This page explains exactly what we collect, why we collect it, and who else sees it. It is written to be read, not to be skimmed past.

What we collect from you, the artist

• Your email address. Used to sign you in and to send account email. If you sign in with Google we receive your email address and basic profile from Google, nothing else.
• The pages you build. Artist name, song or show details, your Spotify or ticket link, artwork you upload, and the Meta pixel ID and Conversions API token you choose to add. The token is stored encrypted and never shown again.
• Billing details. Handled entirely by Stripe. We never see or store your card number.
• Your team and your messages. The emails of teammates you invite, and what you send us through Help.

What we collect from people who visit your pages

When a fan opens one of your Gain.fm pages, or taps its main button, we record it so you can measure your campaigns: the time, the page, the referring site, the country, the browser user agent and the IP address. Some pages also set a random visitor ID in a first-party cookie, so one person's visit can be matched to the ad they came from. We do not build profiles of these visitors and we do not track them across other websites.

Meta pixels, and what that means

Every Gain.fm page, including the pages you build, runs Gain.fm's own Meta pixel. When a fan opens a page or taps its button, that event goes to Meta from the fan's browser and from our server (Meta's Conversions API), with the IP address, the browser user agent, Meta's cookie identifiers when present and the random visitor ID above. We use it to measure and improve the ads that bring people to these pages.

If you add your own Meta pixel ID to a page, the same events go to your pixel too, and if you add your Conversions API token, your pixel gets the server copy as well. That part is your choice: you decide what is collected for your own dataset, and you are responsible for telling your audience about it and for having the legal basis to do so. We process that data on your instructions.

Text-message sign-ups

Some artist pages offer updates by text. The number goes into Laylo's own sign-up form on the page, or on laylo.com. Laylo sends the confirmation text and keeps the list for the artist, and replying STOP to those texts ends them. Laylo tells us when someone signs up, so we can count sign-ups and report each one to Meta as a conversion with the number or email scrambled (hashed), which is how Meta matches it to an ad. Our own record of a sign-up keeps only the last four digits of the number.

Where an artist does not use Laylo, their page has its own sign-up form that asks for your consent first. We store those numbers encrypted and pass them only to that artist's team.

Who else sees your data

• Supabase stores your account and your pages. Hosted in the United States.
• Vercel serves the site, its logs and the files you upload.
• Resend delivers our email.
• Stripe handles payment.
• Meta receives page visits and taps from every Gain.fm page through Gain.fm's pixel, and through yours when you add one.
• Laylo runs the text-message sign-ups on the pages that offer them.
• Spotify receives nothing from us. We only read public information such as a track's artwork and popularity score.

We do not sell your data. We do not share it with advertisers or data brokers. The only reason we would hand anything over is a valid legal order.

How long we keep it

Your account and pages stay until you ask us to take a page down or close your account. Visit records are kept for as long as your account is open so your reporting stays intact. Close your account and we delete the lot within 30 days, apart from anything we are legally required to keep, such as invoices.

Cookies

• Signing in. The cookies that keep you signed in.
• Private pages. One that remembers a password you entered for a private page.
• Meta. Meta's pixel sets its own cookies (such as _fbp, and _fbc when you arrive from an ad) on our pages and on artist pages.
• Visitor ID. On some artist pages, a first-party cookie with a random ID, used to match a visit to the ad it came from.

We do not use Google Analytics today. If we turn it on for our own pages, this page will say so first.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email contact@gain.fm and we will do it. Depending on where you live you may have additional rights under the GDPR or the CCPA, and we honour those requests regardless of where you are.

Children

Gain.fm is a business tool and is not intended for anyone under 16. We do not knowingly collect their information.

Changes

If we change anything that materially affects you, we will email you before it takes effect rather than quietly updating this page.