Privacy Policy

HopMic helps people find open mic nights, claim performer slots and say they are coming. This page explains what that involves.

HopMic is operated by EchoPoint Entertainment LLC, Raleigh, NC, which is the controller of the information described here.

If you sign in with Apple. Apple sends us a stable identifier for your account, and — only if you choose to share them — your name and email address. You can use Apple's "Hide My Email" and we will only ever see the relay address.

If you sign in with Google. Google sends us your email address, your name and a stable identifier for your account. We do not receive your Google password, and we ask Google for nothing beyond those three things.

If you create an account with an email address. Your email address and a password. The password is stored only as a hash — we cannot read it, and nobody at EchoPoint Entertainment LLC can see what you typed. The email address is used to identify your account and to contact you about it.

If you don't sign in. The app generates a random identifier for your device so it can remember which slots are yours. It is not derived from any hardware ID and is not linked to you. On the web pages the same thing is stored in a cookie.

When you claim a slot. Your name, and optionally a stage name and a note for the host. Your name, or your stage name if you give one, appears on the event's public lineup. The note is for the host.

Contact details on a slot. An email address and a phone number, which are required, and an Instagram handle, which is optional. The same applies whether you claim in the app or from a web link. They are used so the host can reach you about that night (a lineup change, a cancellation, a no-show), and the email address is where we send updates about your sign-up. They are shown to the host of that event and to nobody else: they never appear on the public lineup, and we do not use them for marketing.

Notes to the host. If you message the host of a night you've signed up for, your notes and their replies are kept with that sign-up. Only the two of you can see them, and they are deleted with it, or 60 days after the night, whichever comes first. A host can report a note to us or stop you messaging them.

Claiming a listing. If you ask to take over a mic we list, we keep the name, email address, phone number and note you give. To check it's really yours, we ask the venue to confirm, by email or by phone, and tell them your name and which mic, and nothing else about you. We use these details only for that. Sixty days after the claim is decided or withdrawn, we delete the email address, phone number and note; your name and the outcome stay.

Crash and error reports. If the app crashes or something fails, it sends us a report: what went wrong, the app version, your iOS version and phone model, and which screen you were on. It carries nothing that identifies you, and we use it only to fix the problem.

Photos. If you add a profile photo, we store it with your account; it shows on your own profile. If you host, the cover photo you pick for an event is shown publicly with that event. The app only ever sees the photo you choose, never the rest of your library.

Notifications. If you allow notifications in the app, Apple gives your device a push token, which we store against your account or your device identifier so we can send you updates.

Technical information. When your phone or browser talks to our server, the address it connects from (its IP address) is seen by us and our hosting provider. We use it only to keep HopMic secure, for example to limit repeated sign-in attempts, and we don't store it with your account.

We only contact you about a sign-up you made or an event you run. A performer hears when their claim is received, approved, moved to the raffle, drawn from the raffle or turned down, and when an event they signed up for is cancelled. A host hears when someone claims a slot or cancels one. There are no newsletters and no marketing.

Notifications carry the same updates. A host can approve a claim, or move it to the raffle, straight from the notification. You can turn notifications off at any time in your iPhone's Settings.

There is no analytics SDK, no advertising SDK and no third-party tracker in the app or on this site.

If you allow location access, your position is used on your device to sort nearby events by distance. It is never sent to our servers.

We do not sell or share personal information, and we do not use it to build a profile or target advertising.

Cookies. This website sets a cookie only to remember the sign-ups made from your browser (the same random identifier the app uses), and the team dashboard sets one to keep the team signed in. There are no advertising or analytics cookies.

Everything is stored in our own PostgreSQL database, including any cover image a host uploads. The database and the server that runs HopMic are hosted by Render. Traffic is encrypted in transit over HTTPS.

Emails are delivered by Resend, and notifications by Apple's Push Notification service. Each is given only what it needs to deliver a message: the email address or push token, and the message itself.

A small HopMic team can see what it needs to run the service and keep it safe: reports, host claims, and account email addresses. Everything they change is recorded.

Hosts can see the name, stage name, note and contact details of performers who signed up to their own events — that is the roster they read from on the night. No other host, and no member of the public, can see them. Our terms let hosts use them only to run that night, not to add you to a mailing list or anything else.

We may also disclose information if the law requires it, or where it's needed to protect someone's safety or rights. If EchoPoint is merged or sold, HopMic's information would go with it, still covered by this policy.

HopMic is run from the United States, and your information is stored and processed there.

Everything travels over HTTPS, and our database and its backups are encrypted where they are stored. Passwords are kept only as a one-way hash, and the links we email are stored only in scrambled form and work once.

Only team accounts can reach the team dashboard. Sign-in attempts are limited, and every change is recorded. Render and Resend are independently audited for security (SOC 2) and are bound by data processing agreements with us.

If a security breach affects your personal information, we will tell you, and the authorities where the law requires, without unreasonable delay.

Sixty days after a night, we delete the email address, phone number, Instagram handle and note you gave for it, and your messages with its host. Your name, or stage name, stays on that night's lineup so the host has a history of who played.

You can delete your account from the app's profile screen, which removes your account, your sign-ups and the notes on them, the events you host and their cover photos, your profile photo, your requests to take over a mic, any password-reset links and your notification tokens. A mic you took over from our listings goes back to being a listing, since it still happens without you on HopMic. A photo nothing uses any more, such as one from a deleted event, is deleted within a day.

Deleted information can stay in our hosting provider's backups for a short time until they are replaced, and email records stay with our email provider for its own retention period.

A push token is also deleted as soon as Apple tells us it no longer works, for example after the app is removed from a phone.

Crash and error reports are deleted after 30 days. A password-reset link works once, for an hour; we store only a scrambled form of it and delete that a week after it stops working. The team's record of what it changed in the dashboard is kept for a year.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Deleting your account from within the app does this immediately; otherwise get in touch.

Some US states give their residents these rights by law. We give them to everyone, wherever you live. We'll check the request comes from you, we won't treat you differently for asking, and if we say no you can appeal by replying to our answer. We don't sell or share personal information for advertising, so there is nothing to opt out of.

Email hello@hopmic.com.

HopMic is for people aged 13 and over. It is not directed at children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us information, email us and we will delete it.

If this policy changes, the date at the top changes with it. For a significant change, we'll also tell you in the app or by email before it takes effect.