Privacy

Last updated 7 November 2026

AABA is run by Aaron Lyndon, a sole trader in New Zealand ("we", "us"). This explains what we collect, why, and what you can do about it. We follow the New Zealand Privacy Act 2020.

Band members

If you open a band link or scan a QR code, you don't make an account and we don't ask for your name or email.

Notes you draw and a few display preferences are saved in your own browser on your device, not on our servers. Clearing your browser's site data removes them.

So a stage still opens with no signal, your browser keeps a copy of the stage's chart pages on your device. Clearing your browser's site data removes it too.

Like any website, our hosting providers record technical details of each visit, such as your IP address and browser type, to run the service and keep it secure.

Leaders with an account

Your email address, so you can sign in with a code we email you.

What you put in: stage names and dates, the PDF charts you upload and the page images made from them, your set order, and the band notes you draw.

A sign-in cookie that keeps you signed in for up to 30 days. It's needed for the service to work; we don't use advertising or tracking cookies, and there are no analytics on this site.

The contact form

If you use the contact form, we receive your name, email address and message by email so we can reply.

How we use it

Only to run AABA: signing you in, storing and showing your charts to the people you share your links with, keeping the service secure, and replying to you.

We don't sell your information or use it for advertising.

Who else handles it

Supabase stores the database, your charts and sign-in details, in Sydney, Australia.

Vercel hosts the website, with servers in several countries including the United States.

Resend sends the sign-in code emails and contact form messages, from the United States.

These companies process the information on our behalf and only to provide their service to us. Because some of them are outside New Zealand, your information may be stored overseas.

Who can see your charts

Anyone with a stage's band link can view its charts and band notes while it's set up. Anyone with a leader link can control the stage. Share links only with people you trust. If one gets out, make a new one from the stage's page and the old one stops working.

Keeping and deleting

We keep your account and charts while you use AABA. When you delete a stage, it's deleted for good straight away, with its charts, notes and files.

You can delete your account and everything in it at any time from Your stages, or email info@creatorsnz.co and we'll do it for you.

Security

Everything travels over encrypted connections. Each leader's stages are kept separate, and band members can only read the one stage their link is for.

Your rights

You can ask to see or correct the personal information we hold about you by emailing info@creatorsnz.co. If you're unhappy with how we've handled it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes

If we change this policy we'll update this page and the date at the top. If a change is significant, we'll email leaders.