Privacy Policy

Last updated: April 2026

1. Who we are

Fortissimo (“we”, “us”, “our”) is a software-as-a-service platform for booking agencies, operated by FoundersFountain. You can contact us at fortissimo@foundersfountain.ai.

For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for your account and agency data.

2. Data we collect

Account data: name, email address, and organisation name collected when you sign up via Clerk.

Agency & booking data: artist roster, deal information, contracts, invoices, venue/promoter records, and any other data you enter into the platform.

Usage data: pages visited, features used, error logs, and timestamps — collected automatically to keep the service running and improve it.

Payment data: billing name, address, and payment method details — collected and stored by Stripe. We never see or store full card numbers.

Communications: emails sent via the platform (advancing emails, contract notifications) are processed through Resend.

Uploaded files: rider documents and attachments are stored in Supabase Storage.

3. Legal basis for processing

  • Contract performance: processing your account data to provide the service you signed up for.
  • Legitimate interests: usage analytics to improve the product, fraud prevention, and security monitoring.
  • Legal obligation: retaining billing records as required by applicable tax law.

4. How we use your data

  • Providing and operating the Fortissimo platform
  • Processing payments and managing subscriptions
  • Sending transactional emails (contracts, invoices, advancing notifications)
  • Diagnosing errors and improving platform stability
  • Complying with legal obligations

We do not sell your data to third parties, and we do not use it for advertising.

5. AI features

Fortissimo uses the Anthropic Claude API to power AI features such as the Show Advancing Email Drafter, Deal Memo Generator, and Smart Roster Matching. When you use these features, relevant booking data is sent to Anthropic for processing. Anthropic does not train models on API inputs by default. See Anthropic’s Privacy Policy for details.

6. Sub-processors

We use the following third-party sub-processors to operate the service:

ProcessorPurposeLocation
ClerkAuthentication & user managementUSA (EU data residency available)
SupabaseFile storageEU (configurable)
AnthropicAI feature processingUSA
StripePayment processingUSA / EU
ResendTransactional email deliveryUSA
MapboxTour routing mapsUSA
Google CloudHosting & infrastructureEU (europe-west1)

7. Data retention

We retain your data for as long as your account is active. If you close your account, we delete your data within 30 days, except for billing records which we retain for 7 years as required by EU tax law.

8. Your rights (GDPR)

If you are located in the EU/EEA, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Data portability — receive your data in a machine-readable format
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at fortissimo@foundersfountain.ai.

9. Cookies

Fortissimo uses only functional cookies required for authentication (set by Clerk). We do not use advertising or tracking cookies. No cookie consent banner is required for functional-only cookies.

10. Security

All data is transmitted over HTTPS. We use Google Cloud infrastructure in the EU, Secret Manager for credentials, and role-based access controls within the platform. We apply HSTS and standard web security headers.

11. Changes to this policy

We will notify you by email at least 14 days before any material changes to this policy take effect.

12. Contact

Questions about this policy: fortissimo@foundersfountain.ai