Privacy Policy

Rider Duck ("we", "our", "the service") is a workspace for preparing technical riders for live production. The data controller for your personal data is Burak Çelenk, reachable at info@riderduck.com. This policy explains what we collect, why, on what legal basis, and the rights you have. It is written to meet both the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK).

• Account data: name, email address, phone number and password hash you provide at signup, or profile data shared by Google when you use Google sign-in.
• Project content: rider data you create — project names, artist names, stage plots, input lists, backline, monitoring preferences, attachments, logos. Riders can also hold the names and contact details of other people, such as band members and extra contacts; add them only if you are entitled to.
• Usage data: technical logs (IP address, user agent, timestamps, error traces) needed to operate and secure the service.
• Analytics data (only with your consent): the pages you visit, the buttons you click on the home, tour and stage plot pages, whether you created an account, the link or campaign that brought you, and the device, browser and approximate location data Google Analytics collects. It is not linked to your name, email address or project content.
• Feedback: the message and contact details you choose to send through Help & Feedback.

• To provide the service: creating your account, signing you in, saving your projects and exporting riders. Legal basis: performance of our contract with you (KVKK art. 5(2)(c); GDPR art. 6(1)(b)).
• To keep it secure and working: logs, abuse prevention and error diagnosis. Legal basis: our legitimate interest in a safe, reliable service (KVKK art. 5(2)(f); GDPR art. 6(1)(f)).
• To meet legal obligations: for example, answering lawful requests from authorities. Legal basis: legal obligation (KVKK art. 5(2)(ç); GDPR art. 6(1)(c)).
• To understand how the site is used: measuring visits and sign-ups with Google Analytics, to improve the site and see which campaigns work. Legal basis: your explicit consent (KVKK art. 5(1); GDPR art. 6(1)(a)). You can withdraw it at any time under Cookie settings; this does not affect processing that happened before.

We collect this data electronically: through the forms you fill in, the projects you save and the requests your browser sends. We do not sell your data, show ads, or use your project content to train AI models.

Account and project data are stored with our cloud infrastructure providers (database, file storage, hosting and email delivery), whose servers may be outside Türkiye and outside the European Economic Area. Running the service therefore means transferring data abroad to them. Where required, these transfers are made under the safeguards set out in KVKK art. 9 and GDPR Chapter V, and only as far as needed to run the service. Access to your projects is restricted to your account. Google Analytics data is processed by Google, including outside Türkiye and the European Economic Area; this only happens if you accept analytics cookies.

We share data only with infrastructure providers strictly needed to run the service (hosting, database, email delivery, OAuth providers you explicitly use) and, if you accept analytics cookies, with Google as the provider of Google Analytics. We never share your project content with third parties for marketing. To warn you about leaked passwords, your browser sends the first 5 characters of your password's hash to the Have I Been Pwned password service; your password itself is not sent to it.

You are responsible for the accuracy and completeness of every rider you generate with Rider Duck. Rider Duck is a tool that helps you organize and present technical information; it does not validate that your inputs, stage plots, audio settings, electrical requirements or backline are correct, safe or production-ready.

Before sending any rider to a venue, promoter, artist or production partner, you must review the final document end-to-end and confirm every detail is accurate. The responsibility for the content lies entirely with you.

Under KVKK art. 11 and GDPR art. 15–22 you can:

• learn whether we process your personal data and, if so, ask for information about it;
• learn why it is processed and whether it is used for that purpose;
• know the third parties in Türkiye or abroad it is transferred to;
• ask us to correct incomplete or inaccurate data, and to delete it or restrict its use;
• ask us to pass those corrections or deletions on to the parties we shared the data with;
• receive your data in a portable format, and object to processing based on our legitimate interest;
• object to a result against you that comes solely from automated analysis;
• claim compensation for damage caused by unlawful processing, and complain to a supervisory authority (in Türkiye, the Personal Data Protection Board; in the EU, your local data protection authority).

You can edit or delete your projects and your account yourself in the app. For anything else, see Contact below. We answer within 30 days at the latest.

We keep your data for as long as your account is active. When you delete your account, your projects and personal data are removed from our active systems; backups are rotated out within a reasonable period. Google Analytics keeps event data linked to a browser for 2 months and then deletes it; aggregated reports that identify no one remain.

We use the cookies and browser storage needed to keep you signed in and to remember your preferences. Google Analytics cookies are only set if you accept them, and you can change that at any time. No advertising cookies are used. The details are in our Cookie Policy.

Rider Duck is a tool for music and production professionals and is not intended for anyone under 16. We do not knowingly collect their data.

We may update this policy as the product evolves. Material changes will be announced in-app or by email.

To use your rights or ask about this policy, write to info@riderduck.com from the email address on your account, so we can confirm it is you.