The short version: we only collect what we need to answer you, send you what you asked for, book the gigs and pay the people who play them. We don't sell your information, the details that would hurt most in a breach are ones we deliberately never hold, and you can ask us to show, correct or delete what we have at any time.
Last updated 10 October 2026.
This site, opendawn.com.au, is run by Open Dawn Entertainment, a live entertainment and media business based in Perth, Western Australia (ABN 25 701 630 793). It's run by Yannai Goldberg, and if you have a question about your privacy, that's who you reach: yannai@opendawn.com.au.
This policy covers the information we handle through this website, through our booking portal at app.opendawn.com.au, which is where venues and musicians who work with us have accounts, and through the Open Dawn app for iPhone. The app is that same account on your phone, plus a public side anyone can look at without signing in at all. It asks for your location when you use “near me” or tell us you have arrived at a gig, and for permission to add a gig to your calendar when you choose to save one. When notifications are available, you can also choose to give it permission to send them. It cannot read your calendar, it never asks for your contacts, nothing in it tracks you, and it stays signed in only on the phone you signed in on. We aim to follow the Australian Privacy Principles under the Privacy Act 1988.
From 1 October 2026 the business behind all of this becomes Open Dawn Entertainment Pty Ltd (ABN 25 701 630 793). Nothing about how we treat your information changes; the name on the paperwork does.
What you give us. When you fill in the contact form or book a call, you hand us the details you type: usually your name, email, phone number, the venue or role you tell us about, and whatever you write in your message. When you book a call, you also give us a time that suits you.
What comes automatically. Like any website, ours receives basic technical information your browser sends, such as your IP address, device and browser type, and the pages you look at. Our hosting keeps this in standard server logs to keep the site running and secure. We don't use it to identify you personally.
If you're a venue with an account. Your venue's name and suburb, the email you log in with, where you want invoices sent, the gigs you ask for and the gigs you're given, and the invoices themselves. If you rate an act after a gig, we keep that rating.
If you're a musician with an account. Your name and contact details, the profile you write about yourself, what you play, your travel radius, the times you tell us you're unavailable, and any venues you've chosen to block. Once you're working with us we also hold the gigs you've been assigned, whether you confirmed them, the times you actually played, and what you were paid.
Two things about musicians worth saying plainly. We keep a record of how assignments go: whether you let us know in time when you couldn't make one, and whether a gig was missed. We also keep the ratings venues give you. Neither is shown to venues or to other musicians. Both are visible to Yannai and both feed the engine that decides who gets sent where, which is the honest reason they exist. You can ask to see any of it at any time, and we'll show you.
What you type where other people can read it. The app has Live rooms, one for a gig while it is on. Anything you type in a room is public to everybody standing in it and stays on that gig's page afterwards. Signed out you can read a room but not type in it, and you are shown as “Guest” and five digits. That name comes from a random number your phone makes the first time you ask for a song. It is not your name, we cannot work backwards from it to you, it is different at the next gig, and deleting the app forgets it.
Messages, groups and friends. With an account you can send a friend request, accept or ignore one, invite a friend to a public gig and message the people you are connected to. We hold the messages, who is in each conversation, the name of any group, and who said they were going to what. Only the people in a conversation can read it. We do not read your messages as a matter of course. We read one when somebody reports it, and reporting a conversation sends us a copy of what the person reporting could already see.
Checking in at a gig. Tap “I'm here” and we record the venue and the time. To check you are actually there your phone sends its position once, we measure it against the venue and throw it away. There is no column in our system a coordinate could be written to. We keep which venue and when, never the position itself, and that history is yours to see and to delete. “Near me” works the same way, except your position is rounded on your phone first, to about a kilometre, before it is sent at all.
What you like, and how we work it out. When you review an act, tap the styles they played, follow an act, check in to a gig, or answer the question about what you like when you join, we keep it against your account and build a picture of the music you are into. Nothing is guessed from what you write: a style is something you tapped. You can see the whole picture, change any part of it and delete it, on the app's own page for it, and what you change is what we use.
Notifications. If you let the app notify you, Apple gives us a token for your phone so we can send one. It is tied to your account. Signing out asks our server to remove it; if that request fails, the token can remain. Deleting the app does not immediately remove the token from our server. If Apple later tells us it is invalid when we try to send a notification, we disable it but keep the record. Deleting your account removes its notification tokens. On the web and in the Android app it works the same way through your browser: saying yes there creates a push subscription tied to your account, turning it off removes it, and one that stops answering is disabled when we next try to send.
Photos you add. You can put a picture on an act's page, on a venue's page or on your own profile. Either you choose one from your library or you take one there and then, and the camera only ever opens because you tapped it. One picture goes up and nothing else on your phone is read: we are not handed your library, only the shot you picked. A picture on a page anyone can see is public like anything else on it, so it can be reported the same way, and blocking somebody hides theirs from you.
Paying us from the app. If you book us for something of your own, you can pay upfront or set up a direct debit without leaving your phone. The field you type the number into is Stripe's, not ours. Their sheet opens inside the app, the card or bank number goes straight to them, and it never reaches us or our system. What comes back to us is what we need to tell one arrangement from another later: the last four digits of the account, the first three of the BSB, and whether the debit is still set up.
Face ID, and what it does not tell us. Before the app shows you money, an invoice, a quote, a bank detail, it asks your phone to check it is you. Face ID, or your passcode if you would rather use that. Your phone answers yes or no and the answer is all we get. We never see your face and there is nothing about it anywhere in our system. It is a courtesy on top of signing in rather than the thing keeping anyone out, since our server decides what your account may see either way, and you can switch it off in the account sheet.
Everything typed in the app is checked before it is stored. That check runs on our server rather than in the app, which is what stops it being walked around. If something you write is refused you are told why, and your words stay in the box so you can change them.
You can report anything you can see, and you do not need an account to do it. A line in a room, somebody's profile, a gig listing, a whole conversation. A person reads every report, and that person is Yannai. Most days he gets to them the same day; either way you will hear back within a week. We tell you it was read and not what we decided, because telling you the outcome would be telling you something about the person you reported.
You can block somebody, and it works both ways: they stop seeing you as well. Blocking is on profiles, on lines in a room, on friends and on the people in a conversation.
If you report something, we keep the evidence. That includes after the person who wrote it has deleted their account. The “Your choices” section below explains what else can remain after you close your account.
You need to be at least sixteen to have an Open Dawn account. That is our rule rather than a law's. The app carries other people's words in it, and sixteen is where we have drawn the line under who should be reading and writing them.
Being honest about where that stands: the part that actually asks you your date of birth is being built and is not there yet, so for now the rule holds on trust. When it lands, it will ask once and it will never show your age, or anybody else's, to another person using the app.
If you're paid by us as a musician, your tax file number, bank account details and superannuation fund do not live in our system. You enter them directly into our payroll provider, Xero, through their own onboarding, and they hold them. We keep only the status: whether onboarding is finished, whether a contract is signed, and a reference number that lets us match you up.
That was a deliberate design decision rather than an oversight. The details that would hurt most in a breach are the ones we chose not to have.
It holds the other way round too. When you pay us, by card or by direct debit, the number is typed into Stripe's own sheet and stays with Stripe. We keep the last four digits of the account and the first three of the BSB, which is enough to tell one arrangement from another and no use to anybody who took them.
If you connect a calendar so we only offer you gigs you're free for, we store busy times only. Not what the appointments are, not who they're with.
Plainly, we use your information to do the thing you came for: to reply to your enquiry, to book and run a call, and to keep the site working. We may use enquiry details to follow up about working together. That's it. We don't sell your information, and we don't hand it to anyone for their own marketing.
If you have an account, we use what's in it to run the work: to book gigs, to match acts to rooms, to tell a musician where to be and when, to pay them properly and on time, and to invoice the venue. Venues see the public profile of an act playing their room. They never see a musician's pay, contact details, engagement records or ratings. Musicians see their own gigs and their own pay, and nobody else's.
We use the picture of what you like to decide which gigs are worth telling you about, and the order we show them to you in. Nobody else is shown yours. Acts see the stars and the words on their reviews and never who left them beyond the name on the review itself. We have built a way for a venue to see an average across the people who have checked in at its own room, and it is switched off: we are not publishing an average of what our members like until we can do it without any one person being recoverable from it.
We use a small number of trusted services to run the site, and each only handles what it needs to do its job on our behalf. Netlify hosts the website and holds the contact and signup forms you fill in, Resend delivers our email, and Cloudflare serves our images and video and screens out bots on our sign-up forms.
Behind the booking portal, Supabase holds the accounts, bookings and invoices, on servers in Sydney. Xero is our accounting and payroll system: it holds the pay records, and for musicians it holds the tax, bank and superannuation details described above. If we send you a text about a gig change, an SMS provider carries it.
Enquiries you send us are kept in our own business systems so we can manage them properly. We'll only ever disclose your information beyond this if the law requires it, or where we must report to the Australian Taxation Office, a superannuation fund or an insurer as part of employing someone. Some of these services store data outside Australia, so by using the site you consent to that transfer.
We keep cookies to a minimum, and we run no analytics or advertising trackers on the site. It uses only what it needs to function, and it embeds nothing from anyone else, so no other company sets a cookie on you through us. You can block or clear cookies in your browser settings, though some features may stop working if you do.
You're in control of what we hold. Any time, you can email us to ask what information we hold about you, to correct it, or to have it deleted. That includes the reliability record and the ratings described above. We'll sort it out. If you're ever unhappy with how we've handled your information, tell us first so we can fix it, and you can also raise it with the Office of the Australian Information Commissioner.
If you have an account, most of it is in your own hands already: musicians can edit their profile, availability and venue blocklist whenever they like, and venues can change their own details and where invoices go. Closing your account removes your login. Some information remains, as explained below. You can close it from inside the app as well as from the portal's settings page.
Some information survives it, and we would rather say so here than have you discover it. Anything you typed in a Live room is hidden from the room and detached from your name rather than deleted, because otherwise a room's history would develop holes in the middle of conversations other people were part of.
Messages you sent in a conversation, including the name shown when you sent them, remain for participants who are still in that conversation. The conversation and its messages are deleted when the last participant leaves it or closes their account.
If somebody reported something you wrote, that report and its evidence stay, because a report that disappears when its subject leaves is not a safety system. And a record the law makes us keep, like a payslip or a tax record, we keep; we will tell you plainly when that is the case rather than keeping it without saying.
We take reasonable steps to protect your information and to work only with services that do the same. No website or system is ever completely secure, so we can't promise perfection, but we treat your details with care. Accounts are walled off from each other in the database itself rather than only in the screens you see, so one venue cannot reach another's books and one musician cannot reach another's pay. Anyone with full access to the system must use two-step sign-in, and account holders can switch it on for themselves as well.
We keep information only as long as we need it for the reason you gave it to us, or as long as the law requires, and then we remove it. For the app, Live room content and reported evidence follow the deletion rules in “Your choices” above. Messages and their displayed sender names remain while a participant is still in the conversation. A check-in stays as part of your own history. Notification tokens follow the sign-out, invalidation and account deletion rules in “Notifications” above. For anyone we've employed, some records must be kept for seven years: that's an employment law obligation rather than a choice of ours.
If something ever goes wrong with data we hold, we'll tell the people affected and the Office of the Australian Information Commissioner where the law requires it, and we won't wait to be asked.
If we change how we handle information, we'll update this page and change the date at the top. For anything about your privacy, get in touch with Yannai directly.
Anything about your information, or anything else, comes to the same place.