Frequently Asked Questions

Yes. Creating an account, building your profile, posting availability, and browsing artists are all free. Resistor charges a 10% platform fee only on completed booking transactions — you pay nothing until a booking is successfully fulfilled.

Resistor offers optional Pro and Business tiers with additional features like higher availability limits, lower platform fee rates, and priority support. The free tier has no time limit and covers everything you need to book and get booked.

When a booking is confirmed, the promoter's payment is held securely via our payment processor. Funds are released to the artist only after the event is completed. This protects both parties from cancellations or no-shows.

No. The 10% platform fee is the only charge Resistor applies to bookings. Standard payment processing fees from our payment provider (Stripe) may apply. There are no listing fees, messaging fees, or sign-up costs.

We collect your name (or artist/venue name), email address, and account role. Your password is stored as a salted bcrypt hash — we never store or have access to your plaintext password. Optionally, you can add profile details like bio, genre tags, photos, and social links.

No. We do not sell your personal data to any third party. We do not share your data with advertisers or data brokers. Your data is used only to operate the platform and facilitate bookings.

We share limited data with: Stripe (payment processing), Cloudinary (image hosting), Resend (email delivery), Sentry (error tracking — no personal info sent intentionally), and Upstash (rate limiting with hashed IPs). Each receives only the minimum data needed for its function. Full details are in our Privacy Policy.

No. We use only essential cookies (authentication session), a functional cookie (language preference), and Sentry for error tracking. We do not use advertising cookies, tracking pixels, or third-party analytics like Google Analytics.

Yes. The platform is designed to comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the right to access, correct, export, and request deletion of your personal data.

Yes. You can delete your account from your Settings page at any time. Your profile is immediately hidden from other users. Personal data is permanently purged after 30 days. Financial and booking records are retained for 7 years as required by law.

You can control your profile visibility through your account settings. Artists can remove their availability postings to stop receiving new booking offers. Full profile deactivation (hiding your profile from search while keeping your account) is on our roadmap.

Yes. You can request a full export of your personal data at any time. The export includes your account information, profile data, booking history, messages, and transaction records in JSON format. This is available via the API or by contacting support.

Account and profile data are deleted 30 days after a deletion request. Messages are retained for 90 days after deletion. Booking and payment records are retained for 7 years due to financial record-keeping obligations. Error logs expire after 90 days automatically.

Passwords are hashed using bcrypt with a cost factor of 12. We never store plaintext passwords. Your account is automatically locked after repeated failed login attempts to prevent brute-force attacks.

We do not store credit card numbers or bank account details. All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. Sensitive fields like Stripe account IDs are encrypted at rest using AES-256-GCM.

Yes. You can enable two-factor authentication in your account settings for an additional layer of security. Backup codes are provided in case you lose access to your authenticator.

Yes. All data in transit is encrypted via TLS/HTTPS. We enforce HTTPS on all connections — no plaintext HTTP is used in production.