Privacy Policy

Account holders. When you sign up, we're responsible for your account information (your name, email, password and settings).

Information you keep in GigTools. Organizations using GigTools (an agency, a performer, a venue) add their own clients, venues, acts, gigs, fans and other contacts. For that information, the organization decides what to collect and why, and we process it on their behalf. If you're one of those contacts and have a question or request, contact the organization that has your details first. We'll help them respond, and you can also write to us at support@gigtools.net.

Information you give us

• Account details: name, email address, password (stored only as a secure hash), phone number, time zone and preferences.
• Organization details: business name, address, email addresses, website and team members and their roles.
• Your work in GigTools: gigs, dates, venues, fees and payments, agreements and signatures, tasks, notes, files, set lists, email templates, and the contacts you add (names, emails, phone numbers, companies, addresses and notes).
• Act information: performer profiles, bios, photos, videos and social links. For paying acts, an organization may store tax details from a W-9: legal name, address, tax classification and only the last four digits of the taxpayer ID. The full SSN or EIN is never typed into GigTools; it stays on the uploaded W-9, which is kept in private storage that only the organization's owners and admins can open.
• Messages to us: what you send support, and the questions you ask the in-app assistant.

Information from public pages and forms

When someone uses a page we host for a customer (an act page, an organization website, an event page, a booking form, a fan club sign-up, a review form, an agreement to sign, or a link to accept a gig or update details), we collect what they enter. That's typically name, email, phone, organization, event details, a review, and whether they agreed to receive emails or texts. When someone signs an agreement, we record their name, the time, their IP address and a fingerprint of the document so the signature can be verified.

Information collected automatically

• Log and device information: IP address, browser and device type, pages requested and timestamps, used to keep the service running and secure.
• Cookies and local storage: we use cookies that keep you signed in, and store small preferences in your browser (such as which menu section you left open). We don't use advertising cookies or third-party tracking.
• Email and link activity: for example, when an agreement or gig offer is first opened, so you know it was seen.

Information from services you connect

If you connect Google, we receive your Google account email and the permissions described in section 4.

• To provide GigTools: run your calendar, gigs, tasks, agreements, payments tracking, public pages and the features you turn on.
• To send the emails and texts you ask GigTools to send, such as reminders to acts, gig offers, review requests, and notifications to your team.
• To answer support requests and power the in-app assistant's replies.
• To keep GigTools secure: prevent spam and abuse (including bot checks on public forms), and investigate problems.
• To send you service messages about your account, security, billing and important changes.
• To understand and improve how GigTools works, using information about how features are used.
• To meet legal obligations and enforce our Terms of Use.

Connecting Google is optional. If you connect it under Automations, GigTools asks only for:

• Send email on your behalf (Gmail): used only to send the emails you choose to send from GigTools, such as a review request or a task email. GigTools can't read, search or delete your inbox.
• Calendars and events GigTools creates (Google Calendar): used only to add, update and remove your booked gigs on a calendar GigTools creates. GigTools can't see your other calendars or events.
• Your Google email address: to show which account is connected.

Connection tokens are encrypted. You can disconnect at any time in Automations, or from your Google account's security settings, and GigTools stops using the connection immediately.

GigTools' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, don't sell it, don't use it to train AI models, and don't let people read it except with your permission, for security, or where the law requires.

We don't sell or rent personal information. We share it only:

• Within your organization, according to each team member's role (for example, members can't see money or tax details).
• On public pages you publish: act pages, organization websites and event pages show what you choose to make public (such as an act's bio and public shows, and approved reviews). Contact details and fees stay private.
• With the people you send things to, such as a client receiving an agreement or an act receiving a gig offer.
• With service providers that run parts of GigTools for us, under contracts that limit their use of the data: Supabase (database, sign-in and file storage), Vercel (web hosting), Resend (email delivery), Twilio (text messages), Cloudflare (bot protection on public forms), Google (Maps and Places look-ups, and Gmail and Calendar if you connect them), Anthropic (the in-app assistant), and our payment processor for paid plans.
• For legal reasons, when required by law or to protect the rights, property or safety of our users, the public or GigTools.
• In a business transfer, such as a merger or sale, where the information would stay subject to this policy.

When you ask the assistant a question, GigTools sends your question and the account information needed to answer it to Anthropic, which generates the reply. The assistant can only read; it can't change your data. Members who can't see money in GigTools can't see it through the assistant either. Anthropic processes this data to provide the service to us and doesn't use it to train its models.

GigTools sends emails and texts for organizations (for example, show reminders to acts, or news to a fan club) and service messages to account holders. Fans join a fan club only by agreeing to hear from that act, and texts are sent only to people who agreed to receive them.

You can unsubscribe from marketing emails with the link in each one, and stop texts by replying STOP. Organizations can also mark a contact as “don't email” or “don't text.” Message and data rates may apply. We don't share mobile numbers or text-messaging consent with anyone for their marketing.

We keep information for as long as your account is active or as needed to provide GigTools. When something is removed in GigTools it may be hidden first so it can be recovered, then deleted. If an account is closed, we delete or anonymize its data within 90 days, except where we need to keep some of it longer for legal, tax, accounting or security reasons (for example, records of signed agreements). Backups are overwritten on a rolling basis.

We protect information with encryption in transit and at rest, access controls that limit each person to their own organization and role, private storage for sensitive files, and encryption of connected-account tokens. No system is perfectly secure, so please use a strong, unique password, and tell us right away at support@gigtools.net if you think your account has been compromised.

You can view and update most of your information in GigTools, and you can ask us to:

• give you a copy of your personal information;
• correct information that's wrong;
• delete your account and personal information;
• stop certain uses, such as marketing messages.

Email support@gigtools.net and we'll respond within 30 days. We may need to confirm your identity first. Depending on where you live (for example, California or the European Union), you may have additional rights under local law, including the right to complain to a data protection authority. We won't treat you differently for using your privacy rights.

GigTools isn't meant for children under 13, and we don't knowingly collect their personal information. If you think a child has given us information, contact us and we'll delete it.

GigTools is based in the United States, and information is stored and processed in the United States. If you use GigTools from elsewhere, your information will be transferred to the United States.

We may update this policy. If we make significant changes, we'll let account holders know by email or in the app before they take effect. The date at the top shows when it last changed.

Questions or requests about privacy: support@gigtools.net. Jenisan, Inc., operator of GigTools.