Privacy Policy
Effective date: October 15, 2026
1. Who We Are
GoSho is a tour management platform that provides routing, scheduling, and operational tools for artists, tour managers, and touring crews. When this policy refers to “GoSho,” “we,” “us,” or “our,” it means the operators of the GoSho service.
2. Data We Collect
Account data
When you create an account we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name and profile photo from Google.
Organization and member profiles
Organization administrators may enter member profile data including legal name, date of birth, phone number, passport details, TSA Known Traveler information, travel preferences (airport, seating), and dietary or allergy notes. This data is stored to support touring logistics and is scoped to the organization that entered it.
Tour and operational data
We store tour schedules, venue information, hotel details, contacts, guest lists, routing data, and uploaded documents that you create within your workspace.
Email you connect
If you are an organization manager and choose to connect a Gmail or Google Workspace mailbox, GoSho can search and preview messages in it when you ask. Only you can search that mailbox in GoSho. Search results Road Dog shows you (subject, sender, and a short snippet) are saved with that Road Dog conversation. Messages and attachments you choose to import become part of your organization's tour records. Nothing else in the mailbox is stored. See Google user data below.
Device and usage data
We collect device push tokens for mobile notifications, session activity logs for security auditing, and anonymized product analytics to improve GoSho.
3. How We Use Your Data
- Provide and operate the GoSho platform and its features
- Authenticate your identity and secure your account
- Deliver mobile push notifications you have opted into
- Send account and tour email, such as invitations and Day Sheets
- Look up and track the status of flights on your tour
- Read the text of documents and email attachments you add so AI features can use them; files are checked for malware and parsed in an isolated service first, except some PDFs, which our AI provider reads directly
- Generate AI-assisted schedule suggestions and document extraction (your content is sent to our AI provider for processing and is not used to train models)
- Search, preview, and import the Gmail messages you choose, if you connect a mailbox
- Monitor application errors and performance
- Improve the product based on aggregated, anonymized usage patterns
4. Third-Party Services
We use the following third-party services to operate GoSho:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, database, file storage | All account and application data |
| Vercel | Application hosting | Request metadata, server logs |
| Google Maps Platform | Routing, directions, venue search | Addresses, coordinates, place queries |
| Google Gemini (AI) | Schedule suggestions, document and email extraction | Tour content, documents (some PDFs as uploaded), Road Dog conversations, and emails you send to AI features |
| Google Cloud (Cloud Run) | Isolated malware scanning, document parsing, and text recognition | Files and email attachments you add to GoSho (some PDFs are read directly by Google Gemini instead) |
| Google (Gmail API) | Access to a mailbox you connect | Your authorization; GoSho receives the messages you search, preview, or import |
| Composio | For Gmail connections set up through Composio: manages the connection and relays GoSho's read requests to Gmail | Gmail authorization tokens, and the messages and attachments GoSho reads at your request |
| Resend | Transactional email | Recipient names and email addresses, and email content including Day Sheet PDFs |
| AeroDataBox (via RapidAPI) | Flight status lookup and live flight tracking | Flight numbers and dates (no passenger details) |
| Expo (with Apple Push Notification service and Firebase Cloud Messaging) | Mobile push notification delivery | Device push tokens, notification text, and links to the related item in GoSho |
| PostHog | Product analytics | User ID, email, app role, usage events |
| Sentry | Error monitoring and performance | Error traces, session replays (sampled) |
When you choose to request a ride from the mobile app, GoSho opens Uber, Lyft, or Bolt with your destination (for example, your hotel's name, address, and location). Those services' own privacy policies apply to what you do there.
We do not sell your data to any third party. Third-party services process data only as necessary to provide their service to us.
5. Google User Data
This section applies when you connect a Gmail or Google Workspace mailbox to GoSho.
- What we access. Google asks you to approve GoSho's access when you connect. Depending on how your organization's connection is set up, that approval may cover read-only access or full mailbox access. Either way, GoSho only reads mail: it never sends, changes, labels, or deletes messages in your mailbox. GoSho reads only when you search, preview, or import. A preview reads the whole conversation the message belongs to, including replies you did not select, so it can show you that conversation.
- How we use it. Only to show you the search results and previews you ask for, and to import the messages and attachments you choose into your organization's tour records, where Road Dog extracts tour details for you to review. Search results Road Dog shows you are saved with that Road Dog conversation, and Google Gemini reads them as part of the conversation if you keep chatting; previewed messages you do not import are not stored.
- Who it is shared with. Messages and attachments you choose to import are read by Google Gemini to extract tour details and stored in Supabase; attachments are scanned and parsed by Google Cloud first, except some PDFs, which Google Gemini reads directly. If your connection was set up through Composio, GoSho's read requests are relayed by Composio. See Third-Party Services. Once imported, they are available to your organization in GoSho. We do not sell Google user data or use it for advertising, and we do not use it to develop, improve, or train generalized AI or machine-learning models.
- Human access. No one at GoSho reads your Gmail data unless you ask us to (for example, for support), it is needed for security purposes such as investigating abuse, or the law requires it.
- Disconnecting and deletion. Disconnecting from the Gmail Operations Inbox card in your organization settings stops all access and removes GoSho's stored credential. You can also revoke GoSho's access from your Google account's third-party access page; that stops access at Google, and GoSho marks the connection as needing attention the next time it tries to read. Disconnect in GoSho to remove the stored credential. Messages you already imported stay with your organization's records until an organization owner or admin deletes them.
GoSho's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Data Storage and Security
Your data is stored in Supabase-hosted infrastructure. We use row-level security policies to ensure users can only access data within their own organizations. Sensitive profile fields such as passport numbers are stored with restricted access and only display-safe suffixes (last 4 digits) are shown in the interface.
Authentication sessions are secured with HTTP-only cookies, and all data is transmitted over HTTPS.
7. Data Retention
We retain your data for as long as your account is active. You can delete your account yourself from your profile on the web app or Settings in the mobile app. Deletion immediately removes your login, sessions, device push tokens, travel profile (including passport, date of birth and known traveler numbers), notification settings, assistant conversations and organization memberships, and revokes any personal Gmail connection. Organizations where you are the only member are deleted with your account; if you are the only owner or admin of an organization other people still use, you must hand that role to someone first.
Schedules, documents and other records you created for an organization belong to that organization and remain, attributed to “Deleted user” with your name and contact details removed. Copies in backups and our processors’ systems are removed within 30 days, except where we are required to retain them for legal or audit purposes.
Audit logs and change history are retained for operational integrity but are not shared externally.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Request a portable copy of your data
- Object to or restrict certain processing of your data
- Withdraw consent where processing is based on consent
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, these rights apply under the GDPR or equivalent legislation. To exercise any of these rights, contact us at the address below.
9. International Transfers
GoSho's infrastructure providers may process data in regions outside your country of residence. Where data is transferred internationally, we rely on our service providers' data protection commitments and standard contractual safeguards.
10. Cookies
GoSho uses essential cookies for authentication and session management. We use a single analytics cookie through PostHog for product improvement. We do not use advertising or third-party tracking cookies.
11. Children
GoSho is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this policy from time to time. We will notify users of material changes by updating the effective date at the top of this page.
13. Contact
For privacy requests, questions, or to exercise your rights, contact us at:
support@goshotouring.com
Go to support page