Privacy Policy
Effective date: April 3, 2026
1. Who We Are
GoSho is a tour management platform that provides routing, scheduling, and operational tools for artists, tour managers, and touring crews. When this policy refers to “GoSho,” “we,” “us,” or “our,” it means the operators of the GoSho service.
2. Data We Collect
Account data
When you create an account we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name and profile photo from Google.
Organization and member profiles
Organization administrators may enter member profile data including legal name, date of birth, phone number, passport details, TSA Known Traveler information, travel preferences (airport, seating), and dietary or allergy notes. This data is stored to support touring logistics and is scoped to the organization that entered it.
Tour and operational data
We store tour schedules, venue information, hotel details, contacts, guest lists, routing data, and uploaded documents that you create within your workspace.
Device and usage data
We collect device push tokens for mobile notifications, session activity logs for security auditing, and anonymized product analytics to improve GoSho.
3. How We Use Your Data
- Provide and operate the GoSho platform and its features
- Authenticate your identity and secure your account
- Deliver mobile push notifications you have opted into
- Generate AI-assisted schedule suggestions and document extraction (your content is sent to our AI provider for processing and is not used to train models)
- Monitor application errors and performance
- Improve the product based on aggregated, anonymized usage patterns
4. Third-Party Services
We use the following third-party services to operate GoSho:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, database, file storage | All account and application data |
| Vercel | Application hosting | Request metadata, server logs |
| Google Maps Platform | Routing, directions, venue search | Addresses, coordinates, place queries |
| Google Gemini (AI) | Schedule suggestions, document extraction | Tour content submitted to AI features |
| PostHog | Product analytics | User ID, email, app role, usage events |
| Sentry | Error monitoring and performance | Error traces, session replays (sampled) |
We do not sell your data to any third party. Third-party services process data only as necessary to provide their service to us.
5. Data Storage and Security
Your data is stored in Supabase-hosted infrastructure. We use row-level security policies to ensure users can only access data within their own organizations. Sensitive profile fields such as passport numbers are stored with restricted access and only display-safe suffixes (last 4 digits) are shown in the interface.
Authentication sessions are secured with HTTP-only cookies, and all data is transmitted over HTTPS.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account or request data deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or audit purposes.
Audit logs and change history are retained for operational integrity but are not shared externally.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Request a portable copy of your data
- Object to or restrict certain processing of your data
- Withdraw consent where processing is based on consent
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, these rights apply under the GDPR or equivalent legislation. To exercise any of these rights, contact us at the address below.
8. International Transfers
GoSho's infrastructure providers may process data in regions outside your country of residence. Where data is transferred internationally, we rely on our service providers' data protection commitments and standard contractual safeguards.
9. Cookies
GoSho uses essential cookies for authentication and session management. We use a single analytics cookie through PostHog for product improvement. We do not use advertising or third-party tracking cookies.
10. Children
GoSho is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this policy from time to time. We will notify users of material changes by updating the effective date at the top of this page.
12. Contact
For privacy requests, questions, or to exercise your rights, contact us at:
support@goshotouring.com
Go to support page