Privacy Policy

This Privacy Policy describes how Tourwire (“we”, “our”, “us”) collects, uses, and protects your information when you use our service at tourwire.co and the Tourwire mobile app.

Tourwire is a tool that helps touring musicians find venues, book tours, and manage the logistics around live performance. We built it so your data is yours and stays that way.

1. Information we collect

Account information

When you sign up, we collect your email address and a password. Passwords are hashed with bcrypt — we never see or store the plaintext. You may also provide a name, band name, phone number, and a postal address or ZIP code so we can build your profile and routing.

Data you enter

Tourwire is a place to record your touring business. You may enter:

• Venue contacts you’re researching
• Booking details (dates, guarantees, deal terms, contracts)
• Expenses, receipts, mileage logs
• Notes, outreach emails, replies, SMS conversations
• Tour routing, itineraries, gig responses, EPK content
• Information about band members you work with

This information belongs to you. We do not sell it.

Automatically collected

• Standard server logs (IP address, user agent, timestamps) for security and debugging
• Device push tokens, if you grant permission to receive notifications
• Photos you choose to capture and upload (e.g. receipts attached to expenses)

Connected Google account (Gmail & Calendar)

Connecting your Google account is optional. If you do, Tourwire requests only the scopes below, used solely to provide the features you ask for:

• Send email on your behalf (gmail.send) — to send the outreach, follow-ups, and booking confirmations you compose and choose to send.
• Read your email (gmail.readonly) — to detect replies to your outreach and show them in your Tourwire inbox, and to summarize/classify them (e.g. interested vs. pass) so you can respond faster.
• Calendar events (calendar.events) — to add confirmed shows to your Google Calendar when you ask.
• Your email address (userinfo.email) — to identify the connected account.

You can disconnect Google at any time from your Profile, which revokes Tourwire’s access.

Google API Services Limited Use

Tourwire’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features described above. We do not sell it, use it for advertising, or use it to develop, improve, or train generalized machine-learning models. Reply content may be sent to our machine-learning provider(s) solely to generate the summaries and classifications you see in your inbox; those providers process it through their APIs and do not train their models on it. Human access to Google user data is limited to security, debugging with your consent, or as required by law.

Connected social accounts (optional)

Tourwire may offer optional integrations to publish promotional content you create (e.g. show reels) to your own social accounts. If you connect one, we access only what is needed to post on your behalf at your direction — we do not read your private messages or post without your action, and you can disconnect at any time.

2. Outreach, directory data, and your responsibilities

Tourwire provides directories of venue, press, and radio contacts compiled from publicly available sources to help your research. When you use Tourwire to reach out, you decide who to contact, what to say, and when to send — and you send from accounts you own and connect (such as your own Gmail or your own SMS provider). For that outreach, you act as the data controller and the sender of record; Tourwire is a tool you operate, not the sender.

To run your booking inbox, follow-ups, and pipeline, we store the outreach data you generate — including the contacts you save or import, the messages you draft and send, delivery and send timestamps, the replies we detect, and their classification (e.g. interested vs. pass). We process this to provide the features you use, not to build a marketing product of our own, and we do not sell it.

A contact appearing in a Tourwire directory is not consent to be contacted, and is not legal permission to send to it. You are responsible for having a lawful basis to hold and contact each recipient, for honoring opt-outs and objection requests, and for complying with the laws that apply to you and your recipients — including CAN-SPAM (US) and, for anyone in the EU/EEA/UK, the GDPR and ePrivacy rules, under which cold outreach is strictly regulated. See our Terms of Service for the full allocation of these responsibilities.

3. How we use your information

• To provide and improve the service
• To send outreach, contracts, and transactional messages on your behalf, when you ask us to
• To send push notifications you have opted into
• To respond to support requests
• To comply with legal obligations

We do not sell your personal information.

4. Third-party services we use

Tourwire relies on a small number of third-party providers to operate. Each has its own privacy policy.

• Railway — application hosting (railway.app/legal/privacy)
• Google — Places API for venue discovery, Maps for routing, and (if you connect your account) Gmail to send/read outreach and Calendar to add confirmed shows
• Twilio — SMS and voice messaging
• Anthropic / OpenAI — machine-learning models used to draft outreach copy and classify venue replies; data is processed via their APIs and is not used to train their models
• Resend — sending outreach and transactional email from a Tourwire domain when you have not connected your own Gmail
• Apple — push notification delivery on iOS
• Stripe — payment processing, if and when you use paid features

We share with these providers only what is necessary for them to perform their service.

5. Data retention and deletion

We keep your data while your account is active. You can delete your account at any time from the Profile page — that removes you and every record you created (venues, bookings, contracts, expenses, messages) from the live database immediately. Routine backups may retain copies for up to 30 days before they roll off.

You can also email us at brennandug@gmail.com to request deletion or a copy of your data.

6. Your rights

You have the right to:

• Access your data — most of it is already visible to you inside the app
• Correct your data — you can edit it directly
• Export your data — email us to request an export
• Delete your account and all associated data — Profile → Danger Zone
• Withdraw consent for push notifications — iOS Settings → Tourwire → Notifications

If you are in the EU, the UK, or California, you have additional rights under GDPR and CCPA respectively. Email us to exercise any of them.

7. Security

We hash passwords with bcrypt. All traffic is served over HTTPS. We restrict server access and follow industry-standard practices for a service of our size. No service can guarantee perfect security; if a breach occurs that affects your data, we will notify you promptly.

8. Children

Tourwire is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the product evolves. When we do, we will post the new version here and update the “Last updated” date. Material changes will be announced in the app or by email.

10. Contact

Tourwire is operated by Brennan Dugan. Questions about this policy, your data, or anything else? Email brennandug@gmail.com.