Privacy Policy

We collect information you provide directly, such as your name, email address, organisation details, and tour data when you create an account or use Ontourage to manage tours, itineraries, flights, hotels, and production schedules.

We also collect information automatically, including device identifiers, IP address, browser type, and usage data about how you interact with the platform, so we can keep tours running smoothly and securely.

We use your information to provide and maintain the Ontourage platform, process bookings and logistics, send you notifications about tours and updates, and improve our features.

We do not sell your personal information. We may share data with service providers who help us operate the platform under strict confidentiality obligations.

We share information only when necessary: with your team members and crew as part of running tours, with payment processors for billing, and when required by law.

Tour data you create is shared with the collaborators and crew you invite to that tour, according to the visibility settings you choose.

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time, and we will remove it within 30 days, except where we are required to keep it for legal reasons.

Depending on your location, you may have the right to access, correct, export, or delete your personal information. Contact us at privacy@ontourage.io to exercise these rights.

We protect your information using industry-standard encryption and access controls. See our Security page for more details on how we keep your data safe.

Ontourage integrates with Google services through Google APIs to help you manage your touring workflow. When you choose to connect your Google account (for example, Gmail), you grant Ontourage limited access to specific Google data on your behalf.

Scope of access: Ontourage requests only the Google API scopes necessary for the feature you are using. For email integration, Ontourage accesses your Gmail messages on a read-only basis so that venue confirmations, booking correspondence, and similar messages can be displayed within your tour workspace. We do not request, access, or store Google account passwords.

How we use Google data: Information retrieved from your Google account is used solely to provide the feature you enabled — for example, surfacing venue and supplier emails inside Ontourage so you can reference them while building itineraries and schedules. We do not use your Google data to serve personalised advertising, and we do not sell or share your Google data with third parties for their own independent purposes.

Storage and retention: Ontourage may store a limited, cached copy of the message content you choose to bring into a tour (for example, when you attach or link an email to an itinerary item) so that your team can continue to reference it. We do not retain bulk copies of your Gmail mailbox, and we do not retain Google data beyond the period needed to provide the feature, except where retention is required for legal reasons. When you disconnect your Google account or delete the linked data, we remove the associated cached content within 30 days.

Sharing: Your Google data is shared only with the collaborators and crew you invite to a tour, and only to the extent you choose to surface that data within a shared tour. We may process Google data through trusted service providers (such as our cloud hosting and infrastructure providers) who act as processors under strict confidentiality and security obligations. We do not transfer your Google data to any party for that party's independent use.

Security: Google user data is protected using industry-standard encryption in transit and at rest, and access is restricted to authorised systems and personnel only. See our Security page for more details.

Your choices: You can disconnect your Google account at any time from your account settings, which revokes Ontourage's ongoing access. Disconnecting stops new data retrieval; previously cached content you saved into a tour remains until you delete it. You may also revoke Ontourage's access directly from your Google Account security settings, and you can request deletion of your stored Google data by contacting privacy@ontourage.io.

Google's policies: Ontourage's use of information received from Google APIs adheres to Google's API Services User Data Policy, including the Limited Use requirements. We access Google data only to provide or improve the specific feature you have requested, and we do not allow any other use of that data.

Ontourage integrates with Microsoft services through the Microsoft Graph API to help you manage your touring workflow. When you choose to connect your Microsoft account (for example, Outlook), you grant Ontourage limited access to specific Microsoft data on your behalf.

Scope of access: Ontourage requests only the Microsoft Graph permissions (scopes) necessary for the feature you are using. For email integration, Ontourage accesses your Outlook mail on a read-only basis so that venue confirmations, booking correspondence, and similar messages can be displayed within your tour workspace. We do not request, access, or store your Microsoft account password.

How we use Microsoft data: Information retrieved from your Microsoft account is used solely to provide the feature you enabled — for example, surfacing venue and supplier emails inside Ontourage so you can reference them while building itineraries and schedules. We do not use your Microsoft data to serve personalised advertising, and we do not sell or share your Microsoft data with third parties for their own independent purposes.

Storage and retention: Ontourage may store a limited, cached copy of the message content you choose to bring into a tour (for example, when you attach or link an email to an itinerary item) so that your team can continue to reference it. We do not retain bulk copies of your Outlook mailbox, and we do not retain Microsoft data beyond the period needed to provide the feature, except where retention is required for legal reasons. When you disconnect your Microsoft account or delete the linked data, we remove the associated cached content within 30 days.

Sharing: Your Microsoft data is shared only with the collaborators and crew you invite to a tour, and only to the extent you choose to surface that data within a shared tour. We may process Microsoft data through trusted service providers (such as our cloud hosting and infrastructure providers) who act as processors under strict confidentiality and security obligations. We do not transfer your Microsoft data to any party for that party's independent use.

Security: Microsoft user data is protected using industry-standard encryption in transit and at rest, and access is restricted to authorised systems and personnel only. See our Security page for more details.

Your choices: You can disconnect your Microsoft account at any time from your account settings, which revokes Ontourage's ongoing access. Disconnecting stops new data retrieval; previously cached content you saved into a tour remains until you delete it. You may also revoke Ontourage's access directly from your Microsoft Account privacy settings, and you can request deletion of your stored Microsoft data by contacting privacy@ontourage.io.

Microsoft's policies: Ontourage's use of information received from Microsoft Graph adheres to the Microsoft API Terms of Use and the applicable Microsoft privacy and data protection terms. We access Microsoft data only to provide or improve the specific feature you have requested, and we do not allow any other use of that data.

We may update this policy from time to time. We will notify you of material changes by email or through the platform.

If you have questions about this Privacy Policy, contact us at privacy@ontourage.io.