Privacy policy

Last updated: 30 October 2026

NexoGig helps independent artists manage live bookings. This policy describes what data we collect and how we use it.

What we collect

Account information (email, stage name, location) that you provide. Usage data when you browse the platform or send pitches.

Gmail integration (your sending mailbox)

If you connect your Gmail account from Sending mailbox, NexoGig requests only the gmail.send permission from Google. This lets us send messages on your behalf to the contacts you choose inside NexoGig.

We never read or store the content of your Gmail messages. We do not request the gmail.readonly, gmail.modify or gmail.metadata scopes. Your access credential (refresh token) is stored encrypted at rest and is never exposed in logs or in API responses.

Limited Use compliance

NexoGig's use and transfer to any other app of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide or improve the Sending mailbox feature, and we do not use Google user data for advertising, to develop, improve or train generalized AI models, or for any other purpose.

How we share data

We do not share data derived from your Gmail account with any third party. Operational data (account email, billing) is shared with our payments processor (Stripe) and our transactional email service (Brevo, for NexoGig-issued mail like password resets — never for outbound pitches).

When a member of an agency pastes an organiser's message to start a booking and asks NexoGig to read it, that message is sent to our AI provider (Anthropic) to be read, together with today's date and nothing else. A message that is read but never confirmed is not stored.

When you ask for an artist from their EPK with the "Book" form, NexoGig keeps what you send (the date, the place, your name, your email and, if you give them, your phone, your offer, your message and your note) and passes it to the agency that represents the artist, so that it can answer you. Only that agency's members see it; it is never shown on the EPK or on any public page. It is kept with the agency's record of your request, together with the version of the text you accepted by sending and whether you agreed to hear about its other artists. If you agreed to hear about its other artists, the agency may write to you about them later. You can withdraw that at any time by telling the agency, for example by replying to its email.

Retention

A message used to start a booking is kept on that booking as its source until a member of the agency removes it or the booking is deleted. Only members of the agency that runs the booking can open it; the artist sees that the booking was started from a message, but not the message.

Your refresh token is retained until you disconnect or delete your account. Account data is retained for as long as your account is active and for up to 30 days after deletion to satisfy regulatory and backup-rotation requirements.

How to revoke access

You can disconnect your Gmail at any time from Sending mailbox → Disconnect. You can also revoke access directly from your Google Account dashboard.

Data deletion

When you disconnect your mailbox we delete your refresh token from our database. To delete your entire NexoGig account, email privacy@nexogig.app.

Operator

NexoGig is operated by Mulhacén Labs, an autónomo registered in Spain. Contact: privacy@nexogig.app.