Privacy Policy
Last updated October 21, 2026
This policy explains what Chiron collects, how we use it, and the choices you have. Chiron (“we”, “us”) is software for artist management companies. You use it through your company’s account.
Questions go to support@chiron.fm.
What we collect
Access requests. If you request access on chiron.fm, we receive your name, company, email address and how you heard about us, by email. We use them only to reply.
Your account. Your name, email address and sign-in details, handled by our authentication provider. We record what you do in Chiron that changes a record, and who did it, so your company can see who changed what.
Your company’s records. What your company enters or imports into Chiron: artists, shows, releases, contacts, tasks and similar work records. Your company controls this information. We process it to run the service for them.
Company credentials. Logins and API keys your company saves so Chiron can connect to services such as analytics providers. They are encrypted at rest, and every view or copy is logged.
Bank, tax and ID details. Your company may store its own bank details for receiving payments and its tax identifiers, the passport and Global Entry numbers of the artists and crew it manages, and documents that carry them. These are encrypted in the same vault as company credentials, shown only to people your company allows, and every view is logged before it happens. The numbers themselves are never sent to an AI model. Your company’s own bank details and tax identifier are printed on the agreements and invoices it generates.
Data from connected services. When your company connects a service, Chiron reads from it what the feature needs: from music analytics and touring services, streaming figures, audience data and show listings about your company’s artists; from file storage (Google Drive and Dropbox), the Drive files you pick, the shared drives and folders your company adds from its Google Drive, and in Dropbox the files and folders you browse or search in Chiron and the team folders your company adds, all read when you open them and not copied; from e-signature services (DocuSign and Dropbox Sign), the agreements you send and their signing status.
Email. If your company connects its Gmail inbox, Chiron asks Gmail only for messages from the senders your company lists, to pick up ticket counts, and skips any that turn out to be from someone else. Besides those, it reads only the names of the mailbox’s labels, to tell which artist a message was filed under. It never sends, deletes, labels or marks mail as read.
Technical data. Basic logs and error reports needed to keep the service running and secure.
Google user data
Connecting your Google account is optional. You choose what Chiron can access when you connect, and you can disconnect at any time.
What Chiron can access
- Your Google account’s email address and ID, to show which account is connected.
- Google Drive files you pick. Chiron can read only the files you select in Google’s file picker.
- The list of your Google calendars, so you can choose which ones Chiron shows.
- Google Calendar events on the calendars you choose. Chiron reads them to show your day alongside your work, and creates, changes or deletes events only when you ask.
- If your company turns on its inbox: Gmail, read only, for messages from the senders your company lists. One admin connects it, with its own consent.
- If you turn on contact suggestions: your Google Contacts and other contacts, to suggest event guests as you type.
- If your company connects its Google Drive: the shared drives and folders your company adds, read only, when someone on the team opens them. One admin connects it, with its own consent.
How Chiron uses it
- To show you files and events inside Chiron, read at the moment you ask and not stored.
- To create, change or delete a calendar event, only when you ask Chiron to.
- To import information you choose, such as shows from a tour spreadsheet you pick. What you import becomes part of your company’s records.
- To pull ticket counts from those messages and their attachments. An AI model reads them to find the numbers, and your company chooses, artist by artist, whether a count goes straight onto its show or waits for a person to check it.
- To suggest names as you add guests to an event.
What Chiron stores
The connection itself, meaning your account email and an encrypted token; which of your calendars you chose to show; and anything you choose to import. We do not store copies of your Drive files or Calendar events.
If your company turns on its inbox, Chiron keeps private copies of the attachments it read from the listed senders, the counts read from them, and for each message its sender, subject and the line it produced, so a person can check them. It also keeps a record of which messages it has read, so none is read twice.
Contact suggestions are never stored. They are read as you type and shown only to you. A contact you pick is added to the event as a guest, as a typed email is.
What we never do with Google data
- We do not sell it.
- We do not use it for advertising.
- We do not use it to train AI models, ours or anyone else’s.
- Under the AI provider’s commercial terms, models that read your messages for Chiron do not train on them.
- We do not let people read it, except with your consent, for security or legal reasons, or where the law requires it.
- We do not transfer it to others, except as needed to run the features above or as the law requires.
Limited Use
Chiron’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
Disconnect Google in Chiron under Settings, You, Connections. Chiron revokes its access at Google and archives the stored token, which no longer works. Turning off just the inbox (under Settings, Organization, Inbox) or contact suggestions (the switch under Settings, You, Connections) stops Chiron using them and archives that token, but Google keeps listing Chiron’s access until you disconnect Google entirely or remove Chiron in your Google Account’s security settings. Shows or other records you imported stay with your company, since they are part of its records.
How we use information
We use what we collect only to provide Chiron to your company: showing, organizing and updating your records; connecting the services your company chooses; keeping the service secure; and supporting you when you ask. We do not sell personal information, and we do not use it for advertising.
AI
Chiron uses AI models to read some documents and messages, such as ticket count reports and bills, so a person doesn’t have to type the numbers in. It sends them through the AI account your company connects, so your company’s own terms with that provider apply. A ticket count report goes to the model with nothing removed: the message’s new text and its PDF and image attachments. A bill goes as text only, never the file, and Chiron first cuts anything that looks like a bank or tax number. If a bank or tax label is still there after that, nothing is sent. What a model reads from a bill always waits for a person to check it. For ticket counts, your company chooses whether a count is applied directly or waits for a person. AI models never have access to stored credentials, bank details or ID numbers. Under the provider’s standard terms, it does not train on what Chiron sends, and it deletes it within 30 days unless it is flagged for a policy check or the law requires keeping it.
Who we share it with
We use service providers to run Chiron, under contracts that limit their use of your information to providing their service to us: hosting, database storage, authentication, error monitoring, email delivery, weather lookups, and maps and place search. AI processing runs through your company’s own account with the AI provider, under your company’s terms with it (see AI).
When you type in an event’s location, our servers send what you typed to Google Maps Platform to suggest places. When you send an agreement for signature, the document, the signers’ names and email addresses, and the subject and message you write go to the signing service your company uses, from your own account there. The signed copy comes back to Chiron and is filed with your company’s records.
When you add a city’s weather to your dashboard, our servers ask the weather provider for that city by its name or location. The request comes from Chiron, not your device, so the provider never receives your IP address or who you are.
Information about one artist is never shown to people at your company who do not work on that artist, unless your company grants them access.
If Chiron is reorganized, merged or acquired, information transfers to the successor, which remains bound by this policy.
We may disclose information if the law requires it, or to protect the rights and safety of our users or the service.
Retention and deletion
We keep your company’s records while your company uses Chiron. Records are archived rather than erased when someone removes them, so they can be restored.
You can ask us to close your account by writing to privacy@chiron.fm. Your company’s records belong to your company, so requests about them go through your company.
Security
Credentials and tokens are encrypted. Access to your company’s information is limited by role and by artist. Changes and credential access are logged. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as the law requires.
Your choices and rights
You can update your account information, disconnect services, and ask us to access or correct your personal information by writing to privacy@chiron.fm.
Do Not Track
Chiron does not respond to browser Do Not Track signals. We do not track you across other sites, and we do not let third parties do so through Chiron.
Children
Chiron is a business tool and is not directed to anyone under 18.
Changes
We will post changes here and update the date above. If a change materially affects how we use Google user data, we will notify you before it takes effect.