Privacy Policy

Who this applies to

RMG OS is invitation-only. It is used by RMG staff and by the artists, managers and collaborators RMG invites. It is not a public service, and it is not directed at children under 13.

Information we collect

Your account

Your name, email address, role, and optionally a profile photo. Your password is held by our authentication provider in hashed form — we never see it. Two-factor authentication is required, so we also store the details needed to check your authenticator codes.

What you and your team add

The work RMG runs in RMG OS: artist profiles, songs and releases, tasks, projects, campaigns and budgets, calendar events, contacts, documents and files, and notes. Your settings — such as how you sort and filter lists, and which emails you want — are saved to your account.

Meeting notes from services you connect

If you connect a meeting recorder such as Pocket or Read.ai, that service sends RMG OS the meeting's title, date, summary, action items and, where available, its transcript. Notes you haven't attached to anything are visible only to you.

Google Calendar, if you connect it

Described in full below.

Technical information

RMG OS uses cookies only to keep you signed in. It has no advertising or analytics trackers. Our hosting providers keep standard server logs, such as IP addresses and request times, for security and troubleshooting.

Google user data

Connecting Google Calendar is optional. Each person connects their own Google account from Settings, and only after seeing and accepting Google's consent screen.

What we access

• Your Google account's email address (the openid and email permissions), so Settings can show which Google account is connected.
• Events on calendars you own (the calendar.events.owned permission). RMG OS only ever uses your primary calendar, as described next — never calendars other people have shared with you.

How we use it

• Adding your deadlines. When you set a reminder on a task, RMG OS creates an event for that deadline in your Google Calendar with the same alerts. It updates the event when the deadline moves and deletes it when you remove the reminder. It only changes events it created.
• Showing your events. When you open the RMG OS calendar, it reads your Google events for the dates on screen and shows them alongside RMG deadlines. They are shown only to you.

We do not use Google user data for any other purpose.

What we store

The connected Google email address, the time you connected, an access credential (a “refresh token”) that we encrypt with AES-256 before storing, the last error Google returned if the connection stops working, and the ID of each event RMG OS created so it can update it later. We do not store the contents of your Google Calendar events. They are fetched when you view the calendar and are not saved.

Who we share it with

We do not sell Google user data or share it with anyone, apart from the hosting and database providers that run RMG OS on our behalf (listed below), who process it only to provide their service to us. We do not use Google user data for advertising. We do not send it to AI tools, and we do not use it to develop, improve or train AI or machine-learning models. No one at RMG reads it unless you ask us to, or it is needed for security or to comply with the law.

Limited Use

RMG OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deletion

Choose Disconnect under Google Calendar in Settings. RMG OS revokes its access at Google and deletes the stored credential and connected email straight away. You can also remove access from your Google Account permissions page. Deadline events already added to your calendar stay there until you delete them. To have anything else deleted, email andrew@romanticmusic.io.

How we use information

• To run RMG OS and the label's work in it.
• To send the emails you've chosen — reminders, a message when someone assigns you a task, and a daily summary — which you can turn off in Settings.
• To keep accounts secure, prevent misuse, and fix problems.
• To comply with the law.

AI features

Some tools in RMG OS — such as asking questions of the workspace, turning notes into tasks, and drafting plans — send what you submit, and the workspace records needed to answer it, to Anthropic's API to generate a response. Under Anthropic's commercial terms, content sent through its API is not used to train its models. Suggested changes are shown to you for review before anything is saved. Google user data and stored account credentials are never sent to AI tools.

Service providers

We use these providers to run RMG OS. Each handles data only to provide its service:

• Supabase — database, sign-in and file storage
• Vercel — hosting
• Postmark — sending email
• Anthropic — AI features, as described above
• Google — Google Calendar, if you connect it
• Pocket and Read.ai — meeting notes, if you connect them

We may also disclose information if the law requires it, or to a buyer or successor if RMG's business is sold or reorganised, under the same protections.

Security

All traffic is encrypted in transit. Every account requires two-factor authentication, and sessions end after seven days. Access is limited by role and by artist, and enforced by the database itself. Stored account credentials and Google tokens are additionally encrypted by RMG OS with AES-256. No system is perfectly secure, and we'll tell affected people promptly if we learn of a breach.

How long we keep it

We keep information for as long as your account is active or as needed for the label's work and legal obligations. If you ask us to delete your account, we delete or anonymise your personal information within 30 days, unless we must keep it by law.

Your choices

You can see and edit your profile and email settings in RMG OS, and disconnect Google Calendar at any time. To ask for a copy of your information, a correction, or deletion, email andrew@romanticmusic.io. Depending on where you live, you may have further rights under local law, and we'll honour them.

Changes

If we change this policy, we'll update the date at the top, and tell users of RMG OS about significant changes before they take effect.

Contact

Romantic Music Group LLC — andrew@romanticmusic.io