Privacy Policy

GO AI EZ Privacy Policy · Effective: [DATE] · [COMPANY LEGAL NAME], [ADDRESS] · [PRIVACY EMAIL]

1. Scope & Roles. This Policy covers personal information we handle: (a) as a business for our own sites, marketing, and customer accounts ("Business Data"); and (b) as a service provider/processor for our business customers when we process their end customers' information to provide the Services ("Service Data"). For Service Data, the business you interacted with is responsible for its practices; contact them first, and see §8 for how we assist. The Data Processing Addendum governs Service Data with our customers.

2. What We Collect. You provide: account and contact details, business information, billing details (processed by our payment processor — we don't store full card numbers), content and contacts you upload, support communications. Automatically: device/log data, cookies and similar technologies (see Cookie Notice), product usage, and — on customer websites and hosted pages running our measurement code — page views, events, and interactions collected for that business. From others: platform integrations you connect (Google, Meta, Microsoft, accounting), public business listings, and service providers.

3. How We Use It. To provide, secure, support, and improve the Services; to set up messaging and integrations you request; to bill; to communicate service and (where permitted) marketing messages; to comply with law; and to create de-identified, aggregated analytics and benchmarks that do not identify any person or customer.

4. Sharing. With service providers under contract (hosting, telecom, payments, email, AI processing, analytics) acting on our instructions; with platforms you connect at your direction; within our corporate group; in a merger/sale with notice; to comply with law or protect rights and safety. We do not sell personal information, and we do not share it for cross-context behavioral advertising. A current subprocessor list is at [TRUST URL].

5. Cookies & Signals. Our sites and hosted pages use first-party cookies/technologies per the Cookie Notice; consent banners are shown where required; we honor Global Privacy Control signals as opt-outs where applicable law provides them.

6. Retention. Business Data for the account life plus [24] months (billing/tax records per legal requirements); Service Data per customer instruction and our DPA (default: deleted or de-identified within [30] days of verified deletion instruction or contract end, backup cycles excepted). Consent and suppression records are retained as compliance records for [5] years. ⚖️ NOTE: counsel to confirm retention table.

7. Security. Encryption in transit and at rest for sensitive stores, access controls and role scoping, audit logging, and tested backups. No method is 100% secure; report concerns to [SECURITY EMAIL].

8. Your Rights. Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to appeal. Submit requests to [PRIVACY EMAIL] or [RIGHTS URL]; we verify and respond within required timelines and do not discriminate for exercising rights. For Service Data, we forward requests to the responsible business and assist them. Authorized agents accepted per law. ⚖️ NOTE: counsel to tailor state-law sections (CA/CO/CT/VA/UT et al.) and confirm whether a "Notice at Collection" and CPRA-specific disclosures are appended.

9. Children. The Services are for businesses and not directed to children under 13 (or as defined locally); we do not knowingly collect their data — contact us for removal.

10. International. We operate from the United States; where data transfers require safeguards, we use appropriate mechanisms per the DPA. ⚖️ NOTE: confirm whether EU/UK offering is in scope at launch; if not, say so plainly here.

11. Changes & Contact. We'll post updates with a new effective date and notify material changes. Contact: [PRIVACY EMAIL] / [ADDRESS].