Privacy Policy
Last updated: 29 June 2026
This policy explains what GoatMode collects when you use the service, why, who we share it with, and the choices you have. Plain language; no dark patterns.
Who we are
GoatMode ("we", "us") is an AI tool that turns a goal into an engineered prompt. The service is operated by [LEGAL ENTITY], [REGISTERED ADDRESS]. For any privacy request, contact [CONTACT EMAIL].
What we collect
- Account data — your email address and authentication identifiers when you sign in.
- What you type — the goals, ideas, and prompts you enter, and any answers you give to clarifying questions.
- What you upload — the contents of any files and images you attach for additional context.
- What we generate — the prompts, scores, and other outputs the engine produces from your input, which we may store so you can reopen them.
- Billing data — your subscription/credit status and payment metadata. Card details are handled by Stripe; we do not store full card numbers.
- Usage & technical data — basic events (e.g. a generation ran), and standard request data needed to operate and secure the service.
How we use it
- To run the engine and return your result, and to save your work so you can reopen it.
- To operate billing, credits, and your account.
- To secure the service, prevent abuse, and debug problems.
- To improve the product. We do not sell your personal data.
Who we share it with (sub-processors)
To run the service we send the necessary data to vendors who process it on our behalf:
- Anthropic — the AI provider. The text you type and the files/images you upload are sent to Anthropic to generate your output.
- Supabase — authentication and database (your account, saved work, usage).
- Stripe — payment processing for subscriptions and credits.
- Upstash — rate limiting / abuse prevention.
- Vercel — hosting and content delivery.
Each is bound by its own data-processing terms. [CONFIRM: accept each vendor's DPA and confirm EU transfer mechanism (SCCs) with counsel.]
Retention
We keep account, saved-work, and billing data for as long as your account is active, and for a reasonable period afterward as required for legal, tax, and security purposes. [CONFIRM specific retention periods with counsel.] You can ask us to delete your data (see below).
Your rights
Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, email [CONTACT EMAIL] and we will respond within the timeframe required by law. We will not discriminate against you for exercising these rights.
Cookies
We use strictly-necessary cookies to keep you signed in and to operate the service. We do not use them to track you across other sites. [If non-essential analytics/marketing cookies are added later, a consent mechanism will be provided for EU/UK visitors.]
Children
GoatMode is not directed to children under 16, and we do not knowingly collect their personal data.
Changes
We may update this policy; we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.
Questions about these terms or your data? Contact [CONTACT EMAIL]. GoatMode is operated by [LEGAL ENTITY], [REGISTERED ADDRESS].