Privacy Policy

Account information: when you register, we collect your name, email address, organization, and authentication credentials (passwords are stored only as salted bcrypt hashes).

Usage data: we collect log data such as IP address, browser type, pages/products accessed, timestamps, and interaction events, used to operate and improve the Services.

Content you provide: data you create or upload within the products (e.g. documents, contacts, records, files) is stored to deliver the Service to you.

Cookies and local storage: we use strictly-necessary cookies/tokens to keep you signed in and remember preferences. We do not sell this data.

To provide, maintain, and secure the Services and authenticate your access.

To personalize your workspace, remember preferences, and keep products in sync.

To detect, prevent, and respond to fraud, abuse, and security incidents.

To communicate with you about service-related notices and, where permitted, product updates.

To comply with legal obligations and enforce our Terms of Service.

Where applicable (e.g. under the GDPR), we process personal data on the bases of: performance of a contract, your consent, our legitimate interests in operating the Services, and compliance with legal obligations.

Service providers: we share data with infrastructure and processing vendors (e.g. cloud hosting, content delivery) strictly to operate the Services, under contractual confidentiality obligations.

Within your organization: data created in an organization workspace may be visible to other authorized members and administrators of that organization.

Legal: we may disclose information if required by law, regulation, legal process, or to protect the rights, property, or safety of users and the public.

We do not sell your personal information.

Application data is stored in MongoDB-compatible databases hosted on Oracle Cloud Infrastructure; object/file storage uses OCI Object Storage. Static frontends are served via Cloudflare Pages.

We apply industry-standard safeguards including encryption in transit (TLS), role-based access control, network isolation (private subnets), and least-privilege credentials.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security but work continuously to protect your data.

We retain personal data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

You may request deletion of your account and associated personal data, subject to retention required by law.

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to or withdraw consent for certain processing.

To exercise these rights, contact us at legal@gocools.com. We will respond within the timeframe required by applicable law.

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

The Services are not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated effective date and, where appropriate, notified to you.

Questions about this Privacy Policy can be sent to legal@gocools.com.