Privacy & Data Policy

This policy describes how we handle personal information when you use the Goldilocks Service.

Information We Collect

• Email addresses provided for invite requests, account registration or support.
• Chat transcripts and conversation summaries, including any customer or order data you choose to share.
• Documentation files and links uploaded through the admin panel.
• Session cookies for authentication and tenant selection.

How We Use Information

We use your data to operate the Service, generate AI responses via OpenAI, send emails and maintain your account settings. We do not sell your personal information.

Sharing

We share data only with service providers that help us run the Service, such as cloud hosting, email providers and OpenAI. These providers process data under our instructions.

Retention

Conversation logs and uploaded content are retained as long as necessary to provide the Service and may be deleted upon request.

Cookies

We use essential cookies to maintain your session. We do not use advertising cookies or third‑party analytics.

Data Processing

To the extent we process personal data on your behalf, we do so as a service provider under laws such as the GDPR and CCPA. We will sign a Data Processing Addendum upon request and assist with data subject rights.

Security

Data is stored in secured databases with access controls. Passwords are hashed and all network traffic uses TLS. We follow industry best practices to protect your information.

For questions about this policy, contact admin@goldilocks.chat.

Back to Home