Privacy Policy

1. What We Store

Account Information: Email address, display name, and authentication credentials (managed via Firebase Authentication, including Google Sign-In).

Project Data: Structured business data you provide during voice sessions — extracted interview answers (product type, budget, timeline, tech stack), not raw conversation transcripts. AI-generated artifacts (reports, market analyses, competitor cards, brand concepts) and session metadata (duration, timestamps).

Payment Data: Payment processing is handled entirely by our Merchant of Record. We do not store credit card numbers or payment credentials.

2. What We Do NOT Store

Audio recordings: Voice input is streamed in real-time to Google Gemini AI and discarded immediately after processing. No audio files, no voice fingerprints, no recordings exist on our servers at any point.

Raw conversation transcripts: We store structured summaries and extracted data fields, not word-for-word transcripts of your sessions.

Biometric data: We do not perform voice identification, speaker recognition, or any biometric analysis.

3. AI Processing & Model Training

Your voice and text are processed by Google Gemini AI (paid API tier). Under Google's Gemini API Terms of Service:

• Your data is NOT used to train or improve Google's AI models
• Input data is processed for generating responses and discarded
• Google acts as a data processor, not a data controller

GoNoGo does not train any proprietary AI models. We do not use your business ideas, strategies, or session data for any form of machine learning training.

3a. Data Collected from Survey Respondents (Non-Users)

When you respond to a Reality Check survey, you are interacting with the Service as a non-registered participant. Here is what we collect and how we handle it:

• No personal identifiers: We do not collect your name, email address, IP address, or any information that identifies you personally
• Survey responses only: We store your answers (ratings, text feedback, selections) in anonymized form, linked only to the survey ID
• Purpose: Your responses are used solely to compare real-world feedback against AI-generated predictions within the survey creator's project
• No tracking: We do not use cookies, analytics, or tracking pixels on survey pages
• No AI training: Your responses are not used to train AI models
• Retention: Survey responses are stored for the lifetime of the associated project. When the project or the creator's account is deleted, all responses are permanently removed

Legal basis (GDPR): Legitimate interest — anonymous market research data collection where no personal data is processed.

3b. Data Collected from Landing Page Visitors

When you submit your email address via a lead capture form on a GoNoGo-published landing page:

• Email address: Stored in the project creator's account as a lead
• Purpose: To allow the project creator to contact you about their product or service
• No additional tracking: We do not use cookies, analytics, or tracking pixels on landing pages
• Responsibility: The project creator is the data controller for leads collected via their landing page. GoNoGo acts as a data processor
• Deletion: Lead data is removed when the associated project or account is deleted

Legal basis (GDPR): Consent — by voluntarily submitting your email, you consent to being contacted by the landing page creator.

4. How We Use Your Information

• To provide AI voice sessions and generate reports
• To personalize your experience and remember context across sessions
• To process purchases and manage your account
• To communicate service updates and security alerts
• To detect abuse, fraud, and technical issues

Email Notifications: We send transactional and service emails to your registered email address, including: report completion alerts, design generation notifications, session summaries, Reality Check response alerts, and daily AI digests. You can manage your email notification preferences at any time in Settings. We do not send marketing emails or share your email with third parties for promotional purposes.

We do not sell your data. We do not use it for advertising. We do not share it with third parties beyond the infrastructure services listed below.

5. Third-Party Services

• Google Gemini AI — real-time voice conversation and analysis (paid API, no training)
• Google Cloud Platform — backend infrastructure (Cloud Run, region: me-west1)
• Firebase / Firestore — authentication and data storage
• Vercel — frontend hosting
• Google Search API — market research web searches during sessions

6. Data Storage & Security

Your data is stored in Google Cloud Firestore with:

• Encryption at rest (AES-256) and in transit (TLS 1.3)
• Server location: me-west1 (Israel)
• Access controlled via Firebase Authentication + IAM policies
• No public-facing database endpoints

7. GDPR & International Compliance

We are committed to compliance with the EU General Data Protection Regulation (GDPR):

• Legal basis: Legitimate interest (service delivery) and consent (account creation)
• Data location: Israel, which holds an EU adequacy decision, meaning it is recognized as providing adequate data protection under GDPR
• Data minimization: We store only structured business data, not raw audio or full transcripts
• Right to erasure: Full project and account deletion available at any time
• Data portability: Reports can be exported as PDF; full data export available on request

Regarding the EU AI Act: GoNoGo operates as a business analysis tool, not a high-risk AI system. We do not make automated decisions that have legal or similarly significant effects on users. AI-generated reports are advisory and require human judgment for any business decisions.

8. Data Retention & Deletion

We retain your data for as long as your account is active.

Project Deletion: When you delete a project, ALL associated data is permanently and irreversibly removed:

• Interview data and conversation summaries
• AI-generated reports and artifacts
• Brand assets, wireframes, and mockups
• Research data (competitors, market analysis)
• Session metadata and context

This deletion is permanent. We do not retain backup copies of deleted project data.

Account Deletion: You may permanently delete your entire account via Settings. This removes ALL data associated with your account:

• Your profile, display name, and avatar
• All projects and their complete contents (as described above)
• All Reality Check surveys and collected responses
• All published landing pages and collected leads
• All email notification preferences
• Your Firebase Authentication credentials

Account deletion is irreversible. We do not retain backup copies of deleted account data.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent at any time

To exercise these rights: support@gonogo.team

10. Cookies

We use essential cookies for authentication and session management only. We do not use advertising cookies or sell data to ad networks.

11. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated date. Continued use constitutes acceptance.

13. Contact

Privacy inquiries: support@gonogo.team