Privacy Policy
Last updated: February 20, 2026
Introduction
GoalPath ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Authentication credentials
- Profile information you choose to provide
Project Data
When you use GoalPath, we collect:
- Projects, milestones, and tasks you create
- Team member information and assignments
- Activity logs and usage data
- Comments and collaboration data
Automatically Collected Information
We automatically collect:
- Device and browser information
- IP address and location data
- Usage patterns and feature interactions
- Performance and error logs
How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services
- Process your transactions and send notifications
- Respond to your comments and questions
- Send you technical notices and support messages
- Detect and prevent fraud and abuse
- Analyze usage patterns to improve user experience
Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Team Members: Data you share within your projects is visible to your team members
- Service Providers: Third-party services that help us operate (hosting, analytics, payment processing)
- AI Services: We use OpenAI's API to generate progress reports and summaries. OpenAI has a zero data retention policy and does not use customer data for training models. Your project data is processed only to generate your reports and is immediately discarded by the AI service.
- Legal Requirements: When required by law or to protect our rights
Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Regular backups and disaster recovery procedures
Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to or restrict certain processing
- Export your data in a portable format
- Withdraw consent at any time
Data Retention
We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal obligations.
Cookies and Tracking
We use cookies and similar tracking technologies to improve your experience, analyze usage, and remember your preferences. You can control cookies through your browser settings.
Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: hello@goalpath.app