Privacy Policy

This Privacy Policy explains how Goalmesh ("Goalmesh", "we", "us", or "our") collects, uses, and protects information when you access or use the service available at goalmesh.com (the "Service").

1. Geographic Scope

The Service is intended solely for users located outside the European Union, the United Kingdom, and Switzerland. We do not knowingly offer the Service to individuals located in those jurisdictions, and we do not knowingly collect or process personal information from individuals located there. If you are located in those regions, you should not access or use the Service.

2. Information We Collect

• Account Information: Email address and authentication credentials. Passwords are stored as hashes (not in plain text).
• User Content: Information you choose to create or store in the Service, such as goals, habits, projects, notes, and related data.
• Technical and Usage Data: Limited technical data such as IP address, timestamps, and user agent, collected automatically for security, reliability, and abuse prevention.
• Transactional Communications: Emails sent for account-related purposes, such as account verification, security notices, and password resets.

3. How We Use Information

• Provide, operate, and maintain the Service.
• Authenticate users and manage accounts.
• Maintain security and prevent abuse or misuse.
• Diagnose technical issues and improve reliability.
• Communicate with users about the Service.

4. Cookies

We use a limited number of cookies that are strictly necessary to operate the Service, such as authentication and session cookies. We do not use cookies for advertising, tracking, or cross-site profiling.

We may also use security-related cookies and similar technologies to protect the Service and help prevent abuse (for example, bot detection and DDoS mitigation).

5. Data Sharing

We do not sell personal information. We may share limited information with service providers that help us operate the Service (such as hosting, content delivery, security, email delivery, and monitoring providers), solely for operational purposes and subject to appropriate safeguards.

These service providers may process personal information on our behalf to perform services such as delivering transactional emails, providing security and performance features at the edge (for example, content delivery, DDoS protection, and abuse prevention), hosting, and operational monitoring.

Email tracking: We do not use email open or click tracking for transactional emails. However, email delivery providers may process delivery-related metadata (such as send time, delivery status, and bounce information) to deliver messages.

6. Data Storage and Transfers

The Service is hosted in the United States. Operational monitoring and health-check systems may be located in other regions. By using the Service, you acknowledge that your information may be processed in these locations.

Some of our service providers may also process data in the United States or other jurisdictions. We use reasonable measures intended to require service providers to protect personal information and process it only for authorized purposes.

7. Data Security

We use reasonable technical and organizational measures to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information only for as long as necessary to provide the Service and for legitimate operational purposes.

If you delete your account, access is disabled immediately and your account data is permanently deleted from our primary systems. Copies of data may remain in backups for up to thirty (30) days before being automatically overwritten.

9. User Choices

You may update or delete your account information through the Service. Account deletion is irreversible and results in permanent loss of stored data, subject only to limited backup retention as described above.

10. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be available on this page.

12. Contact

If you have questions about this Privacy Policy, contact us at [email protected].